Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft
File: sszaHFSHy5ONV-phzC1i0xBw21E.mft (raw, json)
Hash identifier: 1LHh6ojgSeGJDVZ+FmwgCkbvIqWajXhyiAbz3ljfTu0=
Subject key identifier: 45:55:F9:CA:BE:12:8B:0F:E8:FA:C0:C4:99:FA:A5:19:B0:3B:71:36
Authority key identifier: B2:CC:DA:1C:54:87:CB:93:8D:57:EA:61:CC:2D:62:D3:10:70:DB:51
Certificate issuer: /CN=b2ccda1c5487cb938d57ea61cc2d62d31070db51
Certificate serial: 0198D66007C338E1A10391BD29BDCF593ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sszaHFSHy5ONV-phzC1i0xBw21E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft
Manifest number: 0C51
Signing time: Sat 23 Aug 2025 10:01:14 +0000
Manifest this update: Sat 23 Aug 2025 10:01:14 +0000
Manifest next update: Sun 24 Aug 2025 10:01:14 +0000
Files and hashes: 1: 3_xmC1ho9_8ZqNCvSg_4Ci-eALc.roa (hash: F7LfywH9mxXY2KxRJjRgggVLiwyV5wwnZqXcnTIZ+/Y=)
2: sszaHFSHy5ONV-phzC1i0xBw21E.crl (hash: dx5EEF/vLHBEQzYlSx91UBco+869aEY+0wzhGJXV27I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sszaHFSHy5ONV-phzC1i0xBw21E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:07:c3:38:e1:a1:03:91:bd:29:bd:cf:59:3a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ccda1c5487cb938d57ea61cc2d62d31070db51
Validity
Not Before: Aug 23 10:01:14 2025 GMT
Not After : Aug 24 10:01:14 2025 GMT
Subject: CN=4555f9cabe128b0fe8fac0c499faa519b03b7136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9c:07:de:d1:2f:e1:f4:2d:59:b7:c0:bf:af:
42:92:22:f3:68:e3:46:4d:a1:ca:b2:8c:aa:33:55:
4a:2e:ce:20:aa:7a:71:03:df:d6:7e:43:ea:fe:78:
cf:a2:40:30:77:6f:02:4c:2b:f8:cf:94:78:6c:ad:
56:4e:76:bb:9e:b3:a9:1d:ef:f8:0a:29:a3:ac:57:
f2:af:4c:1c:82:c3:e7:08:48:13:9e:c9:be:7d:c7:
0d:28:cd:fb:dc:cc:69:06:89:ea:62:2b:58:52:f8:
64:31:83:08:f7:db:c7:ed:ec:ed:65:f8:65:cc:21:
ba:39:ce:31:89:ce:3d:c5:a2:9f:89:3b:4b:93:7c:
14:bd:81:6f:2c:89:2b:ab:68:59:64:69:c2:3a:35:
6b:d3:54:8d:d1:d4:5e:16:94:4f:dd:15:db:a4:ef:
58:a2:e5:47:09:5e:44:8e:fd:24:c1:e4:75:2b:68:
83:8b:ed:1e:3f:f9:7d:46:f5:86:dd:16:da:e1:9f:
22:c2:52:97:33:67:d0:08:30:66:2b:4e:dd:6a:2f:
a5:7c:c6:6f:ff:d9:8f:2f:37:af:f1:3c:bd:8e:91:
6b:ba:81:8f:79:82:bf:81:94:8c:59:53:7b:2a:26:
2b:aa:de:a6:bd:4f:78:ac:79:18:d5:20:8d:d0:62:
cf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:55:F9:CA:BE:12:8B:0F:E8:FA:C0:C4:99:FA:A5:19:B0:3B:71:36
X509v3 Authority Key Identifier:
keyid:B2:CC:DA:1C:54:87:CB:93:8D:57:EA:61:CC:2D:62:D3:10:70:DB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sszaHFSHy5ONV-phzC1i0xBw21E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b9:f4:b1:4e:11:52:f1:79:ee:0b:65:10:ba:8e:dd:a9:1e:
