Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
File: SA488NEiV0x-ezvwNNDT0BPuvBU.mft (raw, json)
Hash identifier: oMyWINJvT7OXxsZzRHEiDH5+STUo9VLYHBZAwpEmcQI=
Subject key identifier: 86:6F:BC:E7:ED:81:1E:8C:B5:B2:89:80:34:B4:7B:92:D3:03:64:7A
Authority key identifier: 48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
Certificate issuer: /CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Certificate serial: 0197DE89F0EB069D00C3DF582790922D67F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
Manifest number: 0AD1
Signing time: Sun 06 Jul 2025 07:01:11 +0000
Manifest this update: Sun 06 Jul 2025 07:01:11 +0000
Manifest next update: Mon 07 Jul 2025 07:01:11 +0000
Files and hashes: 1: 7y3mGX9ZUocL1OILQHSxmA8VkvM.roa (hash: 7a9Oiy3txQlGgm+QjKoKXHZkPBhpeO84dBEOXh2SIfc=)
2: SA488NEiV0x-ezvwNNDT0BPuvBU.crl (hash: dlr/c4I51j/PdcSXcp2H0x/eqvm52VE70y3zPAIc21c=)
3: oU4Cohsb9kWDicLsugicyZN6s7k.roa (hash: YXEAgbcCjB/PmDtI8uql79S0hq5pcPIEdu0GZCtli20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Jul 2025 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:de:89:f0:eb:06:9d:00:c3:df:58:27:90:92:2d:67:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Validity
Not Before: Jul 6 07:01:11 2025 GMT
Not After : Jul 7 07:01:11 2025 GMT
Subject: CN=866fbce7ed811e8cb5b2898034b47b92d303647a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a3:8d:fc:b6:05:05:4d:17:20:b5:87:b9:e2:
d7:53:5f:ca:40:64:dc:ac:5c:b7:92:d9:c0:60:cb:
15:d8:04:bc:80:69:14:37:c4:ba:3a:47:70:4f:04:
3c:49:fa:4a:0e:48:9c:8d:1c:f5:1b:7b:54:ff:b1:
2c:9e:61:49:6f:9f:33:d6:68:21:b1:c4:3c:2c:7d:
60:75:c5:bf:a4:48:0e:8a:5b:df:09:fe:ad:97:8e:
fb:87:a2:09:78:26:df:eb:a7:b4:32:1b:26:de:13:
76:03:4e:b9:38:1e:66:68:a2:10:7a:ba:f1:d5:ae:
c6:d4:54:96:20:d0:0d:05:7f:f4:1e:4a:8d:ba:c6:
28:9b:a2:1c:2b:94:6b:10:2a:c2:fc:62:7d:f4:d3:
87:cc:1c:75:f3:ca:de:aa:97:e3:c5:67:ec:b9:80:
68:a2:78:c0:c3:33:e9:4c:4a:57:c0:33:74:96:d8:
ce:e9:e3:86:b0:2b:a0:d3:8a:10:a6:8a:ad:28:81:
e8:e4:d8:8c:c8:3d:2a:5a:c3:7e:b2:96:bd:00:af:
55:fa:5e:7b:4b:88:f6:ee:f0:3f:ef:a6:bf:31:4d:
ab:ab:76:cf:26:7a:34:d3:9b:9c:dc:ba:5b:22:95:
3e:9a:2c:8a:ba:0b:55:d3:04:40:9a:94:d2:1a:d8:
61:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6F:BC:E7:ED:81:1E:8C:B5:B2:89:80:34:B4:7B:92:D3:03:64:7A
X509v3 Authority Key Identifier:
keyid:48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8b:25:3a:ae:ca:7b:71:85:21:9e:68:05:53:47:e1:75:17:
