Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
File: sdgCZnmAlE302iq0sI6dNLIKjRE.mft (raw, json)
Hash identifier: bXnWJV9QmuC8b9ywBuwjnHcoaiw7Dm/BLQteXh9Szqg=
Subject key identifier: B4:41:C1:30:FA:E6:A8:3C:5B:63:32:3F:18:EC:88:04:42:27:DF:0B
Authority key identifier: B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
Certificate issuer: /CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Certificate serial: 0198D698470F13E9F6C52924BDF5A43B3CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
Manifest number: 0683
Signing time: Sat 23 Aug 2025 11:02:40 +0000
Manifest this update: Sat 23 Aug 2025 11:02:40 +0000
Manifest next update: Sun 24 Aug 2025 11:02:40 +0000
Files and hashes: 1: So0J85BPs3UG_C6BWLfnLZ9c_3I.roa (hash: +ubxlITiYsafbFryEurkXW802YUQIUAFsrYygMwxezQ=)
2: sdgCZnmAlE302iq0sI6dNLIKjRE.crl (hash: EjibJ8qs3JLdhOKY84X4X5PBqKTdp96YWNvirHzIvtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:47:0f:13:e9:f6:c5:29:24:bd:f5:a4:3b:3c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Validity
Not Before: Aug 23 11:02:40 2025 GMT
Not After : Aug 24 11:02:40 2025 GMT
Subject: CN=b441c130fae6a83c5b63323f18ec88044227df0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:f8:0c:2a:9c:2c:64:9b:c4:10:42:26:c3:
a6:cc:65:4c:55:ac:a0:8d:64:ed:eb:2c:89:ba:a1:
43:c1:e0:02:3b:67:1c:53:03:c7:32:6e:de:05:2a:
40:e4:a1:4f:09:8c:2e:a8:7d:ee:23:b6:66:05:b5:
42:4f:05:76:60:f6:c5:b6:da:7c:40:ff:0d:11:fb:
17:0d:59:0d:0f:6c:35:37:c7:f9:5d:4d:36:a3:69:
a0:bc:e3:c2:2c:d9:6c:d6:c2:73:b0:d8:12:30:81:
41:32:8f:21:87:c7:d2:a1:0e:dd:3a:e6:06:c1:6e:
10:66:84:77:84:6e:a9:da:ff:ca:46:fd:33:6f:ba:
0e:7d:f7:6b:09:8b:49:fb:c2:dd:95:c6:ae:c0:7c:
e0:4e:76:fd:33:8f:7d:0a:bb:02:9e:e0:a5:6a:df:
75:27:9e:6c:a3:9c:cf:27:ac:04:ab:86:b9:b7:08:
80:23:cd:83:73:97:a8:f2:b3:8d:58:fb:f0:f7:9e:
86:4d:65:0e:81:88:a7:97:8b:df:38:1a:77:31:b4:
63:14:05:97:2d:2c:0d:51:8a:37:ee:d7:03:83:87:
eb:b2:a0:77:43:14:bf:3b:50:4d:39:f9:39:0e:9f:
1f:76:ec:5f:17:d0:69:c0:f9:62:05:73:46:86:b0:
2b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:41:C1:30:FA:E6:A8:3C:5B:63:32:3F:18:EC:88:04:42:27:DF:0B
X509v3 Authority Key Identifier:
keyid:B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:54:40:1c:61:d4:2c:64:ed:29:70:74:8d:0e:fd:6f:f8:3c:
d5:99:3d:48:33:e5:22:ed:e7:29:00:5f:de:52:e7:ce:68:fd:
