Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
File: SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft (raw, json)
Hash identifier: RljtJnDiV5sQ7pGhERuqDUSpHRVaDQ/F1XkXSjYYnr4=
Subject key identifier: 8C:76:8D:24:C2:A4:C1:13:7A:F0:17:9F:9B:86:F2:95:5F:58:77:DF
Authority key identifier: 4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3
Certificate issuer: /CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3
Certificate serial: 0198D583CCCF9B9E9305A0AD95E6443800F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
Manifest number: 0303
Signing time: Sat 23 Aug 2025 06:00:41 +0000
Manifest this update: Sat 23 Aug 2025 06:00:41 +0000
Manifest next update: Sun 24 Aug 2025 06:00:41 +0000
Files and hashes: 1: 8m2tBlzpxiqL6kK0VrkHkgcTou4.roa (hash: 0P8p9ZGo9OL3ArRsj5WLpA2L7n8Ub+2jDkN4NpO9vF0=)
2: SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl (hash: AMpoegark6T+NdyjAq9TztjN26erGJXdCNrLwodmQ8w=)
3: s4XNe0m5JYFtPI85hv2GLzYIY68.roa (hash: pE7eHdiD/UhztagcGqo6QdniDLwOOKzreXSfWjlvBJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:cc:cf:9b:9e:93:05:a0:ad:95:e6:44:38:00:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3
Validity
Not Before: Aug 23 06:00:41 2025 GMT
Not After : Aug 24 06:00:41 2025 GMT
Subject: CN=8c768d24c2a4c1137af0179f9b86f2955f5877df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:68:e0:22:c0:ea:e2:6c:02:cb:14:a4:58:de:
11:e3:c5:db:fd:71:ce:08:9f:35:71:2c:f7:50:cb:
e6:b6:7f:ac:16:4e:78:eb:46:22:3b:9b:d9:d3:66:
d2:58:64:e9:da:ce:58:c8:d5:c4:c0:d0:11:6d:1f:
76:d8:bf:6e:60:24:72:f6:d1:f7:73:b4:97:f1:47:
24:bd:68:82:82:8f:40:fd:9c:69:a5:a5:d0:8b:c4:
c4:e7:10:bb:18:84:e2:66:bd:75:46:2e:96:9d:15:
1c:51:2b:5d:20:b1:9e:e3:df:60:c4:79:90:2f:2c:
be:f5:73:c8:f7:8a:88:13:87:50:16:f0:5a:1c:2d:
c0:fa:bc:91:7d:dd:49:73:e2:3e:9a:0f:20:84:65:
6a:04:1a:8a:62:1a:5c:ef:42:54:8e:9c:36:f2:cc:
53:7b:4e:24:26:26:53:de:53:c3:c4:41:b5:dd:69:
83:1a:9c:4e:aa:d6:99:42:d5:eb:3d:f5:d3:b1:81:
52:49:60:a4:2a:d0:0e:be:17:e7:46:87:94:a0:40:
ab:61:21:84:7c:a9:7d:46:a3:1a:05:0e:8a:5a:4c:
b6:84:92:78:6c:44:5e:30:87:df:f4:bb:ec:81:66:
92:42:b7:00:1a:a9:2d:08:12:f4:ed:a1:2d:50:b7:
94:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:76:8D:24:C2:A4:C1:13:7A:F0:17:9F:9B:86:F2:95:5F:58:77:DF
X509v3 Authority Key Identifier:
keyid:4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f3:38:53:f7:37:6f:8e:d4:7e:3b:6d:e6:ff:ca:a6:7c:22:
65:99:d4:ec:3d:d9:60:ed:82:cf:05:71:d0:3f:bb:07:82:08:
f2:10:64:79:8a:6d:12:1c:be:a8:82:e5:17:21:09:e6:87:8b:
3d:ab:3c:7a:ec:88:a6:9a:41:32:44:e2:9e:ff:fd:c3:6e:71:
15:91:10:ff:85:83:e1:69:d9:f7:c1:b6:83:c9:fd:86:b4:ee:
31:08:7b:90:3a:74:ee:53:66:35:07:34:44:ae:98:55:6d:e8:
fe:38:15:dc:db:3a:9c:bd:4c:1a:39:c4:fd:45:1d:ae:35:30:
92:9a:9a:26:6a:6c:b8:08:58:9d:d0:7a:6c:63:e1:e0:23:e5:
f1:b0:d6:72:b3:ab:f9:04:0f:75:a3:dc:c4:e0:48:34:2a:ac:
15:54:52:19:8d:1a:7a:25:b2:49:8d:c3:f1:93:07:41:19:ad:
d7:88:6a:dd:e0:d9:ab:c6:83:64:74:a4:6e:0d:a2:08:4a:1d:
c4:d3:1c:1f:09:4c:74:a3:9f:b8:ac:47:b2:cc:f6:9c:ff:28:
96:ed:9e:33:ab:83:63:16:bb:06:7c:7d:4c:f9:2b:1b:85:1a:
b6:f5:f2:8d:27:80:06:aa:44:86:75:16:6d:f1:66:b4:5d:45:
d2:6d:eb:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg8zPm56TBaCtleZEOADzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMDRiY2MyZmVlMWMzYTJlMDQzODgyNjBlMTA2NDRiNjVl
NzAxZjMwHhcNMjUwODIzMDYwMDQxWhcNMjUwODI0MDYwMDQxWjAzMTEwLwYDVQQD
Eyg4Yzc2OGQyNGMyYTRjMTEzN2FmMDE3OWY5Yjg2ZjI5NTVmNTg3N2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2jgIsDq4mwCyxSkWN4R48Xb/XHO
CJ81cSz3UMvmtn+sFk5460YiO5vZ02bSWGTp2s5YyNXEwNARbR922L9uYCRy9tH3
c7SX8UckvWiCgo9A/ZxppaXQi8TE5xC7GITiZr11Ri6WnRUcUStdILGe499gxHmQ
Lyy+9XPI94qIE4dQFvBaHC3A+ryRfd1Jc+I+mg8ghGVqBBqKYhpc70JUjpw28sxT
e04kJiZT3lPDxEG13WmDGpxOqtaZQtXrPfXTsYFSSWCkKtAOvhfnRoeUoECrYSGE
fKl9RqMaBQ6KWky2hJJ4bEReMIff9LvsgWaSQrcAGqktCBL07aEtULeUTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIx2jSTCpMETevAXn5uG8pVfWHffMB8GA1UdIwQY
MBaAFEoEvML+4cOi4EOIJg4QZEtl5wHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2dTOHd2N2h3NkxnUTRnbURoQmtTMlhuQWZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81OTk3NDAtYjk2ZS00OWM0LWI2MDQt
NjNmMTk3ZmIxYzk2LzEvU2dTOHd2N2h3NkxnUTRnbURoQmtTMlhuQWZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi81OTk3NDAtYjk2ZS00OWM0LWI2MDQtNjNmMTk3ZmIxYzk2
LzEvU2dTOHd2N2h3NkxnUTRnbURoQmtTMlhuQWZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/M4U/c3
b47Ufjtt5v/KpnwiZZnU7D3ZYO2CzwVx0D+7B4II8hBkeYptEhy+qILlFyEJ5oeL
Pas8euyIpppBMkTinv/9w25xFZEQ/4WD4WnZ98G2g8n9hrTuMQh7kDp07lNmNQc0
RK6YVW3o/jgV3Ns6nL1MGjnE/UUdrjUwkpqaJmpsuAhYndB6bGPh4CPl8bDWcrOr
+QQPdaPcxOBINCqsFVRSGY0aeiWySY3D8ZMHQRmt14hq3eDZq8aDZHSkbg2iCEod
xNMcHwlMdKOfuKxHssz2nP8olu2eM6uDYxa7Bnx9TPkrG4UatvXyjSeABqpEhnUW
bfFmtF1F0m3raQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:07 2025 by rpki-client