d9:e2:5a:e8:7f:3b:31:3a:d8:58:bb:39:86:f1:0b:a5:b7:48:
e7:d5:38:4c:93:f3:58:43:23:96:06:09:9c:56:d4:8a:b8:21:
66:cb:cc:21:35:86:8d:5e:0e:dc:b7:3c:1e:c3:b5:0a:ef:7a:
17:ec:4b:45:75:f2:6b:cd:e9:ef:74:7e:37:85:0d:08:85:2d:
0a:c5:21:90:b8:9b:6a:3a:64:8c:4f:19:4d:e4:2b:2c:c3:f1:
7b:81:5a:f4:34:5a:c1:c3:5b:66:56:dc:dc:9a:4f:fb:cb:e0:
d4:97:1f:e3:02:25:74:d7:84:f5:0e:ee:b4:32:66:39:16:ce:
80:9c:74:e9:04:35:35:43:0f:f7:7b:5b:31:97:1c:35:5b:e3:
1b:c2:54:eb:fc:6f:a6:1c:e1:54:7d:6a:02:a8:32:c1:3e:ab:
3d:14:f9:e2:7a:68:aa:bc:1c:28:ad:5e:91:8b:22:50:93:b5:
b3:e0:ec:82:88:27:f9:24:14:26:59:52:f8:28:de:90:34:2e:
df:75:a2:c9:81:3c:90:30:df:a4:08:f1:cd:87:28:7d:77:4a:
17:9c:0d:7c:2f:92:e4:65:5e:45:df:a0:3c:10:6e:56:98:49:
19:03:5c:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfeifDrBp0Aw99YJ5CSLWfxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MGUzY2YwZDEyMjU3NGM3ZTdiM2JmMDM0ZDBkM2QwMTNl
ZWJjMTUwHhcNMjUwNzA2MDcwMTExWhcNMjUwNzA3MDcwMTExWjAzMTEwLwYDVQQD
Eyg4NjZmYmNlN2VkODExZThjYjViMjg5ODAzNGI0N2I5MmQzMDM2NDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKON/LYFBU0XILWHueLXU1/KQGTc
rFy3ktnAYMsV2AS8gGkUN8S6OkdwTwQ8SfpKDkicjRz1G3tU/7EsnmFJb58z1mgh
scQ8LH1gdcW/pEgOilvfCf6tl477h6IJeCbf66e0Mhsm3hN2A065OB5maKIQerrx
1a7G1FSWINANBX/0HkqNusYom6IcK5RrECrC/GJ99NOHzBx188reqpfjxWfsuYBo
onjAwzPpTEpXwDN0ltjO6eOGsCug04oQpoqtKIHo5NiMyD0qWsN+spa9AK9V+l57
S4j27vA/76a/MU2rq3bPJno005uc3LpbIpU+miyKugtV0wRAmpTSGthhgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZvvOftgR6MtbKJgDS0e5LTA2R6MB8GA1UdIwQY
MBaAFEgOPPDRIldMfns78DTQ09AT7rwVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0E0ODhORWlWMHgtZXp2d05ORFQwQlB1dkJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iYTY2ZjItZGUzZS00ZGU4LWJkNjUt
MjJmMjNmZTI5Mjg3LzEvU0E0ODhORWlWMHgtZXp2d05ORFQwQlB1dkJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9iYTY2ZjItZGUzZS00ZGU4LWJkNjUtMjJmMjNmZTI5Mjg3
LzEvU0E0ODhORWlWMHgtZXp2d05ORFQwQlB1dkJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaIslOq7K
e3GFIZ5oBVNH4XUX2eJa6H87MTrYWLs5hvELpbdI59U4TJPzWEMjlgYJnFbUirgh
ZsvMITWGjV4O3Lc8HsO1Cu96F+xLRXXya83p73R+N4UNCIUtCsUhkLibajpkjE8Z
TeQrLMPxe4Fa9DRawcNbZlbc3JpP+8vg1Jcf4wIldNeE9Q7utDJmORbOgJx06QQ1
NUMP93tbMZccNVvjG8JU6/xvphzhVH1qAqgywT6rPRT54npoqrwcKK1ekYsiUJO1
s+Dsgogn+SQUJllS+CjekDQu33WiyYE8kDDfpAjxzYcofXdKF5wNfC+S5GVeRd+g
PBBuVphJGQNcyw==
-----END CERTIFICATE-----
Generated at Sun Jul 6 16:45:06 2025 by rpki-client