Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
File: SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft (raw, json)
Hash identifier: ryqkbz2W6SOV3lUfwB5yg0xJRxso+SWg5xVPyynp9rM=
Subject key identifier: AD:99:32:B1:40:33:1D:0C:73:8F:D0:CB:3F:DF:E5:4F:88:30:C7:FA
Authority key identifier: 48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
Certificate issuer: /CN=485375191d1c2e50982108fdd407bbcf73e9795c
Certificate serial: 0198D8BD02432C76B27B0A4FCDB44E6111F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
Manifest number: 1017
Signing time: Sat 23 Aug 2025 21:02:02 +0000
Manifest this update: Sat 23 Aug 2025 21:02:02 +0000
Manifest next update: Sun 24 Aug 2025 21:02:02 +0000
Files and hashes: 1: JUMv7Yi2cpE5n4jH_daU8-Wkj_s.roa (hash: 8Ur2YBrwEIHwiqas+AFAXGNfkZXPANsLJAnLoARlVGk=)
2: SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl (hash: DEIcWQxRYO1nlkkpmSsn4LJb/vRSGselarScxuK2tVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:02:43:2c:76:b2:7b:0a:4f:cd:b4:4e:61:11:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485375191d1c2e50982108fdd407bbcf73e9795c
Validity
Not Before: Aug 23 21:02:02 2025 GMT
Not After : Aug 24 21:02:02 2025 GMT
Subject: CN=ad9932b140331d0c738fd0cb3fdfe54f8830c7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:eb:1a:80:bd:3a:61:4a:26:ca:1c:03:d2:27:
1a:4e:50:36:98:61:01:20:fe:6c:37:e7:ac:cc:13:
fd:bf:15:9d:d7:cc:6f:06:c4:63:bf:f0:4f:a7:28:
40:79:54:fb:5e:38:2c:22:e2:c9:44:2b:f6:a1:35:
30:a7:b5:39:67:c8:00:b7:e4:37:3c:d2:a2:e6:7a:
5d:c5:be:9c:d1:82:da:df:3a:83:21:07:79:88:91:
39:e5:1a:db:20:2c:97:1f:af:f9:71:7b:67:5e:b5:
0d:64:41:c9:8e:76:c9:1d:e0:15:d0:4a:9f:a1:d6:
5f:ca:32:7c:82:13:5d:e8:89:ef:08:8e:30:ce:9b:
ff:06:6f:99:6e:bb:42:9c:63:38:45:8d:b2:4d:3d:
0c:89:fe:fe:2f:92:a8:36:90:2f:92:9e:52:e8:85:
a4:88:f0:48:32:73:96:bf:fd:6b:06:48:6d:76:3c:
e3:99:5d:bb:15:87:9f:93:ef:66:d4:0c:25:16:08:
04:e7:dd:2d:bb:9c:1f:61:6e:32:06:8a:60:a4:9e:
58:5b:b8:7f:79:e3:44:45:71:29:12:24:8c:45:c0:
08:50:03:32:c7:34:e6:4a:f0:f8:99:27:90:28:d7:
dd:67:76:a5:a9:42:63:af:6f:64:84:61:97:0c:40:
81:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:99:32:B1:40:33:1D:0C:73:8F:D0:CB:3F:DF:E5:4F:88:30:C7:FA
X509v3 Authority Key Identifier:
keyid:48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:04:3d:c2:fd:68:bb:ff:a6:5c:7c:6f:fe:5a:5a:c4:50:dd:
