Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
File: suRItKCPDkxYooPYBzWoqAPhDU4.mft (raw, json)
Hash identifier: Bm71bA9H3ZFgr+K4e7FPmRtaLcmvxpvd+AM2f1cFV5w=
Subject key identifier: F6:AD:58:F3:CE:3D:61:06:9C:14:0E:00:2D:87:F8:9B:69:F5:0A:58
Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
Certificate issuer: /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Certificate serial: 0198D54E613456E21EF3917132A01B0DA08E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
Manifest number: 1652
Signing time: Sat 23 Aug 2025 05:02:20 +0000
Manifest this update: Sat 23 Aug 2025 05:02:20 +0000
Manifest next update: Sun 24 Aug 2025 05:02:20 +0000
Files and hashes: 1: 0JGiKje1faw9lacGbk5NhV2XAbU.roa (hash: Z5RBvg80RTlugYiMNKYpsKysKI83C+571C6SNSSEK3o=)
2: 2DxKgawRIdwPHYKPKO80oLEjXnQ.roa (hash: GkiqXgjmsGCVt8nP5qXPMp6hqSSrH1HiN32NDxCXRyM=)
3: CzOVrXq8s2rQFDCGaFJZ_xM7OZ0.roa (hash: 5XAPorQnylekwHM79ynLgJVh80voKy6A8YYVF6d1gL0=)
4: DpKy84xGq4bZRMW3bg3Qqscpy-g.roa (hash: Pghneqh0rqfe/wIbx3lltKoFinQFr3Xds6By1KC5GTY=)
5: Zf4cfRQ8Yb3zaonMniOY9mHCgZU.roa (hash: 7qovkktB6alfndSsebLaLeESbLcFDoOHnNh2I5l6SkM=)
6: rJBUoTOBCbGpyq2LQ5qyqtlWDVk.roa (hash: OOOBfJlZtCKY/fNu/6lDyCNmP9uVM4ZIRjn3vJc9saw=)
7: suRItKCPDkxYooPYBzWoqAPhDU4.crl (hash: a4/oLHAWe7OpSZyqLF7x+4D78sWaPMX3GZ5AQMg+Zig=)
8: wz_TvTU1xF0eJ_9EwkVCuufFGFo.roa (hash: Vtdi4r4GuCz7NyZSMqwPceN5sJkZoRY3YKYSc4S4CjI=)
9: yDDPfOYkq9TvDo49z4rJ89YrUS8.roa (hash: h90+S4fhQ3iqdh42EvmGUJBw540N3+LmJjYWM7l7haw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:61:34:56:e2:1e:f3:91:71:32:a0:1b:0d:a0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Validity
Not Before: Aug 23 05:02:20 2025 GMT
Not After : Aug 24 05:02:20 2025 GMT
Subject: CN=f6ad58f3ce3d61069c140e002d87f89b69f50a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:04:e0:45:33:a6:1b:81:2d:5b:2e:9a:d1:e7:
9a:f1:bf:c9:87:1e:60:8c:b4:90:72:8f:5e:ec:a7:
1d:67:fe:a2:47:cb:a1:de:74:47:d1:3a:5d:c0:ab:
23:e7:56:d6:9a:72:47:84:70:58:0d:82:7d:4a:f8:
07:86:41:c8:35:fd:b0:0e:0c:d2:31:43:27:35:85:
a1:86:74:2c:7d:70:ef:0c:6c:53:8d:34:e2:e8:3d:
75:dc:66:41:0b:21:b8:54:ef:70:70:9f:82:14:35:
86:2b:81:87:ce:50:30:ff:5c:d2:1c:bc:e5:08:b7:
05:eb:8c:a5:a7:d9:3d:66:a4:3d:2e:38:2b:d4:c5:
d4:bd:17:d5:42:fa:f2:e2:8f:41:ff:8b:ed:49:09:
d7:f9:81:2f:b2:39:97:f0:99:aa:c7:b5:a9:85:9f:
9f:1c:e1:91:e6:c3:96:98:70:1e:dd:2b:d6:59:bd:
4a:8b:b6:fa:cf:b2:44:e4:37:23:41:14:56:d7:ec:
e8:3b:40:27:f8:a3:fb:fc:d9:48:88:17:39:da:13:
a3:3e:eb:5f:c2:db:0f:97:39:ab:32:82:13:59:28:
16:57:0a:f1:fa:60:b6:74:b5:21:30:3b:48:fa:9b:
f2:5e:e1:62:17:0f:1c:57:78:cf:e4:88:c9:c2:ed:
18:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AD:58:F3:CE:3D:61:06:9C:14:0E:00:2D:87:F8:9B:69:F5:0A:58
X509v3 Authority Key Identifier:
keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:79:b0:4f:11:c0:53:6a:0e:b0:89:87:f7:ed:05:38:ed:32:
c6:f5:ed:31:bb:3d:1d:64:3b:4d:7c:1a:9f:80:50:86:de:ed:
c6:83:c5:ab:ba:a8:92:18:69:44:2c:ad:cd:c4:3b:06:bc:84:
e2:60:37:e6:98:2d:42:68:4b:00:c2:68:6f:36:24:e5:48:38:
c1:d9:31:9a:1d:10:00:41:3b:25:af:e7:c5:da:0e:69:c0:a1:
94:07:a3:c4:a5:61:de:2c:84:8c:54:81:cf:d0:88:ea:b9:3a:
9c:37:73:5a:05:ae:40:86:3e:05:60:a4:97:b2:79:5a:c4:7e:
38:1e:ba:3b:a3:79:7d:99:78:4f:0f:fa:63:66:02:06:06:17:
2f:44:a0:57:93:51:a6:dc:c2:77:c4:21:08:b0:02:f4:90:3d:
26:31:29:69:32:6d:7f:d9:40:0f:e2:ff:e0:a3:54:6d:5c:54:
48:b1:9b:be:d3:a2:bb:14:4f:b4:5e:61:48:73:7a:bd:59:99:
43:95:58:f7:7f:14:48:f0:54:e1:89:e1:bc:c3:e4:66:90:4f:
b6:ea:d9:0e:a1:3b:0b:1f:47:73:92:8f:49:fd:3d:d0:28:29:
8e:b1:70:0d:ce:b8:c2:05:6e:57:29:fd:0c:18:e5:de:d1:34:
3c:ee:71:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTmE0VuIe85FxMqAbDaCOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZTQ0OGI0YTA4ZjBlNGM1OGEyODNkODA3MzVhOGE4MDNl
MTBkNGUwHhcNMjUwODIzMDUwMjIwWhcNMjUwODI0MDUwMjIwWjAzMTEwLwYDVQQD
EyhmNmFkNThmM2NlM2Q2MTA2OWMxNDBlMDAyZDg3Zjg5YjY5ZjUwYTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gTgRTOmG4EtWy6a0eea8b/Jhx5g
jLSQco9e7KcdZ/6iR8uh3nRH0TpdwKsj51bWmnJHhHBYDYJ9SvgHhkHINf2wDgzS
MUMnNYWhhnQsfXDvDGxTjTTi6D113GZBCyG4VO9wcJ+CFDWGK4GHzlAw/1zSHLzl
CLcF64ylp9k9ZqQ9Ljgr1MXUvRfVQvry4o9B/4vtSQnX+YEvsjmX8Jmqx7WphZ+f
HOGR5sOWmHAe3SvWWb1Ki7b6z7JE5DcjQRRW1+zoO0An+KP7/NlIiBc52hOjPutf
wtsPlzmrMoITWSgWVwrx+mC2dLUhMDtI+pvyXuFiFw8cV3jP5IjJwu0YmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPatWPPOPWEGnBQOAC2H+Jtp9QpYMB8GA1UdIwQY
MBaAFLLkSLSgjw5MWKKD2Ac1qKgD4Q1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3VSSXRLQ1BEa3hZb29QWUJ6V29xQVBoRFU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hNzA2OGEtOTJiYS00MmVhLTk5NjYt
MjA1NGQ0ZTkwM2JjLzEvc3VSSXRLQ1BEa3hZb29QWUJ6V29xQVBoRFU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9hNzA2OGEtOTJiYS00MmVhLTk5NjYtMjA1NGQ0ZTkwM2Jj
LzEvc3VSSXRLQ1BEa3hZb29QWUJ6V29xQVBoRFU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsnmwTxHA
U2oOsImH9+0FOO0yxvXtMbs9HWQ7TXwan4BQht7txoPFq7qokhhpRCytzcQ7BryE
4mA35pgtQmhLAMJobzYk5Ug4wdkxmh0QAEE7Ja/nxdoOacChlAejxKVh3iyEjFSB
z9CI6rk6nDdzWgWuQIY+BWCkl7J5WsR+OB66O6N5fZl4Tw/6Y2YCBgYXL0SgV5NR
ptzCd8QhCLAC9JA9JjEpaTJtf9lAD+L/4KNUbVxUSLGbvtOiuxRPtF5hSHN6vVmZ
Q5VY938USPBU4YnhvMPkZpBPturZDqE7Cx9Hc5KPSf090CgpjrFwDc64wgVuVyn9
DBjl3tE0PO5xsA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:47 2025 by rpki-client