Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
File: SAa55i8bAPLPmNDcxYMpKvrLUi8.mft (raw, json)
Hash identifier: P75BetTR6bp0Bhwbm5BpW1UO+7hUnRvKJWV+HNnPunY=
Subject key identifier: 4F:2B:59:E9:78:FE:33:4A:5F:A7:F0:79:8F:37:54:06:90:E4:42:39
Authority key identifier: 48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F
Certificate issuer: /CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f
Certificate serial: 0198D5BBAE9B8CC6772AE8C575E463F3D57E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
Manifest number: 110D
Signing time: Sat 23 Aug 2025 07:01:43 +0000
Manifest this update: Sat 23 Aug 2025 07:01:43 +0000
Manifest next update: Sun 24 Aug 2025 07:01:43 +0000
Files and hashes: 1: SAa55i8bAPLPmNDcxYMpKvrLUi8.crl (hash: 7E4dDTfAqIL/ae+u8qwEbUZmKp5JhYIDfU9SCWpWbWs=)
2: bOFB3LalOSOdSrbz-a4cUkkG03M.roa (hash: SZa6u36skxx1rALcmnxtRi0278XWZ89tCnch5FRpzoM=)
3: ipcAqlbQdh9QjilJG8UTA6cw-zw.roa (hash: RUMHng+Xlo2Ru6wmJaBAotc3mLSEqq30G4I26Jr98jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ae:9b:8c:c6:77:2a:e8:c5:75:e4:63:f3:d5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f
Validity
Not Before: Aug 23 07:01:43 2025 GMT
Not After : Aug 24 07:01:43 2025 GMT
Subject: CN=4f2b59e978fe334a5fa7f0798f37540690e44239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ab:2d:b0:c3:ab:9c:58:54:c5:18:ca:11:c4:
06:9b:ef:e5:41:85:82:c8:e2:c6:50:bf:03:09:e0:
2a:f2:0b:11:51:03:63:35:b8:75:fb:11:a3:27:0d:
42:ae:85:ea:75:b2:e8:a9:5a:e9:b2:00:e4:d1:bb:
9e:e3:3a:cb:c9:59:4f:13:5d:72:86:03:4c:34:a5:
28:bf:cb:83:66:9e:11:bc:92:fe:1c:59:14:9d:2b:
c8:30:9b:0a:db:63:6c:68:57:6d:17:6e:70:1f:10:
69:93:2a:b5:e0:2a:75:1d:02:94:0a:46:37:d4:bc:
47:bc:38:ff:85:ed:55:cd:a0:85:a8:3f:46:61:65:
4a:7d:1c:8d:28:25:7b:1e:da:77:58:08:8b:0d:b6:
32:e8:7d:43:22:89:74:eb:16:da:85:8e:8d:bc:5b:
9e:fd:0a:e2:d4:a3:c5:03:a9:5e:e6:86:87:da:a5:
e5:8b:b7:3c:70:96:79:62:63:3f:e5:64:11:0f:9f:
6b:62:e3:62:bf:81:07:6d:ed:00:77:56:ed:46:3e:
db:1e:c7:a9:d8:49:88:ce:f5:c3:f9:3b:fe:a7:55:
29:70:04:a0:b5:99:47:bb:5b:71:38:6d:32:30:90:
1b:96:0a:34:ae:d5:ad:1e:32:6d:c0:b9:9a:00:74:
50:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2B:59:E9:78:FE:33:4A:5F:A7:F0:79:8F:37:54:06:90:E4:42:39
X509v3 Authority Key Identifier:
keyid:48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2d:ec:58:88:1a:cb:a8:ed:7f:de:bd:90:35:aa:26:5d:90:
23:ca:36:dd:e9:b2:65:db:dd:ed:07:b8:20:90:02:23:6b:76:
ac:52:fd:78:91:e9:b9:f5:55:a1:76:97:09:6d:01:d3:64:e1:
5c:19:aa:c4:26:65:31:ea:79:6f:60:44:5a:61:a8:2e:04:d0:
a6:a2:a7:42:55:61:d8:88:9a:51:02:ba:de:41:95:af:34:c4:
ff:bb:21:37:f5:47:29:30:3f:82:67:28:9c:4f:a1:09:36:72:
64:a5:f5:63:07:d7:42:ed:ef:35:3d:0a:83:5b:9f:6e:17:ba:
18:9a:1d:70:5a:12:4a:5a:64:2d:b6:ba:d0:9e:eb:ae:36:eb:
7a:b6:9c:e0:82:ce:46:f6:15:e5:84:32:b2:a3:e4:61:65:21:
ce:17:0d:33:77:fd:05:06:4f:78:c3:ae:44:2b:46:3f:ed:ad:
93:56:c2:67:be:82:22:2b:74:b9:76:04:92:20:da:8d:36:aa:
ff:55:b6:8b:9e:a2:f1:c9:c4:11:57:ab:3f:30:50:8e:99:3d:
35:8d:e1:66:26:84:d1:e6:b7:76:76:42:d7:79:5f:65:a3:fc:
fd:c8:3f:7a:48:86:0b:c8:62:4f:ff:df:01:3f:2a:08:56:72:
aa:b1:92:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu66bjMZ3KujFdeRj89V+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDZiOWU2MmYxYjAwZjJjZjk4ZDBkY2M1ODMyOTJhZmFj
YjUyMmYwHhcNMjUwODIzMDcwMTQzWhcNMjUwODI0MDcwMTQzWjAzMTEwLwYDVQQD
Eyg0ZjJiNTllOTc4ZmUzMzRhNWZhN2YwNzk4ZjM3NTQwNjkwZTQ0MjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6stsMOrnFhUxRjKEcQGm+/lQYWC
yOLGUL8DCeAq8gsRUQNjNbh1+xGjJw1CroXqdbLoqVrpsgDk0bue4zrLyVlPE11y
hgNMNKUov8uDZp4RvJL+HFkUnSvIMJsK22NsaFdtF25wHxBpkyq14Cp1HQKUCkY3
1LxHvDj/he1VzaCFqD9GYWVKfRyNKCV7Htp3WAiLDbYy6H1DIol06xbahY6NvFue
/Qri1KPFA6le5oaH2qXli7c8cJZ5YmM/5WQRD59rYuNiv4EHbe0Ad1btRj7bHsep
2EmIzvXD+Tv+p1UpcASgtZlHu1txOG0yMJAblgo0rtWtHjJtwLmaAHRQowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8rWel4/jNKX6fweY83VAaQ5EI5MB8GA1UdIwQY
MBaAFEgGueYvGwDyz5jQ3MWDKSr6y1IvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FhNTVpOGJBUExQbU5EY3hZTXBLdnJMVWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iYWE0YmMtOTI0ZS00MzY0LTlmMTMt
YTVjOTZlMjExNjA1LzEvU0FhNTVpOGJBUExQbU5EY3hZTXBLdnJMVWk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9iYWE0YmMtOTI0ZS00MzY0LTlmMTMtYTVjOTZlMjExNjA1
LzEvU0FhNTVpOGJBUExQbU5EY3hZTXBLdnJMVWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALi3sWIga
y6jtf969kDWqJl2QI8o23emyZdvd7Qe4IJACI2t2rFL9eJHpufVVoXaXCW0B02Th
XBmqxCZlMep5b2BEWmGoLgTQpqKnQlVh2IiaUQK63kGVrzTE/7shN/VHKTA/gmco
nE+hCTZyZKX1YwfXQu3vNT0Kg1ufbhe6GJodcFoSSlpkLba60J7rrjbrerac4ILO
RvYV5YQysqPkYWUhzhcNM3f9BQZPeMOuRCtGP+2tk1bCZ76CIit0uXYEkiDajTaq
/1W2i56i8cnEEVerPzBQjpk9NY3hZiaE0ea3dnZC13lfZaP8/cg/ekiGC8hiT//f
AT8qCFZyqrGSCA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:22 2025 by rpki-client