Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
File: sSQfEp2_xKFlH-zboDEI_NLMHfI.mft (raw, json)
Hash identifier: xwG0Y5OqZTzcb7JpMgJiIodkG2utof9XARVRAbdb/Rg=
Subject key identifier: C6:00:64:54:22:DB:9E:5A:B4:82:10:91:B1:69:32:99:1D:F4:E0:6E
Authority key identifier: B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2
Certificate issuer: /CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
Certificate serial: 0198D51605857EA89B6AF35727DF2CBA6F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
Manifest number: 09F3
Signing time: Sat 23 Aug 2025 04:00:46 +0000
Manifest this update: Sat 23 Aug 2025 04:00:46 +0000
Manifest next update: Sun 24 Aug 2025 04:00:46 +0000
Files and hashes: 1: 0YQNQfPH4Cu72DoID5FMdAcNaLI.roa (hash: spBps2jYr/x0LCQGlcWxdN+sgAztOxCYMMvfbn6x0Mw=)
2: sSQfEp2_xKFlH-zboDEI_NLMHfI.crl (hash: oSRG44wQvHGs8E4jGcTOZuvSn7pqzEeTpyiemKFRMNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:05:85:7e:a8:9b:6a:f3:57:27:df:2c:ba:6f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
Validity
Not Before: Aug 23 04:00:46 2025 GMT
Not After : Aug 24 04:00:46 2025 GMT
Subject: CN=c600645422db9e5ab4821091b16932991df4e06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c2:8a:90:59:e4:06:79:3b:8f:04:63:dd:b0:
98:a4:69:12:11:48:95:13:f7:4e:47:97:cd:7c:63:
43:61:e6:88:97:35:ce:d4:11:e9:cd:49:b4:5e:67:
5a:ff:a7:5e:7d:e6:85:09:18:2c:43:e2:58:98:38:
60:8e:c6:86:18:1f:ac:d2:cf:eb:1f:e6:76:2e:d4:
bf:4a:a0:3a:5b:f0:95:ff:7a:9f:d0:de:99:49:69:
ca:4c:06:5e:48:3a:3f:4c:69:62:66:b3:f7:58:2e:
e9:8e:8b:1b:60:2a:85:ad:06:0a:b3:5c:bf:ee:2d:
4c:6c:81:3d:51:eb:0c:8a:1d:cf:ce:b6:43:76:f7:
9a:fd:90:02:a9:78:2e:d1:80:b6:ab:c6:59:0a:bf:
e2:90:a6:cc:78:f4:32:a2:a3:5c:f7:67:a9:ec:be:
23:09:f4:a0:2a:f7:e8:76:ee:3a:de:eb:1b:8e:28:
b3:09:f6:6c:83:15:76:39:47:46:9f:d3:5a:6b:f7:
1c:70:5d:ee:ba:03:3a:50:95:de:97:47:ac:2a:03:
13:d1:e3:0d:c7:bd:d5:5a:94:ae:1f:79:42:37:c9:
b5:6f:89:3a:f2:fe:41:46:3c:12:5b:02:43:15:ad:
6e:fe:c4:e8:1f:a0:2c:da:d1:2d:14:90:4a:cc:c2:
02:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:00:64:54:22:DB:9E:5A:B4:82:10:91:B1:69:32:99:1D:F4:E0:6E
X509v3 Authority Key Identifier:
keyid:B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:7d:d9:a5:c4:01:72:3f:b7:83:a9:70:a7:e4:2d:67:0a:34:
5e:1b:eb:e4:d0:bd:58:88:f6:8f:ad:4f:af:8d:da:ea:eb:49:
c4:53:15:b4:c9:74:70:c0:4c:61:79:ac:ed:aa:ad:bc:b2:e7:
ae:e0:4f:ae:ee:58:f1:66:e7:a4:f1:7b:0e:a0:ef:7a:66:a4:
df:f1:c6:16:5d:77:a2:25:a5:29:91:16:60:7e:89:bc:a9:9d:
6f:5e:53:11:e6:6e:0d:79:2a:a2:6b:d7:49:c2:a7:2d:38:b0:
4e:1f:61:48:f3:42:d3:af:0e:32:f9:74:f0:ff:ee:5a:43:26:
a1:7e:38:eb:2b:7f:b4:82:da:aa:cb:bb:7c:f1:83:ea:24:7d:
f1:4c:c2:55:83:40:09:35:b7:6c:83:43:19:42:0b:3d:d1:8f:
76:88:2f:23:c5:82:30:cc:6b:67:0e:9b:c1:2d:8c:9d:4e:16:
44:f7:00:7c:17:f9:0c:35:b6:89:85:a0:f0:98:c4:64:6d:65:
22:1a:75:2b:ec:c6:f3:93:e1:3e:52:61:a2:20:8f:d8:98:77:
78:6c:7d:4d:8d:e6:81:32:5b:c5:a6:9d:63:6f:f4:f8:05:39:
e0:69:e3:6e:23:6d:c0:93:35:d6:b8:90:5b:83:77:eb:73:5b:
ca:09:69:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFgWFfqibavNXJ98sum9FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMjQxZjEyOWRiZmM0YTE2NTFmZWNkYmEwMzEwOGZjZDJj
YzFkZjIwHhcNMjUwODIzMDQwMDQ2WhcNMjUwODI0MDQwMDQ2WjAzMTEwLwYDVQQD
EyhjNjAwNjQ1NDIyZGI5ZTVhYjQ4MjEwOTFiMTY5MzI5OTFkZjRlMDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocKKkFnkBnk7jwRj3bCYpGkSEUiV
E/dOR5fNfGNDYeaIlzXO1BHpzUm0Xmda/6defeaFCRgsQ+JYmDhgjsaGGB+s0s/r
H+Z2LtS/SqA6W/CV/3qf0N6ZSWnKTAZeSDo/TGliZrP3WC7pjosbYCqFrQYKs1y/
7i1MbIE9UesMih3PzrZDdvea/ZACqXgu0YC2q8ZZCr/ikKbMePQyoqNc92ep7L4j
CfSgKvfodu463usbjiizCfZsgxV2OUdGn9Naa/cccF3uugM6UJXel0esKgMT0eMN
x73VWpSuH3lCN8m1b4k68v5BRjwSWwJDFa1u/sToH6As2tEtFJBKzMICIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYAZFQi255atIIQkbFpMpkd9OBuMB8GA1UdIwQY
MBaAFLEkHxKdv8ShZR/s26AxCPzSzB3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1NRZkVwMl94S0ZsSC16Ym9ERUlfTkxNSGZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9iMWE3NWQtYjc5MS00MGI0LWJkYTct
ZTlkZGJlM2VmYmUzLzEvc1NRZkVwMl94S0ZsSC16Ym9ERUlfTkxNSGZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9iMWE3NWQtYjc5MS00MGI0LWJkYTctZTlkZGJlM2VmYmUz
LzEvc1NRZkVwMl94S0ZsSC16Ym9ERUlfTkxNSGZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcX3ZpcQB
cj+3g6lwp+QtZwo0Xhvr5NC9WIj2j61Pr43a6utJxFMVtMl0cMBMYXms7aqtvLLn
ruBPru5Y8WbnpPF7DqDvemak3/HGFl13oiWlKZEWYH6JvKmdb15TEeZuDXkqomvX
ScKnLTiwTh9hSPNC068OMvl08P/uWkMmoX446yt/tILaqsu7fPGD6iR98UzCVYNA
CTW3bINDGUILPdGPdogvI8WCMMxrZw6bwS2MnU4WRPcAfBf5DDW2iYWg8JjEZG1l
Ihp1K+zG85PhPlJhoiCP2Jh3eGx9TY3mgTJbxaadY2/0+AU54GnjbiNtwJM11riQ
W4N363Nbyglp0w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:26:31 2025 by rpki-client