Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
File: sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft (raw, json)
Hash identifier: C5/6CSj8uCUDPKvf2/Yn51dcnj1Va3/9JiayCZw54xs=
Subject key identifier: 00:48:FF:EF:EC:BB:CF:B7:74:0F:A8:C8:84:05:8D:07:F5:4B:B3:F6
Authority key identifier: B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09
Certificate issuer: /CN=b1f5bbaa051980bd4811b6655a0f95db36127809
Certificate serial: 0198D4723BA27024D2247C9DB0A167CA63BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
Manifest number: 0FD9
Signing time: Sat 23 Aug 2025 01:01:52 +0000
Manifest this update: Sat 23 Aug 2025 01:01:52 +0000
Manifest next update: Sun 24 Aug 2025 01:01:52 +0000
Files and hashes: 1: MLxgcAFNN-a_n0hgMIOfT5C141o.roa (hash: ewiYdgPU3ZjjkZdT9FRRd/GKYeBkT/vZjdgs+F+3aZo=)
2: sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl (hash: DRIODWBa4zdC/jN7VuhWMRxKoN39aFzI0VTUqQ2QReU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:3b:a2:70:24:d2:24:7c:9d:b0:a1:67:ca:63:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f5bbaa051980bd4811b6655a0f95db36127809
Validity
Not Before: Aug 23 01:01:52 2025 GMT
Not After : Aug 24 01:01:52 2025 GMT
Subject: CN=0048ffefecbbcfb7740fa8c884058d07f54bb3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:52:6a:48:63:7e:16:37:f8:0d:c4:28:b5:5c:
24:09:87:21:54:2d:a4:b2:16:71:4f:c9:ca:fa:04:
6f:8f:3d:ba:d6:47:7c:1f:49:8b:d6:e0:69:6e:51:
44:f4:81:f3:fe:ea:d7:25:cc:d1:d4:21:a5:0e:cb:
f9:c9:6f:c2:8b:5d:a2:dd:23:b0:21:f8:4f:15:21:
9d:5c:e2:43:94:08:de:30:7d:3c:86:aa:57:02:d2:
e2:bd:ae:51:1b:b0:bc:3f:be:90:86:ca:01:10:5d:
89:24:38:8c:8a:d2:97:ca:a3:c7:ca:ef:bc:4f:5d:
cf:24:77:50:0c:bc:98:06:8b:73:f8:9e:78:aa:ee:
11:2c:40:1d:0e:10:73:ef:9e:ce:08:75:4b:94:36:
e5:0a:e6:19:d2:10:14:78:58:2b:79:dd:a5:2e:4f:
7d:68:64:b4:e7:cf:59:9f:e3:fc:f8:cc:aa:a0:7d:
e2:a9:ce:89:c4:98:72:ff:92:db:a8:fd:01:9a:38:
0a:33:c8:1d:79:2c:7a:7f:0c:df:8e:28:31:0d:f7:
a3:2b:c7:44:8f:3f:52:72:6e:5a:e7:1d:dc:66:90:
10:d7:8a:85:44:57:49:c0:ee:61:34:09:e0:9d:ee:
19:c7:48:d0:fa:2b:ce:32:02:65:7c:cd:af:4e:e7:
89:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:48:FF:EF:EC:BB:CF:B7:74:0F:A8:C8:84:05:8D:07:F5:4B:B3:F6
X509v3 Authority Key Identifier:
keyid:B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:80:46:b9:bc:f3:73:45:3c:48:77:2c:be:de:af:53:12:f8:
0b:d0:2b:1a:ed:c1:a4:d6:f6:dc:89:72:c8:dc:2b:7c:1c:14:
55:b7:a7:1b:57:bb:fc:ab:7a:2b:54:b7:a0:70:4f:dc:42:27:
d8:3a:64:29:e0:29:e4:9c:bc:41:b8:7f:6a:6c:78:0d:b2:75:
fd:78:ae:45:1b:37:3e:d3:ed:c3:ed:e7:d8:46:12:0d:2c:8c:
ba:45:bd:01:f5:f7:33:9d:49:79:d5:79:78:06:ef:1d:7f:e1:
3a:ca:35:01:1d:9e:5c:d3:0d:a7:e8:02:4b:fc:48:0d:bc:25:
61:a6:11:51:ec:c5:3b:f2:16:67:e3:9e:70:2a:25:e6:3f:94:
9c:e2:82:b6:b6:10:f7:23:fc:20:44:d2:3b:70:77:49:fe:3a:
e1:cf:da:08:54:a4:a1:23:b6:b3:0f:d2:d4:d6:5e:80:ed:cd:
ac:b4:38:7f:3d:2a:9a:f0:88:16:05:70:7d:60:9b:f0:5a:1f:
75:e1:65:65:d0:d3:04:c9:1b:27:2c:89:55:76:05:96:0c:fc:
fb:49:d8:71:16:16:29:1e:e6:9a:d6:3b:b1:18:15:09:03:e3:
da:ff:c8:72:cd:96:7c:62:a6:7c:8b:35:f2:e5:89:1f:99:50:
30:c0:db:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcjuicCTSJHydsKFnymO+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZjViYmFhMDUxOTgwYmQ0ODExYjY2NTVhMGY5NWRiMzYx
Mjc4MDkwHhcNMjUwODIzMDEwMTUyWhcNMjUwODI0MDEwMTUyWjAzMTEwLwYDVQQD
EygwMDQ4ZmZlZmVjYmJjZmI3NzQwZmE4Yzg4NDA1OGQwN2Y1NGJiM2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1JqSGN+Fjf4DcQotVwkCYchVC2k
shZxT8nK+gRvjz261kd8H0mL1uBpblFE9IHz/urXJczR1CGlDsv5yW/Ci12i3SOw
IfhPFSGdXOJDlAjeMH08hqpXAtLiva5RG7C8P76QhsoBEF2JJDiMitKXyqPHyu+8
T13PJHdQDLyYBotz+J54qu4RLEAdDhBz757OCHVLlDblCuYZ0hAUeFgred2lLk99
aGS0589Zn+P8+MyqoH3iqc6JxJhy/5LbqP0BmjgKM8gdeSx6fwzfjigxDfejK8dE
jz9Scm5a5x3cZpAQ14qFRFdJwO5hNAngne4Zx0jQ+ivOMgJlfM2vTueJVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABI/+/su8+3dA+oyIQFjQf1S7P2MB8GA1UdIwQY
MBaAFLH1u6oFGYC9SBG2ZVoPlds2EngJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2ZXN3FnVVpnTDFJRWJabFdnLVYyellTZUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9hMDcxYWEtNTUwYi00ZTE4LTk5ZWQt
MDUwOGEyYmI0N2FjLzEvc2ZXN3FnVVpnTDFJRWJabFdnLVYyellTZUFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9hMDcxYWEtNTUwYi00ZTE4LTk5ZWQtMDUwOGEyYmI0N2Fj
LzEvc2ZXN3FnVVpnTDFJRWJabFdnLVYyellTZUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiIBGubzz
c0U8SHcsvt6vUxL4C9ArGu3BpNb23IlyyNwrfBwUVbenG1e7/Kt6K1S3oHBP3EIn
2DpkKeAp5Jy8Qbh/amx4DbJ1/XiuRRs3PtPtw+3n2EYSDSyMukW9AfX3M51JedV5
eAbvHX/hOso1AR2eXNMNp+gCS/xIDbwlYaYRUezFO/IWZ+OecCol5j+UnOKCtrYQ
9yP8IETSO3B3Sf464c/aCFSkoSO2sw/S1NZegO3NrLQ4fz0qmvCIFgVwfWCb8Fof
deFlZdDTBMkbJyyJVXYFlgz8+0nYcRYWKR7mmtY7sRgVCQPj2v/Ics2WfGKmfIs1
8uWJH5lQMMDbpw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:42 2025 by rpki-client