c3:13:75:65:e0:1b:2b:a5:5d:10:98:91:22:89:7d:06:d6:4c:
78:63:6f:7f:92:8f:cb:53:98:10:8b:76:d2:e4:1d:bf:68:bd:
ff:74:0b:af:99:af:66:9a:7e:c1:1c:90:29:03:37:26:25:5c:
bf:d3:fc:77:37:2f:e3:c5:ce:35:0d:f4:43:74:06:c6:90:ce:
70:c2:5b:6a:a8:f6:89:0b:2b:d0:15:9a:23:4a:d4:10:ff:50:
c7:25:ba:06:25:e3:94:17:de:31:5e:94:55:18:d3:9d:78:4c:
90:5a:fc:1b:0c:27:7c:67:1d:a9:1f:c2:49:1e:da:0b:3f:8b:
54:31:67:9b:97:84:b5:a5:e9:40:ee:51:12:f6:ce:bc:eb:74:
ae:79:51:be:10:b6:df:d4:5a:90:78:1b:ef:41:89:8f:38:07:
19:75:e1:1b:ef:8b:d9:de:21:8c:a0:e3:27:9d:6b:84:05:b6:
08:8d:cd:e8:b3:1a:0a:5d:9e:5a:2b:22:17:93:74:09:9c:d5:
28:5b:1a:02:17:b9:29:16:27:ed:71:18:f0:bf:17:a7:71:6e:
0d:a2:32:88:7b:32:ef:f2:22:5d:7e:8c:2d:61:e1:77:b8:8d:
3f:13:b6:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYAfDOOGhA5G9Kb3PWTrMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyY2NkYTFjNTQ4N2NiOTM4ZDU3ZWE2MWNjMmQ2MmQzMTA3
MGRiNTEwHhcNMjUwODIzMTAwMTE0WhcNMjUwODI0MTAwMTE0WjAzMTEwLwYDVQQD
Eyg0NTU1ZjljYWJlMTI4YjBmZThmYWMwYzQ5OWZhYTUxOWIwM2I3MTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5wH3tEv4fQtWbfAv69CkiLzaONG
TaHKsoyqM1VKLs4gqnpxA9/WfkPq/njPokAwd28CTCv4z5R4bK1WTna7nrOpHe/4
CimjrFfyr0wcgsPnCEgTnsm+fccNKM373MxpBonqYitYUvhkMYMI99vH7eztZfhl
zCG6Oc4xic49xaKfiTtLk3wUvYFvLIkrq2hZZGnCOjVr01SN0dReFpRP3RXbpO9Y
ouVHCV5Ejv0kweR1K2iDi+0eP/l9RvWG3Rba4Z8iwlKXM2fQCDBmK07dai+lfMZv
/9mPLzev8Ty9jpFruoGPeYK/gZSMWVN7KiYrqt6mvU94rHkY1SCN0GLPPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVV+cq+EosP6PrAxJn6pRmwO3E2MB8GA1UdIwQY
MBaAFLLM2hxUh8uTjVfqYcwtYtMQcNtRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3N6YUhGU0h5NU9OVi1waHpDMWkweEJ3MjFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9lNmI3N2YtNDBlNi00YzkzLWFjMzIt
M2RiOTYxNzAzZWE5LzEvc3N6YUhGU0h5NU9OVi1waHpDMWkweEJ3MjFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9lNmI3N2YtNDBlNi00YzkzLWFjMzItM2RiOTYxNzAzZWE5
LzEvc3N6YUhGU0h5NU9OVi1waHpDMWkweEJ3MjFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU7n0sU4R
UvF57gtlELqO3akewxN1ZeAbK6VdEJiRIol9BtZMeGNvf5KPy1OYEIt20uQdv2i9
/3QLr5mvZpp+wRyQKQM3JiVcv9P8dzcv48XONQ30Q3QGxpDOcMJbaqj2iQsr0BWa
I0rUEP9QxyW6BiXjlBfeMV6UVRjTnXhMkFr8GwwnfGcdqR/CSR7aCz+LVDFnm5eE
taXpQO5REvbOvOt0rnlRvhC239RakHgb70GJjzgHGXXhG++L2d4hjKDjJ51rhAW2
CI3N6LMaCl2eWisiF5N0CZzVKFsaAhe5KRYn7XEY8L8Xp3FuDaIyiHsy7/IiXX6M
LWHhd7iNPxO2UQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:57 2025 by rpki-client