Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
File: sXQMTAefLR3uhUOfgngbm651apU.mft (raw, json)
Hash identifier: hyyZb+kwS7s65GhXsu4xEb6jRWsh83XkuDl58HwvPws=
Subject key identifier: A6:2A:8F:0C:BB:FF:2C:DC:96:9A:76:EC:EC:02:A1:7A:D9:06:27:33
Authority key identifier: B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95
Certificate issuer: /CN=b1740c4c079f2d1dee85439f82781b9bae756a95
Certificate serial: 01984AE5FED734B1D4637B3914B19BEFF657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
Manifest number: 124E
Signing time: Sun 27 Jul 2025 08:00:43 +0000
Manifest this update: Sun 27 Jul 2025 08:00:43 +0000
Manifest next update: Mon 28 Jul 2025 08:00:43 +0000
Files and hashes: 1: 0kGm7IS6foM84ApNB5wMBZmcs70.roa (hash: fsNAu7RVtrbBsKEN64Ou91zqn3ieSIW0lwlDv3luCl0=)
2: QHGLz4vDf8HU0PXuv58AHJKDNwE.roa (hash: zsAsJqx3Xlx/j+LLE8QbsIeKt4A9wuocERvf2nTmf7A=)
3: Sz2kPMld2S0NhbWe3VBXUQg4E_g.roa (hash: CgZe2V9k88f5ug37ai2G7ohUxSeYSwTeyOJXFySNdfc=)
4: sXQMTAefLR3uhUOfgngbm651apU.crl (hash: 6V58+F6qvA9LPm27jGs1/BlsPgW6IuDcELrHKid+Ur0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:fe:d7:34:b1:d4:63:7b:39:14:b1:9b:ef:f6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1740c4c079f2d1dee85439f82781b9bae756a95
Validity
Not Before: Jul 27 08:00:43 2025 GMT
Not After : Jul 28 08:00:43 2025 GMT
Subject: CN=a62a8f0cbbff2cdc969a76ecec02a17ad9062733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3d:41:73:0b:a7:dc:5e:a5:f0:05:75:a2:f1:
ed:f5:5f:6f:9d:65:a4:e2:81:37:27:bd:38:7c:74:
dc:fe:e8:25:78:1d:92:c3:b3:79:d6:b5:de:5b:13:
6c:89:a6:76:50:dd:ba:7a:5d:b9:f5:b1:6e:50:b5:
1b:7f:93:e5:a6:e1:31:38:c3:73:55:fc:90:af:3f:
d4:d7:7c:5f:df:61:dc:1c:45:bb:46:d2:e9:fb:23:
81:b2:14:a5:8f:84:97:ec:0d:67:7b:a4:9c:ad:a6:
b2:64:91:4d:88:ec:03:7b:56:79:f6:72:c0:eb:39:
1e:4e:af:6d:c6:34:1c:2b:9c:27:b5:57:75:89:5e:
de:c3:3f:eb:22:cb:5a:ae:fc:6d:33:39:e0:33:01:
76:8a:be:22:c5:fc:ca:5a:c8:3a:9c:5c:d1:8e:bb:
70:49:68:02:45:12:eb:fa:02:aa:5c:16:2a:21:30:
d5:2a:8f:df:6d:54:cc:79:f1:6d:b2:81:71:63:df:
7f:85:d0:49:8e:c4:0c:91:e4:c8:e2:4f:35:d7:e0:
6b:fe:5f:95:32:63:99:10:8b:6d:1e:c0:59:07:af:
01:2a:27:e5:fd:16:63:ac:77:d4:85:46:ca:9d:f1:
87:99:c9:c2:7e:de:2a:40:42:14:1c:a4:3c:f3:6a:
bf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2A:8F:0C:BB:FF:2C:DC:96:9A:76:EC:EC:02:A1:7A:D9:06:27:33
X509v3 Authority Key Identifier:
keyid:B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c4:cb:28:d3:5f:b1:3f:84:3c:e3:b5:71:e0:1f:dd:e5:0e:
61:73:92:45:9d:57:64:d9:32:b1:3c:4a:3b:34:0c:21:5d:88:
e7:a1:52:e4:43:21:0a:81:ab:b6:f3:59:0e:27:bf:b8:43:9d:
70:fa:34:2d:c3:6b:42:11:b7:9a:4a:e7:72:28:9c:cd:5d:67:
53:fe:34:c5:1f:b6:0b:61:33:21:22:cf:08:f8:dd:8e:b7:86:
f7:02:3e:9e:85:22:80:b2:68:cd:0c:9d:28:bc:06:8b:bb:8d:
22:f2:60:cd:7e:c7:e5:3b:da:ca:a3:cd:20:82:8e:02:73:f4:
63:ea:6d:7a:b1:ac:8d:96:43:94:3e:96:79:33:65:ef:01:04:
90:a3:f9:d2:a9:af:0e:e3:dc:b4:52:b8:dd:a9:0d:03:da:60:
e8:e1:4f:64:d1:75:04:8b:0a:74:c2:d5:e7:45:6f:13:ce:59:
2b:68:34:29:cd:9d:e3:21:73:5a:19:d4:cc:06:be:91:e5:7a:
b1:6f:8a:9b:43:b3:94:06:4d:88:72:74:1a:98:1a:10:19:d9:
51:f2:e0:06:1f:2d:0f:93:9f:99:65:2d:d4:ad:dc:a1:72:4e:
d0:ad:60:d9:b1:fd:5c:99:46:51:37:f7:6c:b8:a4:29:8f:cb:
99:6a:9a:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5f7XNLHUY3s5FLGb7/ZXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNzQwYzRjMDc5ZjJkMWRlZTg1NDM5ZjgyNzgxYjliYWU3
NTZhOTUwHhcNMjUwNzI3MDgwMDQzWhcNMjUwNzI4MDgwMDQzWjAzMTEwLwYDVQQD
EyhhNjJhOGYwY2JiZmYyY2RjOTY5YTc2ZWNlYzAyYTE3YWQ5MDYyNzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxT1Bcwun3F6l8AV1ovHt9V9vnWWk
4oE3J704fHTc/ugleB2Sw7N51rXeWxNsiaZ2UN26el259bFuULUbf5PlpuExOMNz
VfyQrz/U13xf32HcHEW7RtLp+yOBshSlj4SX7A1ne6ScraayZJFNiOwDe1Z59nLA
6zkeTq9txjQcK5wntVd1iV7ewz/rIstarvxtMzngMwF2ir4ixfzKWsg6nFzRjrtw
SWgCRRLr+gKqXBYqITDVKo/fbVTMefFtsoFxY99/hdBJjsQMkeTI4k811+Br/l+V
MmOZEIttHsBZB68BKifl/RZjrHfUhUbKnfGHmcnCft4qQEIUHKQ882q/aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYqjwy7/yzclpp27OwCoXrZBiczMB8GA1UdIwQY
MBaAFLF0DEwHny0d7oVDn4J4G5uudWqVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1hRTVRBZWZMUjN1aFVPZmduZ2JtNjUxYXBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83MmE0OTUtMmI1ZC00YTIzLTk5YzQt
ZWYwNjcxYzdjMGRmLzEvc1hRTVRBZWZMUjN1aFVPZmduZ2JtNjUxYXBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi83MmE0OTUtMmI1ZC00YTIzLTk5YzQtZWYwNjcxYzdjMGRm
LzEvc1hRTVRBZWZMUjN1aFVPZmduZ2JtNjUxYXBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGsTLKNNf
sT+EPOO1ceAf3eUOYXOSRZ1XZNkysTxKOzQMIV2I56FS5EMhCoGrtvNZDie/uEOd
cPo0LcNrQhG3mkrnciiczV1nU/40xR+2C2EzISLPCPjdjreG9wI+noUigLJozQyd
KLwGi7uNIvJgzX7H5TvayqPNIIKOAnP0Y+pterGsjZZDlD6WeTNl7wEEkKP50qmv
DuPctFK43akNA9pg6OFPZNF1BIsKdMLV50VvE85ZK2g0Kc2d4yFzWhnUzAa+keV6
sW+Km0OzlAZNiHJ0GpgaEBnZUfLgBh8tD5OfmWUt1K3coXJO0K1g2bH9XJlGUTf3
bLikKY/LmWqadg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:32:58 2025 by rpki-client