Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
File: S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft (raw, json)
Hash identifier: XkXpZhHMbmO+s9W+0wsTbriW2jJ5FeSqHP5byevtkkc=
Subject key identifier: 0D:78:BA:1C:DE:B1:E3:D3:DD:AB:55:F8:80:90:26:3C:77:86:85:BC
Authority key identifier: 4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
Certificate issuer: /CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Certificate serial: 0198D6CD3DFC3CDAD9560B1FF1FD20C3AE6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
Manifest number: 1656
Signing time: Sat 23 Aug 2025 12:00:31 +0000
Manifest this update: Sat 23 Aug 2025 12:00:31 +0000
Manifest next update: Sun 24 Aug 2025 12:00:31 +0000
Files and hashes: 1: IMyen03Z3kYW501dGBJKRvVCnYU.roa (hash: iucT9aE10m3DuQgfsaO8fZMDF0JO/83+1ytDh6dNspg=)
2: S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl (hash: LOmyF+1tCn4IAE/yZqD7leD0OrDBUWRQrkqHtGEpN4g=)
3: _70B8nLCrCvW6ACV30Y-ItPOrFA.roa (hash: cBDWH8z972r2xnPCEsRs0ukVbID+nL6L8yt1uckQ37s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:3d:fc:3c:da:d9:56:0b:1f:f1:fd:20:c3:ae:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Validity
Not Before: Aug 23 12:00:31 2025 GMT
Not After : Aug 24 12:00:31 2025 GMT
Subject: CN=0d78ba1cdeb1e3d3ddab55f88090263c778685bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ca:f3:38:7d:ec:54:78:c2:ef:2e:4e:1f:4b:
3a:a7:03:e9:9f:ba:3a:87:34:d4:92:ad:2f:68:81:
e7:32:c0:ed:95:56:b5:8e:5e:c4:8d:2f:55:91:d6:
83:4e:b5:5c:12:24:0d:42:5f:11:ca:41:e0:fc:1f:
d1:0c:ae:54:e6:ad:da:a3:50:17:54:39:90:55:56:
16:b3:da:d4:3c:4b:b2:4b:69:67:15:d0:22:c8:1c:
58:c5:09:4b:46:eb:c0:3d:ef:68:33:fa:9c:be:ef:
d1:35:45:4d:6f:a3:b5:68:67:64:2f:9c:0b:14:c8:
5f:83:02:84:df:4f:e6:d2:59:b5:28:a8:5c:b9:9b:
d1:7d:df:ec:c4:c1:e5:0a:b3:1b:63:29:75:d5:9a:
4a:44:12:de:af:cb:ea:2f:01:d2:29:ae:bb:a9:c0:
8d:93:92:13:ee:87:33:90:d7:22:aa:e6:bf:b1:33:
f1:d4:c5:8e:1e:88:a8:07:78:2d:6e:52:31:18:96:
c1:30:35:c0:f0:64:18:58:a8:38:f6:f4:4f:ca:17:
fe:c1:dc:9e:00:13:bb:3f:91:51:f1:74:c3:ed:c2:
cd:69:f0:ca:d6:68:91:64:ad:34:3b:67:5e:88:17:
ea:db:95:21:b2:e6:71:71:95:9c:65:3e:fb:0f:1f:
5a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:78:BA:1C:DE:B1:E3:D3:DD:AB:55:F8:80:90:26:3C:77:86:85:BC
X509v3 Authority Key Identifier:
keyid:4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:3f:44:a9:5c:d7:02:16:ea:66:f3:5c:eb:d6:b3:bb:8b:da:
84:0c:b2:fd:25:7b:84:d9:e5:d3:01:32:ae:ce:c6:5a:b3:9d:
1a:db:ea:55:a2:57:5c:17:37:3c:60:47:25:67:5d:a6:71:72:
36:31:fe:2f:4c:fd:8b:4e:0f:97:2b:60:ec:61:f8:c4:72:f2:
88:0f:80:c0:9c:25:19:3d:b4:17:bf:04:6f:7f:fa:6d:5e:77:
cc:c5:b6:f7:5a:b5:fa:e2:1b:90:91:cf:c4:64:cc:ab:2d:d2:
ed:8b:21:58:ab:43:74:1e:8f:12:2e:b5:89:25:f5:8c:17:7e:
99:96:73:f2:bb:5d:1e:c6:99:19:e1:c7:9f:9c:e6:94:21:66:
bf:15:23:11:a5:1e:0e:3f:85:8a:cf:82:2b:86:e3:79:44:ac:
c5:79:5d:8a:00:19:dc:ac:64:28:53:96:55:13:f9:5f:fe:0c:
ea:8a:b1:5b:ea:a5:96:71:23:5d:c8:d6:68:9d:ed:2e:b5:0e:
37:7e:73:95:b6:73:9a:0d:34:4d:97:2c:80:49:ac:b3:ec:1e:
0d:9c:60:e7:60:05:99:4a:93:7f:3f:8d:3a:37:44:05:39:72:
e4:21:45:00:52:f9:8b:1b:00:fa:bc:79:69:77:e5:73:39:6c:
af:df:5f:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzT38PNrZVgsf8f0gw65sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNTc3MjViMGE2MDVkNGRkY2M0NjRiNzBkY2IzYTE2MmE1
ZjA1NWIwHhcNMjUwODIzMTIwMDMxWhcNMjUwODI0MTIwMDMxWjAzMTEwLwYDVQQD
EygwZDc4YmExY2RlYjFlM2QzZGRhYjU1Zjg4MDkwMjYzYzc3ODY4NWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocrzOH3sVHjC7y5OH0s6pwPpn7o6
hzTUkq0vaIHnMsDtlVa1jl7EjS9VkdaDTrVcEiQNQl8RykHg/B/RDK5U5q3ao1AX
VDmQVVYWs9rUPEuyS2lnFdAiyBxYxQlLRuvAPe9oM/qcvu/RNUVNb6O1aGdkL5wL
FMhfgwKE30/m0lm1KKhcuZvRfd/sxMHlCrMbYyl11ZpKRBLer8vqLwHSKa67qcCN
k5IT7oczkNciqua/sTPx1MWOHoioB3gtblIxGJbBMDXA8GQYWKg49vRPyhf+wdye
ABO7P5FR8XTD7cLNafDK1miRZK00O2deiBfq25UhsuZxcZWcZT77Dx9aewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA14uhzesePT3atV+ICQJjx3hoW8MB8GA1UdIwQY
MBaAFEtXclsKYF1N3MRktw3LOhYqXwVbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzFkeVd3cGdYVTNjeEdTM0RjczZGaXBmQlZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9lMDA1YzItYWZmYS00NThmLWFhZjgt
OGFmNTZlNzMzNjAwLzEvUzFkeVd3cGdYVTNjeEdTM0RjczZGaXBmQlZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9lMDA1YzItYWZmYS00NThmLWFhZjgtOGFmNTZlNzMzNjAw
LzEvUzFkeVd3cGdYVTNjeEdTM0RjczZGaXBmQlZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKz9EqVzX
AhbqZvNc69azu4vahAyy/SV7hNnl0wEyrs7GWrOdGtvqVaJXXBc3PGBHJWddpnFy
NjH+L0z9i04Plytg7GH4xHLyiA+AwJwlGT20F78Eb3/6bV53zMW291q1+uIbkJHP
xGTMqy3S7YshWKtDdB6PEi61iSX1jBd+mZZz8rtdHsaZGeHHn5zmlCFmvxUjEaUe
Dj+Fis+CK4bjeUSsxXldigAZ3KxkKFOWVRP5X/4M6oqxW+qllnEjXcjWaJ3tLrUO
N35zlbZzmg00TZcsgEmss+weDZxg52AFmUqTfz+NOjdEBTly5CFFAFL5ixsA+rx5
aXflczlsr99fJA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:46:48 2025 by rpki-client