Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
File: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft (raw, json)
Hash identifier: llEIaGvdnlxLZkLiFopWcv2xBg9TyPbPBkVMHzXFDAI=
Subject key identifier: F5:96:93:35:5F:BA:3F:AF:52:E7:83:C8:90:71:6D:5B:05:AD:2D:E8
Authority key identifier: FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
Certificate issuer: /CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Certificate serial: 01985569942735363D13755BD02FF9EBEB4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 09:00:39 +0000
Manifest this update: Tue 29 Jul 2025 09:00:39 +0000
Manifest next update: Wed 30 Jul 2025 09:00:39 +0000
Files and hashes: 1: 0LP5ahEEWvnMaK30aMTVzU6uXkA.roa (hash: lB/VdYravFr8twO2oC/vGE6G8jo6civSr7gweO3k+0U=)
2: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl (hash: IFW+EatBCvn2OcuYO48LkLTZF1OPBUphPg9RC/ClVrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:69:94:27:35:36:3d:13:75:5b:d0:2f:f9:eb:eb:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Validity
Not Before: Jul 29 09:00:39 2025 GMT
Not After : Jul 30 09:00:39 2025 GMT
Subject: CN=f59693355fba3faf52e783c890716d5b05ad2de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:02:43:52:03:d0:b4:70:98:78:a1:13:8d:0b:
c7:9f:dd:f0:84:99:20:a3:1f:31:b6:df:7d:bb:00:
1d:a0:0c:2b:5d:24:bc:fe:99:ae:59:51:34:3d:90:
49:87:ff:cb:36:86:c2:5e:89:85:c8:f1:35:ef:fa:
d8:0b:ca:53:23:2c:e4:65:17:f7:57:d5:15:12:dd:
9d:b8:83:57:d0:9f:a1:47:1e:21:1f:f7:7f:a6:44:
8c:c5:f0:af:45:6c:f7:e2:c6:e6:a2:15:4d:32:a1:
a5:bd:24:5d:41:a7:6b:97:9a:50:4b:9f:d4:69:81:
0b:43:92:5c:a1:0e:86:7b:d7:1d:e5:56:f0:1d:e3:
e2:d9:c0:e3:0c:eb:f3:29:77:ce:70:51:88:71:b6:
fd:b3:44:8e:1e:76:ac:ce:c9:3b:98:6b:ca:ce:d5:
d2:47:69:c3:6f:da:1d:3f:e4:64:08:48:e7:d2:05:
1d:0c:1e:06:a6:39:69:fa:a7:71:75:67:66:ed:b8:
d1:cb:59:d3:8c:f7:77:a2:56:9b:bf:e6:f3:8a:0b:
8f:61:e9:21:2b:2b:39:fb:a5:b3:a9:44:e8:2d:c3:
18:83:4d:6a:e3:3e:23:65:60:b5:fe:41:32:24:52:
84:79:d2:fb:0b:15:58:7c:06:96:94:bd:f0:f5:d9:
dd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:96:93:35:5F:BA:3F:AF:52:E7:83:C8:90:71:6D:5B:05:AD:2D:E8
X509v3 Authority Key Identifier:
keyid:FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:83:ff:f4:a5:00:66:03:a6:c5:7f:43:2d:80:00:31:a1:41:
ba:cc:df:90:75:22:e9:e4:a3:14:2b:95:1f:2f:55:91:e9:5a:
c7:24:50:e3:60:7a:b3:b6:46:16:61:5c:18:97:5e:2d:90:86:
cd:57:da:0c:cf:9f:92:66:ef:11:2f:3d:77:52:76:72:22:5c:
86:68:e8:15:d2:00:72:fc:ac:97:57:21:8d:ca:cf:dd:dd:db:
05:1c:5e:6e:e3:39:0b:35:1a:79:74:d2:bc:ca:22:27:8f:44:
dd:3e:fe:8d:6d:c9:00:df:b0:bb:8d:21:fc:66:c6:89:e5:a8:
03:09:9c:df:73:e6:7e:8d:00:6f:22:38:bb:1e:a0:c0:ba:49:
34:0e:61:45:a1:52:57:f9:f9:98:f0:09:e6:94:ea:98:a1:32:
dc:04:1b:a9:37:e5:dd:21:13:b2:a4:75:6d:a6:4b:10:6c:d3:
75:5b:c6:14:0b:b2:06:79:f6:13:58:97:d7:09:4a:b6:86:c5:
8b:9d:e6:21:72:bb:d8:a7:6f:a2:a9:8b:b8:d3:9b:da:38:0a:
91:9e:fa:09:02:a2:07:e2:34:3f:99:e1:be:ef:0c:56:91:9e:
11:88:fd:4e:00:dd:fa:99:2c:b7:49:73:ad:9e:3f:bf:f2:60:
5e:47:f9:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhVaZQnNTY9E3Vb0C/56+tPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMmFmOTA2MGMxZjQyYzYyOGZjZmI4ZjA3ODFkN2E1YmMy
MWZjMDIwHhcNMjUwNzI5MDkwMDM5WhcNMjUwNzMwMDkwMDM5WjAzMTEwLwYDVQQD
EyhmNTk2OTMzNTVmYmEzZmFmNTJlNzgzYzg5MDcxNmQ1YjA1YWQyZGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwJDUgPQtHCYeKETjQvHn93whJkg
ox8xtt99uwAdoAwrXSS8/pmuWVE0PZBJh//LNobCXomFyPE17/rYC8pTIyzkZRf3
V9UVEt2duINX0J+hRx4hH/d/pkSMxfCvRWz34sbmohVNMqGlvSRdQadrl5pQS5/U
aYELQ5JcoQ6Ge9cd5VbwHePi2cDjDOvzKXfOcFGIcbb9s0SOHnaszsk7mGvKztXS
R2nDb9odP+RkCEjn0gUdDB4Gpjlp+qdxdWdm7bjRy1nTjPd3olabv+bziguPYekh
Kys5+6WzqUToLcMYg01q4z4jZWC1/kEyJFKEedL7CxVYfAaWlL3w9dndQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWWkzVfuj+vUueDyJBxbVsFrS3oMB8GA1UdIwQY
MBaAFP0q+QYMH0LGKPz7jweB16W8IfwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1NyNUJnd2ZRc1lvX1B1UEI0SFhwYndoX0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hOThlNGEtNDVhYS00MDhjLWI4MDct
YmZjZjlhOTIyYThiLzEvX1NyNUJnd2ZRc1lvX1B1UEI0SFhwYndoX0FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hOThlNGEtNDVhYS00MDhjLWI4MDctYmZjZjlhOTIyYThi
LzEvX1NyNUJnd2ZRc1lvX1B1UEI0SFhwYndoX0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOIP/9KUA
ZgOmxX9DLYAAMaFBuszfkHUi6eSjFCuVHy9VkelaxyRQ42B6s7ZGFmFcGJdeLZCG
zVfaDM+fkmbvES89d1J2ciJchmjoFdIAcvysl1chjcrP3d3bBRxebuM5CzUaeXTS
vMoiJ49E3T7+jW3JAN+wu40h/GbGieWoAwmc33Pmfo0AbyI4ux6gwLpJNA5hRaFS
V/n5mPAJ5pTqmKEy3AQbqTfl3SETsqR1baZLEGzTdVvGFAuyBnn2E1iX1wlKtobF
i53mIXK72KdvoqmLuNOb2jgKkZ76CQKiB+I0P5nhvu8MVpGeEYj9TgDd+pkst0lz
rZ4/v/JgXkf5fg==
-----END CERTIFICATE-----
Generated at Tue Jul 29 14:37:09 2025 by rpki-client