Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
File: RmSbV7gX7BQ93LfXcSwiux8orHU.mft (raw, json)
Hash identifier: AnPJRU9G/73EsmwmhdWnr+Ep5+LaDQ7V1c0b58Shb4c=
Subject key identifier: EB:07:40:DE:94:44:A6:17:C8:25:09:14:1D:F4:3D:1C:D6:26:16:C4
Authority key identifier: 46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75
Certificate issuer: /CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
Certificate serial: 0198D6614D6567669DFB15D61A1D4371FF47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
Manifest number: 1624
Signing time: Sat 23 Aug 2025 10:02:37 +0000
Manifest this update: Sat 23 Aug 2025 10:02:37 +0000
Manifest next update: Sun 24 Aug 2025 10:02:37 +0000
Files and hashes: 1: E48fxMRuF9_usgkv-wBA_GtkkY8.roa (hash: TJ/B+8gZ2LSJEkkPcBk2s1l74WkEA3d0hjUzJQAQi8w=)
2: RmSbV7gX7BQ93LfXcSwiux8orHU.crl (hash: A4O68QAdC1YNKxlEGKGytOr+h7D6GdMwNt98BaaHqm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:4d:65:67:66:9d:fb:15:d6:1a:1d:43:71:ff:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
Validity
Not Before: Aug 23 10:02:37 2025 GMT
Not After : Aug 24 10:02:37 2025 GMT
Subject: CN=eb0740de9444a617c82509141df43d1cd62616c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1e:02:c5:4e:47:0a:c3:94:87:f5:81:47:69:
a3:a6:f4:5a:fd:f2:89:69:d8:11:fc:9c:89:f3:f8:
29:8a:bd:a6:cd:aa:ae:c7:c6:44:aa:8f:44:29:ea:
ea:f2:e3:eb:78:e2:fa:af:50:b9:46:c6:bc:6f:6b:
dc:94:6a:5e:77:7e:43:32:16:2e:47:c9:20:a2:48:
f9:a2:4c:7e:9d:24:4d:e3:4e:97:1d:99:67:89:8e:
5d:f1:02:3e:47:59:c4:6b:dd:5d:98:b4:e0:c4:ac:
33:e2:f1:de:47:47:0c:69:37:a5:6d:21:8e:85:f7:
af:8a:13:41:ed:3e:ed:6b:85:ec:15:49:8a:dc:49:
b0:95:0a:be:32:95:18:57:0a:3a:dd:c3:52:ab:9b:
83:22:ec:d7:9e:63:33:74:6b:37:40:1c:f7:2e:d7:
bc:42:a4:b6:a9:9b:f6:19:01:21:aa:6e:2c:a9:11:
45:19:e3:21:87:d8:6a:c5:9a:f7:c5:4a:e4:22:79:
ac:66:f1:db:6f:d2:45:43:42:0a:c8:9a:a4:74:5b:
3c:e4:eb:c1:cf:9f:13:ea:05:80:57:80:36:c8:7e:
ef:6b:07:aa:58:d1:bc:29:fe:9b:56:0e:b1:f4:76:
07:7c:6b:a0:c0:82:87:f3:1c:fc:af:21:3b:87:5b:
4f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:07:40:DE:94:44:A6:17:C8:25:09:14:1D:F4:3D:1C:D6:26:16:C4
X509v3 Authority Key Identifier:
keyid:46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a5:65:7f:1b:9b:4a:99:40:b7:49:ed:c9:92:e9:23:b2:cb:
1f:2f:3a:4e:ae:f5:0d:49:00:09:70:df:50:d6:25:73:bb:5a:
24:21:90:c6:3d:6b:32:9f:dc:eb:a7:88:29:f6:37:df:7c:79:
d6:7c:71:9f:ff:5d:60:71:72:a8:c5:e8:1a:90:30:95:ff:f4:
ee:b8:d8:43:31:e3:81:a9:e0:95:85:75:06:d4:4f:55:f2:6a:
45:cc:36:53:9f:9c:7b:b5:7f:16:6e:a2:b7:7c:98:b6:eb:90:
51:fb:8c:ef:bc:8b:f4:fe:b7:7b:30:e4:d0:3b:12:a5:eb:4d:
ce:39:d7:ae:15:85:a5:45:85:82:ec:31:c4:30:90:99:44:91:
f1:72:c0:78:b2:3e:e4:66:aa:f3:65:27:fe:5f:3d:cb:1f:9f:
0f:8e:09:77:60:7e:1c:41:53:2b:1a:e2:9d:97:34:85:2a:38:
d6:08:e0:e6:f1:80:a1:97:cb:b4:fe:97:d2:80:d8:2e:23:72:
1f:e5:1c:1c:b5:59:17:5d:f4:2a:f8:87:fe:1e:78:67:40:4c:
11:25:46:80:7e:b4:f6:f7:b6:38:e2:a0:75:f6:85:90:25:22:
d6:99:60:9b:f0:e9:c8:78:8d:cf:48:84:31:e1:dc:af:28:30:
f6:56:33:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYU1lZ2ad+xXWGh1Dcf9HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NjQ5YjU3YjgxN2VjMTQzZGRjYjdkNzcxMmMyMmJiMWYy
OGFjNzUwHhcNMjUwODIzMTAwMjM3WhcNMjUwODI0MTAwMjM3WjAzMTEwLwYDVQQD
EyhlYjA3NDBkZTk0NDRhNjE3YzgyNTA5MTQxZGY0M2QxY2Q2MjYxNmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5R4CxU5HCsOUh/WBR2mjpvRa/fKJ
adgR/JyJ8/gpir2mzaqux8ZEqo9EKerq8uPreOL6r1C5Rsa8b2vclGped35DMhYu
R8kgokj5okx+nSRN406XHZlniY5d8QI+R1nEa91dmLTgxKwz4vHeR0cMaTelbSGO
hfevihNB7T7ta4XsFUmK3EmwlQq+MpUYVwo63cNSq5uDIuzXnmMzdGs3QBz3Lte8
QqS2qZv2GQEhqm4sqRFFGeMhh9hqxZr3xUrkInmsZvHbb9JFQ0IKyJqkdFs85OvB
z58T6gWAV4A2yH7vaweqWNG8Kf6bVg6x9HYHfGugwIKH8xz8ryE7h1tPnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOsHQN6URKYXyCUJFB30PRzWJhbEMB8GA1UdIwQY
MBaAFEZkm1e4F+wUPdy313EsIrsfKKx1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm1TYlY3Z1g3QlE5M0xmWGNTd2l1eDhvckhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84NTg0NTQtYTE4ZC00MDQwLWFiM2Mt
Y2E4ZmJhNTk1ZDRmLzEvUm1TYlY3Z1g3QlE5M0xmWGNTd2l1eDhvckhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy84NTg0NTQtYTE4ZC00MDQwLWFiM2MtY2E4ZmJhNTk1ZDRm
LzEvUm1TYlY3Z1g3QlE5M0xmWGNTd2l1eDhvckhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZKVlfxub
SplAt0ntyZLpI7LLHy86Tq71DUkACXDfUNYlc7taJCGQxj1rMp/c66eIKfY333x5
1nxxn/9dYHFyqMXoGpAwlf/07rjYQzHjganglYV1BtRPVfJqRcw2U5+ce7V/Fm6i
t3yYtuuQUfuM77yL9P63ezDk0DsSpetNzjnXrhWFpUWFguwxxDCQmUSR8XLAeLI+
5Gaq82Un/l89yx+fD44Jd2B+HEFTKxrinZc0hSo41gjg5vGAoZfLtP6X0oDYLiNy
H+UcHLVZF130KviH/h54Z0BMESVGgH609ve2OOKgdfaFkCUi1plgm/DpyHiNz0iE
MeHcrygw9lYz4A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:16 2025 by rpki-client