Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
File: Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft (raw, json)
Hash identifier: 0RTiHLcWP72VpJhr4crKT8lNNllQBzENIDSfSJ2LL18=
Subject key identifier: 50:CE:9C:5C:84:48:8E:E7:96:E0:8C:25:61:1E:01:D5:23:24:D7:E8
Authority key identifier: 49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
Certificate issuer: /CN=49de578dac792d95e217d9871e04f66973bb7eb0
Certificate serial: 0198D4E00E99FE7BEF22C8936150B83C74F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
Manifest number: 067B
Signing time: Sat 23 Aug 2025 03:01:50 +0000
Manifest this update: Sat 23 Aug 2025 03:01:50 +0000
Manifest next update: Sun 24 Aug 2025 03:01:50 +0000
Files and hashes: 1: Mz51AcN2wZIHDhS3_4YmvmIRGhQ.roa (hash: uO7pu6+EQ/hXwHNJ2EqENUuB+uo9LMGBRXK6r0igHMI=)
2: Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl (hash: CMD59rMwWyYahPdLpH/BO54e2+IUEEpDUfyqp3XgSh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:0e:99:fe:7b:ef:22:c8:93:61:50:b8:3c:74:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49de578dac792d95e217d9871e04f66973bb7eb0
Validity
Not Before: Aug 23 03:01:50 2025 GMT
Not After : Aug 24 03:01:50 2025 GMT
Subject: CN=50ce9c5c84488ee796e08c25611e01d52324d7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:10:e2:b6:14:69:be:89:4f:ef:d7:27:ca:f4:
7f:b6:fb:63:e6:bc:dc:04:b5:a6:88:6a:a9:60:0d:
cb:36:76:22:40:66:05:b7:14:16:fd:6d:51:56:8e:
f4:bd:bd:83:e9:d9:49:29:6f:d8:c8:e5:ba:28:45:
a4:1e:ab:b1:bb:92:3e:e9:f5:38:25:35:d6:96:be:
1d:a8:35:4a:bf:ba:e8:dc:d3:61:03:82:ef:52:20:
8e:f2:be:3b:74:a8:01:4d:8b:dc:57:8e:ee:e5:4e:
f9:d5:ce:6b:d1:30:c9:ad:29:93:41:cf:35:91:e9:
ae:93:65:bd:3f:cd:26:05:6f:23:d1:23:80:87:de:
8b:2a:0f:3b:6e:f0:2c:1e:5f:b4:ee:e2:4a:d8:2b:
1c:22:7d:34:44:0b:9d:09:ae:cd:c9:a5:01:4c:d4:
01:91:8b:54:cd:9a:9e:71:b6:82:32:25:d9:a9:3e:
7d:5a:90:c8:fc:64:f4:8a:25:8f:35:36:69:86:32:
0e:52:50:1c:3d:96:d3:e9:41:7b:ae:b6:35:96:f3:
d3:09:05:38:91:1c:29:ca:d9:20:e8:1e:51:d8:34:
b8:51:63:d4:d4:33:f5:99:4d:3b:8a:43:0e:21:6c:
05:35:fe:87:cf:3b:89:93:d2:83:92:ab:c3:c7:37:
e8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CE:9C:5C:84:48:8E:E7:96:E0:8C:25:61:1E:01:D5:23:24:D7:E8
X509v3 Authority Key Identifier:
keyid:49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f9:c0:a2:01:b7:ab:74:6e:40:fa:63:26:ca:45:32:57:cb:
59:4c:43:3b:ea:ab:42:2e:02:15:de:d4:4f:d5:e1:e6:59:77:
d0:9c:bc:34:48:06:6f:43:a9:a8:e3:e8:7a:ce:06:85:ce:5e:
88:63:38:df:c3:1e:10:c7:d8:71:69:f5:53:0c:29:dc:71:19:
95:11:0b:d7:ee:c5:61:21:6e:45:f9:0b:73:5a:af:cc:90:af:
f7:a7:c6:eb:82:fc:4c:f2:c0:66:82:80:c2:fb:17:7b:3a:43:
4a:d6:ae:bd:82:2c:74:87:14:96:17:9d:82:8e:59:df:bf:97:
66:b8:e7:97:80:75:6f:83:3e:45:f2:17:6d:48:8c:02:b9:b7:
87:a3:f5:70:ba:7c:f7:87:86:21:95:8a:c6:e1:c3:2f:14:d6:
85:dd:64:98:64:cb:f5:c4:f3:94:ee:89:77:9c:da:bc:e5:85:
2a:1b:7c:72:bb:b0:3a:65:d9:fa:ef:a4:d0:0b:6e:5e:26:b5:
6d:fd:22:d4:8a:5d:04:87:5c:0a:00:2a:c6:c5:8b:fc:95:05:
6c:79:ab:01:a3:fb:de:b9:4b:09:9b:1e:29:cc:82:02:f7:dd:
6b:39:19:cb:34:32:90:9f:2a:8d:8d:c7:13:df:7f:c7:c1:30:
b1:f8:81:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4A6Z/nvvIsiTYVC4PHTwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZGU1NzhkYWM3OTJkOTVlMjE3ZDk4NzFlMDRmNjY5NzNi
YjdlYjAwHhcNMjUwODIzMDMwMTUwWhcNMjUwODI0MDMwMTUwWjAzMTEwLwYDVQQD
Eyg1MGNlOWM1Yzg0NDg4ZWU3OTZlMDhjMjU2MTFlMDFkNTIzMjRkN2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRDithRpvolP79cnyvR/tvtj5rzc
BLWmiGqpYA3LNnYiQGYFtxQW/W1RVo70vb2D6dlJKW/YyOW6KEWkHquxu5I+6fU4
JTXWlr4dqDVKv7ro3NNhA4LvUiCO8r47dKgBTYvcV47u5U751c5r0TDJrSmTQc81
kemuk2W9P80mBW8j0SOAh96LKg87bvAsHl+07uJK2CscIn00RAudCa7NyaUBTNQB
kYtUzZqecbaCMiXZqT59WpDI/GT0iiWPNTZphjIOUlAcPZbT6UF7rrY1lvPTCQU4
kRwpytkg6B5R2DS4UWPU1DP1mU07ikMOIWwFNf6HzzuJk9KDkqvDxzfoKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDOnFyESI7nluCMJWEeAdUjJNfoMB8GA1UdIwQY
MBaAFEneV42seS2V4hfZhx4E9mlzu36wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2Q1WGpheDVMWlhpRjltSEhnVDJhWE83ZnJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lN2M3ZWItZjdjNi00M2I3LWE2ZmYt
NjNlMDIwZmVlY2Y5LzEvU2Q1WGpheDVMWlhpRjltSEhnVDJhWE83ZnJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9lN2M3ZWItZjdjNi00M2I3LWE2ZmYtNjNlMDIwZmVlY2Y5
LzEvU2Q1WGpheDVMWlhpRjltSEhnVDJhWE83ZnJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATvnAogG3
q3RuQPpjJspFMlfLWUxDO+qrQi4CFd7UT9Xh5ll30Jy8NEgGb0OpqOPoes4Ghc5e
iGM438MeEMfYcWn1Uwwp3HEZlREL1+7FYSFuRfkLc1qvzJCv96fG64L8TPLAZoKA
wvsXezpDStauvYIsdIcUlhedgo5Z37+XZrjnl4B1b4M+RfIXbUiMArm3h6P1cLp8
94eGIZWKxuHDLxTWhd1kmGTL9cTzlO6Jd5zavOWFKht8cruwOmXZ+u+k0AtuXia1
bf0i1IpdBIdcCgAqxsWL/JUFbHmrAaP73rlLCZseKcyCAvfdazkZyzQykJ8qjY3H
E99/x8EwsfiBsg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:09 2025 by rpki-client