Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
File: SJwmPoGEhs_YMcJF3frMqR-9gcA.mft (raw, json)
Hash identifier: xZiB+wA/ltcnIZYBcE3YA65TYhvnU1R2cjbN7bdnDxA=
Subject key identifier: 84:4B:27:E8:ED:15:64:FE:35:57:A6:CB:15:AF:D9:27:B2:C0:A2:9D
Authority key identifier: 48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
Certificate issuer: /CN=489c263e818486cfd831c245ddfacca91fbd81c0
Certificate serial: 0198D5BBAE2C60A48C5A7CB3051BC5EFF5A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
Manifest number: 02CE
Signing time: Sat 23 Aug 2025 07:01:43 +0000
Manifest this update: Sat 23 Aug 2025 07:01:43 +0000
Manifest next update: Sun 24 Aug 2025 07:01:43 +0000
Files and hashes: 1: SJwmPoGEhs_YMcJF3frMqR-9gcA.crl (hash: FH9d9kTj47Bp0abJBxvDUfCwHfVo6xebbJkJa1Xrme4=)
2: q6dxHjXf_smDxFRqVKpoM4ZxcK0.roa (hash: 2V/9T0djEJLIxLCP3ZW6UZqNaP1jJrToYR6Petpt72A=)
3: sh9Rh_XHxgs73xUgLaXpfEWoL2M.roa (hash: u3ZNcYvwXVoq0LzAan53+HMQH1md2pw7AMcoma6/Peg=)
4: uFwm3LO6GthW3CaP1u11g2Pmnbs.roa (hash: P/XCOSSZFXhzFRU3N+DJNZYyvprMkXA10JImXpYTCCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ae:2c:60:a4:8c:5a:7c:b3:05:1b:c5:ef:f5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=489c263e818486cfd831c245ddfacca91fbd81c0
Validity
Not Before: Aug 23 07:01:43 2025 GMT
Not After : Aug 24 07:01:43 2025 GMT
Subject: CN=844b27e8ed1564fe3557a6cb15afd927b2c0a29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6f:67:d6:b6:e8:a6:53:bf:17:89:64:13:29:
12:94:28:2a:59:4d:44:7c:2c:af:bb:3a:3a:f5:ac:
fd:98:e5:9a:a0:41:e9:78:94:64:1a:d2:24:bf:60:
fa:55:8b:dc:66:02:20:0a:f8:26:94:71:79:e8:45:
bf:3e:62:43:3a:e0:31:83:66:2b:2b:43:14:cc:15:
7a:65:6e:94:fe:b0:b3:be:17:7a:cb:0a:c0:1a:0d:
90:05:f7:0d:8c:6b:00:30:63:a2:85:4e:18:b4:90:
fe:52:38:3d:5a:62:8c:07:f0:7a:13:fd:35:f7:8b:
c5:10:ec:6f:07:1c:bf:8e:70:c0:c3:1b:4b:28:a1:
fc:f1:d6:de:2c:5c:50:8d:d7:2d:73:4b:82:50:04:
93:b4:48:62:0c:71:f4:63:36:aa:76:20:47:89:8c:
34:69:5f:4d:b7:90:1d:1f:63:7b:68:0b:59:bd:6a:
ab:75:6d:10:6c:6d:7f:3b:5d:35:19:58:5e:70:5d:
73:d4:a8:26:77:76:e2:ee:30:4f:ad:83:f2:de:b7:
b5:e2:0f:f0:ed:14:b9:43:fc:5b:8c:09:84:20:b9:
14:28:6a:57:4a:3b:e3:75:df:fd:46:44:7b:f2:f1:
e6:ab:82:ea:8d:db:96:af:08:5b:4b:31:1e:a4:d0:
95:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4B:27:E8:ED:15:64:FE:35:57:A6:CB:15:AF:D9:27:B2:C0:A2:9D
X509v3 Authority Key Identifier:
keyid:48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:32:dd:56:0e:25:46:60:f3:0a:47:72:88:e9:3e:fb:70:80:
b9:0e:88:f0:45:c6:28:e6:a4:ac:12:6f:85:93:64:82:2f:d5:
aa:3b:4c:b0:84:e0:cf:3f:e1:b2:e5:85:d7:28:20:89:31:aa:
62:75:f7:39:50:a3:4d:b1:a7:46:aa:b1:1f:d1:83:70:fa:d9:
e1:7b:69:d0:3a:b8:84:7c:28:4f:05:81:17:96:9b:e4:0e:32:
0b:df:05:db:df:47:8e:e1:00:1f:2a:5d:bd:a7:92:01:e5:a6:
b0:45:ac:4c:17:1b:25:c1:a6:91:13:8f:2a:85:d2:e2:c7:8a:
69:36:28:46:1f:dd:3c:a4:8f:0f:06:e8:c9:ec:f9:b4:75:be:
52:46:ca:0b:9e:60:d8:1a:48:e1:81:b9:7c:65:df:55:e7:68:
29:54:cc:49:96:b5:f2:12:2d:f6:6c:e8:27:3a:1d:d2:94:9d:
57:2e:d9:ae:36:53:e3:4b:8b:41:f5:69:0a:d9:b3:ad:9e:1a:
65:ef:b4:e4:51:49:36:ee:85:52:03:53:67:b2:31:c6:12:0e:
3b:79:7a:67:38:ea:c9:68:3d:9d:5b:77:1e:1d:3f:dd:e3:da:
93:ff:aa:75:73:3d:73:13:a4:4e:dc:ba:87:e3:55:95:e4:74:
c0:b9:55:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu64sYKSMWnyzBRvF7/WiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4OWMyNjNlODE4NDg2Y2ZkODMxYzI0NWRkZmFjY2E5MWZi
ZDgxYzAwHhcNMjUwODIzMDcwMTQzWhcNMjUwODI0MDcwMTQzWjAzMTEwLwYDVQQD
Eyg4NDRiMjdlOGVkMTU2NGZlMzU1N2E2Y2IxNWFmZDkyN2IyYzBhMjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu29n1rboplO/F4lkEykSlCgqWU1E
fCyvuzo69az9mOWaoEHpeJRkGtIkv2D6VYvcZgIgCvgmlHF56EW/PmJDOuAxg2Yr
K0MUzBV6ZW6U/rCzvhd6ywrAGg2QBfcNjGsAMGOihU4YtJD+Ujg9WmKMB/B6E/01
94vFEOxvBxy/jnDAwxtLKKH88dbeLFxQjdctc0uCUASTtEhiDHH0YzaqdiBHiYw0
aV9Nt5AdH2N7aAtZvWqrdW0QbG1/O101GVhecF1z1Kgmd3bi7jBPrYPy3re14g/w
7RS5Q/xbjAmEILkUKGpXSjvjdd/9RkR78vHmq4LqjduWrwhbSzEepNCVMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRLJ+jtFWT+NVemyxWv2SeywKKdMB8GA1UdIwQY
MBaAFEicJj6BhIbP2DHCRd36zKkfvYHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0p3bVBvR0Voc19ZTWNKRjNmck1xUi05Z2NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8xMTdmYzktN2E2Mi00NjgyLWJmYmMt
MmNhM2FhNzFlYzVmLzEvU0p3bVBvR0Voc19ZTWNKRjNmck1xUi05Z2NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8xMTdmYzktN2E2Mi00NjgyLWJmYmMtMmNhM2FhNzFlYzVm
LzEvU0p3bVBvR0Voc19ZTWNKRjNmck1xUi05Z2NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYjLdVg4l
RmDzCkdyiOk++3CAuQ6I8EXGKOakrBJvhZNkgi/VqjtMsITgzz/hsuWF1yggiTGq
YnX3OVCjTbGnRqqxH9GDcPrZ4Xtp0Dq4hHwoTwWBF5ab5A4yC98F299HjuEAHypd
vaeSAeWmsEWsTBcbJcGmkROPKoXS4seKaTYoRh/dPKSPDwboyez5tHW+UkbKC55g
2BpI4YG5fGXfVedoKVTMSZa18hIt9mzoJzod0pSdVy7ZrjZT40uLQfVpCtmzrZ4a
Ze+05FFJNu6FUgNTZ7IxxhIOO3l6ZzjqyWg9nVt3Hh0/3ePak/+qdXM9cxOkTty6
h+NVleR0wLlVEw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:14:56 2025 by rpki-client