Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
File: Srn5ALphi-jnySCWPN91e5BQ5Qk.mft (raw, json)
Hash identifier: d4+TGi34pIherlCQjKW6zzrEUMvRXGAzi0/OiwaANDI=
Subject key identifier: 13:8B:FA:7F:BE:94:4C:2F:86:FF:19:D2:93:0E:42:04:6F:B9:8E:F0
Authority key identifier: 4A:B9:F9:00:BA:61:8B:E8:E7:C9:20:96:3C:DF:75:7B:90:50:E5:09
Certificate issuer: /CN=4ab9f900ba618be8e7c920963cdf757b9050e509
Certificate serial: 0198D65FFEB873F6DC127A0C4DF4820C4A27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:01:11 +0000
Manifest this update: Sat 23 Aug 2025 10:01:11 +0000
Manifest next update: Sun 24 Aug 2025 10:01:11 +0000
Files and hashes: 1: M8uu5Q0gYtyHXgy-_HaJ3qJtLL8.roa (hash: 8T9tUH90Mj8IcimHEzzVqe1K5DRM0kq6VzTiqUA3vRs=)
2: Srn5ALphi-jnySCWPN91e5BQ5Qk.crl (hash: wfZizuW8c5w5X1kKezjZsoNyQLJhHmUAZKhvz9u+9XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:fe:b8:73:f6:dc:12:7a:0c:4d:f4:82:0c:4a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab9f900ba618be8e7c920963cdf757b9050e509
Validity
Not Before: Aug 23 10:01:11 2025 GMT
Not After : Aug 24 10:01:11 2025 GMT
Subject: CN=138bfa7fbe944c2f86ff19d2930e42046fb98ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:26:bc:b0:2d:ca:cf:fc:bc:64:78:83:8f:e7:
14:63:ff:53:64:22:8b:3c:2d:c0:83:eb:f5:64:a3:
ae:2d:62:e8:ae:3b:f8:35:d9:f0:fb:78:f6:9d:65:
2c:3f:e7:76:23:51:1d:81:97:30:05:26:6b:1e:09:
75:e0:f5:aa:8f:0b:d3:b2:70:ab:8d:e2:51:a3:10:
ce:7d:2d:57:5f:7c:ac:23:fd:b3:21:2a:58:fc:34:
20:22:fc:4a:68:51:1a:bb:8f:f8:fc:4b:90:0b:49:
f0:6f:2a:0e:90:05:85:07:99:4f:54:b3:26:1f:a3:
dc:21:56:92:44:e8:3b:f3:b8:80:cd:a6:11:07:cf:
05:b6:5c:97:14:04:e0:1f:fb:2e:23:10:bb:a2:40:
1c:61:cb:07:e2:cb:a2:4c:2e:03:b6:51:5f:88:99:
db:50:71:fc:e1:b2:16:51:35:80:4b:37:a5:35:b3:
5c:79:14:c5:6b:a6:9c:80:9d:20:f5:09:0d:58:28:
5a:52:d4:7d:c7:fb:6d:b5:40:32:e1:f6:41:5d:de:
8d:3f:0c:da:13:56:d2:e6:d0:f1:f6:fc:1b:82:9b:
78:3f:5f:e9:f8:dc:c9:bb:f9:0e:d0:73:e6:a1:71:
c8:2e:37:3a:0a:47:5b:ee:8f:d9:64:61:8b:d5:45:
c6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8B:FA:7F:BE:94:4C:2F:86:FF:19:D2:93:0E:42:04:6F:B9:8E:F0
X509v3 Authority Key Identifier:
keyid:4A:B9:F9:00:BA:61:8B:E8:E7:C9:20:96:3C:DF:75:7B:90:50:E5:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:1f:58:46:1a:09:a0:85:3e:61:62:0e:69:22:3b:9b:3a:87:
f4:73:2b:94:4e:c1:13:5d:b5:fd:c2:7b:26:9f:ed:74:d5:1e:
d0:af:e4:e4:2a:7d:87:db:8a:48:7d:0e:3d:21:de:47:dd:f3:
7e:8e:57:8e:e9:ce:ff:c8:81:30:c7:4e:6c:0b:63:43:83:21:
b3:66:b1:a4:0f:62:9f:85:d4:ce:2b:05:9a:22:b9:26:d6:a2:
6b:c6:85:5b:a4:12:86:ea:7f:32:6c:e3:50:12:95:79:07:76:
7b:81:fd:54:6d:45:bd:15:46:e6:71:62:d2:36:68:61:39:9c:
1e:5d:ce:22:7b:f0:f9:2a:d1:6e:3a:b3:b1:69:ff:db:3b:32:
2c:8c:7f:53:9c:a6:20:8c:30:8a:54:5d:52:30:01:3f:a7:46:
cb:c8:0e:02:63:cd:b5:b2:88:eb:ea:9c:9a:b8:e7:83:f0:30:
ba:ea:44:b3:ad:71:28:3d:31:90:e7:50:41:d7:72:c1:62:31:
1e:fb:a3:da:4d:68:d5:bd:61:74:45:51:b8:4c:30:0c:7f:55:
4d:91:14:b7:7e:51:be:e1:3b:a0:57:c4:74:17:32:18:f9:50:
7a:9b:94:80:ed:cf:2e:ab:3d:1f:dc:40:80:b7:5d:d5:5e:86:
96:53:bb:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX/64c/bcEnoMTfSCDEonMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYjlmOTAwYmE2MThiZThlN2M5MjA5NjNjZGY3NTdiOTA1
MGU1MDkwHhcNMjUwODIzMTAwMTExWhcNMjUwODI0MTAwMTExWjAzMTEwLwYDVQQD
EygxMzhiZmE3ZmJlOTQ0YzJmODZmZjE5ZDI5MzBlNDIwNDZmYjk4ZWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwya8sC3Kz/y8ZHiDj+cUY/9TZCKL
PC3Ag+v1ZKOuLWLorjv4Ndnw+3j2nWUsP+d2I1EdgZcwBSZrHgl14PWqjwvTsnCr
jeJRoxDOfS1XX3ysI/2zISpY/DQgIvxKaFEau4/4/EuQC0nwbyoOkAWFB5lPVLMm
H6PcIVaSROg787iAzaYRB88FtlyXFATgH/suIxC7okAcYcsH4suiTC4DtlFfiJnb
UHH84bIWUTWASzelNbNceRTFa6acgJ0g9QkNWChaUtR9x/tttUAy4fZBXd6NPwza
E1bS5tDx9vwbgpt4P1/p+NzJu/kO0HPmoXHILjc6Ckdb7o/ZZGGL1UXGhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOL+n++lEwvhv8Z0pMOQgRvuY7wMB8GA1UdIwQY
MBaAFEq5+QC6YYvo58kgljzfdXuQUOUJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3JuNUFMcGhpLWpueVNDV1BOOTFlNUJRNVFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iNDIwMjctNjYzNy00OGU3LWEzNTQt
OWUwYjE5NmEwNDg3LzEvU3JuNUFMcGhpLWpueVNDV1BOOTFlNUJRNVFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9iNDIwMjctNjYzNy00OGU3LWEzNTQtOWUwYjE5NmEwNDg3
LzEvU3JuNUFMcGhpLWpueVNDV1BOOTFlNUJRNVFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlx9YRhoJ
oIU+YWIOaSI7mzqH9HMrlE7BE121/cJ7Jp/tdNUe0K/k5Cp9h9uKSH0OPSHeR93z
fo5XjunO/8iBMMdObAtjQ4Mhs2axpA9in4XUzisFmiK5Jtaia8aFW6QShup/Mmzj
UBKVeQd2e4H9VG1FvRVG5nFi0jZoYTmcHl3OInvw+SrRbjqzsWn/2zsyLIx/U5ym
IIwwilRdUjABP6dGy8gOAmPNtbKI6+qcmrjng/AwuupEs61xKD0xkOdQQddywWIx
Hvuj2k1o1b1hdEVRuEwwDH9VTZEUt35RvuE7oFfEdBcyGPlQepuUgO3PLqs9H9xA
gLdd1V6GllO7pw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:58 2025 by rpki-client