02:0b:5e:9b:fa:43:5b:16:58:0f:44:fd:dc:0b:31:ca:a6:a1:
f5:0b:57:a2:fc:b6:ce:de:e8:36:46:ac:11:d5:56:8b:ec:c1:
ac:e1:9a:46:28:07:13:ac:b3:6f:7b:ef:51:a2:99:f2:9c:72:
ae:de:7e:a9:4d:e5:c6:81:3c:f2:8c:63:7f:42:bf:59:46:a7:
3e:5a:29:4c:79:66:59:50:67:06:9f:66:b1:27:7f:3b:d5:5d:
1b:97:41:1d:3a:36:2d:22:db:e2:ee:bf:f8:06:05:16:28:d3:
86:b4:47:f0:56:26:43:f7:a7:66:59:e2:93:17:0d:8b:f6:f2:
f6:a3:99:c5:e0:b2:30:13:31:0b:75:ca:75:b4:27:9d:2e:8b:
14:11:49:48:72:bc:dc:dc:c4:18:c9:72:6d:7b:cb:74:2d:19:
3d:3f:e5:32:13:30:7c:dd:15:fc:42:ee:54:df:c2:ee:8d:0c:
2a:8c:64:65:e7:df:76:68:99:35:15:89:d9:0c:25:32:f8:e0:
b1:d1:b8:4d:80:2b:dd:be:c9:cc:98:04:07:e0:9d:e2:3b:f9:
76:bb:03:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmEcPE+n2xSkkvfWkOzzRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZDgwMjY2Nzk4MDk0NGRmNGRhMmFiNGIwOGU5ZDM0YjIw
YThkMTEwHhcNMjUwODIzMTEwMjQwWhcNMjUwODI0MTEwMjQwWjAzMTEwLwYDVQQD
EyhiNDQxYzEzMGZhZTZhODNjNWI2MzMyM2YxOGVjODgwNDQyMjdkZjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl34DCqcLGSbxBBCJsOmzGVMVayg
jWTt6yyJuqFDweACO2ccUwPHMm7eBSpA5KFPCYwuqH3uI7ZmBbVCTwV2YPbFttp8
QP8NEfsXDVkND2w1N8f5XU02o2mgvOPCLNls1sJzsNgSMIFBMo8hh8fSoQ7dOuYG
wW4QZoR3hG6p2v/KRv0zb7oOffdrCYtJ+8LdlcauwHzgTnb9M499CrsCnuClat91
J55so5zPJ6wEq4a5twiAI82Dc5eo8rONWPvw956GTWUOgYinl4vfOBp3MbRjFAWX
LSwNUYo37tcDg4frsqB3QxS/O1BNOfk5Dp8fduxfF9BpwPliBXNGhrAr6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLRBwTD65qg8W2MyPxjsiARCJ98LMB8GA1UdIwQY
MBaAFLHYAmZ5gJRN9NoqtLCOnTSyCo0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2RnQ1pubUFsRTMwMmlxMHNJNmROTElLalJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mMTUzZTctMDdkOS00YjgxLWFhZWQt
Y2JlYzQzZmQ5MmExLzEvc2RnQ1pubUFsRTMwMmlxMHNJNmROTElLalJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9mMTUzZTctMDdkOS00YjgxLWFhZWQtY2JlYzQzZmQ5MmEx
LzEvc2RnQ1pubUFsRTMwMmlxMHNJNmROTElLalJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf1RAHGHU
LGTtKXB0jQ79b/g81Zk9SDPlIu3nKQBf3lLnzmj9Agtem/pDWxZYD0T93Asxyqah
9QtXovy2zt7oNkasEdVWi+zBrOGaRigHE6yzb3vvUaKZ8pxyrt5+qU3lxoE88oxj
f0K/WUanPlopTHlmWVBnBp9msSd/O9VdG5dBHTo2LSLb4u6/+AYFFijThrRH8FYm
Q/enZlnikxcNi/by9qOZxeCyMBMxC3XKdbQnnS6LFBFJSHK83NzEGMlybXvLdC0Z
PT/lMhMwfN0V/ELuVN/C7o0MKoxkZeffdmiZNRWJ2QwlMvjgsdG4TYAr3b7JzJgE
B+Cd4jv5drsD6g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:31:44 2025 by rpki-client