14:a7:90:80:fd:6c:ab:b2:a4:76:18:cc:fc:d1:5a:d2:35:9c:
ea:3f:e0:f6:8a:6a:a0:95:34:7b:ba:71:fa:0a:b2:f1:38:1d:
bb:25:5d:be:29:83:bd:c0:6c:01:98:7d:4a:7d:65:f2:a0:11:
af:d8:ab:ce:bf:c8:ca:65:63:f1:43:f9:17:4a:51:6b:ed:be:
2f:5c:29:14:c6:45:cc:5d:38:a6:85:45:28:0b:cc:db:70:e3:
60:e2:cf:e5:0a:bc:f0:35:7d:3f:38:1e:86:b5:66:02:4d:45:
fc:b7:3a:e9:b5:cd:21:88:ff:b8:c3:c7:af:43:64:da:1f:15:
1f:c8:50:1c:f3:b8:b5:28:bf:cd:a4:c4:ea:28:89:90:30:44:
dc:16:b5:69:89:98:8a:e3:cf:ae:c4:77:f6:86:e2:5d:47:72:
93:7a:e0:b6:e1:d1:00:b7:e5:46:f1:f9:8e:c9:78:ff:c3:fb:
e2:83:84:81:37:79:64:99:36:ea:61:dc:be:fe:58:43:b0:96:
36:ef:16:7b:bd:ab:2d:6b:33:1d:40:dc:17:32:ed:27:14:9b:
bc:69:20:01:51:3c:b2:50:99:ee:cd:7e:29:b7:97:ba:bf:3d:
a0:6b:4c:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYvQJDLHayewpPzbROYRH2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NTM3NTE5MWQxYzJlNTA5ODIxMDhmZGQ0MDdiYmNmNzNl
OTc5NWMwHhcNMjUwODIzMjEwMjAyWhcNMjUwODI0MjEwMjAyWjAzMTEwLwYDVQQD
EyhhZDk5MzJiMTQwMzMxZDBjNzM4ZmQwY2IzZmRmZTU0Zjg4MzBjN2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+sagL06YUomyhwD0icaTlA2mGEB
IP5sN+eszBP9vxWd18xvBsRjv/BPpyhAeVT7XjgsIuLJRCv2oTUwp7U5Z8gAt+Q3
PNKi5npdxb6c0YLa3zqDIQd5iJE55RrbICyXH6/5cXtnXrUNZEHJjnbJHeAV0Eqf
odZfyjJ8ghNd6InvCI4wzpv/Bm+ZbrtCnGM4RY2yTT0Mif7+L5KoNpAvkp5S6IWk
iPBIMnOWv/1rBkhtdjzjmV27FYefk+9m1AwlFggE590tu5wfYW4yBopgpJ5YW7h/
eeNERXEpEiSMRcAIUAMyxzTmSvD4mSeQKNfdZ3alqUJjr29khGGXDECBTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2ZMrFAMx0Mc4/Qyz/f5U+IMMf6MB8GA1UdIwQY
MBaAFEhTdRkdHC5QmCEI/dQHu89z6XlcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0ZOMUdSMGNMbENZSVFqOTFBZTd6M1BwZVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iMjYwOWItYWUzOS00MjlmLWE1MDUt
NmViZmY2NGJjYTFjLzEvU0ZOMUdSMGNMbENZSVFqOTFBZTd6M1BwZVZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9iMjYwOWItYWUzOS00MjlmLWE1MDUtNmViZmY2NGJjYTFj
LzEvU0ZOMUdSMGNMbENZSVFqOTFBZTd6M1BwZVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyQQ9wv1o
u/+mXHxv/lpaxFDdFKeQgP1sq7KkdhjM/NFa0jWc6j/g9opqoJU0e7px+gqy8Tgd
uyVdvimDvcBsAZh9Sn1l8qARr9irzr/IymVj8UP5F0pRa+2+L1wpFMZFzF04poVF
KAvM23DjYOLP5Qq88DV9PzgehrVmAk1F/Lc66bXNIYj/uMPHr0Nk2h8VH8hQHPO4
tSi/zaTE6iiJkDBE3Ba1aYmYiuPPrsR39obiXUdyk3rgtuHRALflRvH5jsl4/8P7
4oOEgTd5ZJk26mHcvv5YQ7CWNu8We72rLWszHUDcFzLtJxSbvGkgAVE8slCZ7s1+
KbeXur89oGtM4Q==
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:49:15 2025 by rpki-client