Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
File: SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft (raw, json)
Hash identifier: uZXsc4IRa0oQt3tdBMsEVESl4nlGNZf80lsmWfQ1jXg=
Subject key identifier: 38:CC:79:E8:FF:2D:4A:33:57:30:04:8A:AC:58:1F:95:06:B5:25:F8
Authority key identifier: 49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55
Certificate issuer: /CN=49d01f70cf5f4deed93a8c15e494029e93abed55
Certificate serial: 0198447629093817C98357CDCF8FAC5708A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
Manifest number: 0221
Signing time: Sat 26 Jul 2025 02:00:51 +0000
Manifest this update: Sat 26 Jul 2025 02:00:51 +0000
Manifest next update: Sun 27 Jul 2025 02:00:51 +0000
Files and hashes: 1: SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl (hash: Egmx2dgCar3Q5uAXy/lLTxxPLguMbaRicc1V7BSA2nQ=)
2: WxZz3Xq4Dubhk-2v4KkyD3DjymY.roa (hash: TcPVaB9byF2mn4BjYUtIE/4fQoQybO53Dwd3vhK7Z5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:76:29:09:38:17:c9:83:57:cd:cf:8f:ac:57:08:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d01f70cf5f4deed93a8c15e494029e93abed55
Validity
Not Before: Jul 26 02:00:51 2025 GMT
Not After : Jul 27 02:00:51 2025 GMT
Subject: CN=38cc79e8ff2d4a335730048aac581f9506b525f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2b:22:d1:a4:95:05:e4:e1:e6:2a:d1:af:e9:
5c:f7:f3:3b:9b:d9:1b:ff:32:fc:c0:bf:1d:9d:f1:
47:64:a4:36:43:e8:44:1e:3f:3f:1f:49:64:81:eb:
08:b1:23:0a:53:53:a7:53:93:ce:e6:7a:30:ec:69:
43:28:66:a7:9f:3e:e8:d7:0f:1c:68:bd:df:e6:9a:
41:11:cd:0e:b0:d6:b1:36:08:d4:b2:e6:20:96:46:
c4:80:e6:c8:90:19:10:46:10:1a:00:b7:20:a3:4b:
be:b8:c5:22:c1:f6:e3:05:44:50:2e:9c:23:ed:41:
1f:5c:ba:01:e8:90:8c:89:58:d5:9a:2d:de:a4:95:
b8:16:88:63:67:a3:90:1d:ea:d1:8a:3f:53:54:39:
23:29:57:fe:99:13:36:f9:c9:7f:0f:c9:b9:4c:90:
ca:1f:c5:93:b1:50:db:6a:79:ec:14:89:2d:38:c3:
63:db:ce:7f:7b:c2:0f:87:c6:34:b8:59:04:c4:74:
75:80:41:13:7a:32:60:8e:11:e7:73:4d:c8:74:e3:
91:b1:2d:74:ff:13:cb:f8:ca:97:3f:ae:db:8d:3e:
b9:7b:36:cc:f2:65:19:01:52:08:60:7c:27:ba:24:
e9:28:8e:5a:ef:a3:25:0a:90:91:ef:53:5a:40:27:
97:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CC:79:E8:FF:2D:4A:33:57:30:04:8A:AC:58:1F:95:06:B5:25:F8
X509v3 Authority Key Identifier:
keyid:49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:92:ee:01:1c:dd:e0:45:57:9b:84:1e:ee:88:6a:3e:3f:cb:
66:8b:02:dd:f2:96:67:fe:18:c8:15:ac:8b:c5:d6:e7:54:24:
4a:0a:99:f4:8b:c9:17:ae:d9:6b:1f:93:99:97:9d:5e:41:0c:
ea:db:95:3c:1e:4a:4f:96:b8:3b:5d:a3:df:b5:da:b2:59:ca:
4e:f8:2e:2c:8a:96:99:b8:e7:eb:49:3e:06:da:ce:b7:6d:1f:
bb:65:00:e8:6d:2e:80:5c:9c:4b:a0:49:cc:b3:41:98:4c:7b:
87:6b:21:31:f8:67:b2:80:f5:7f:68:d1:ef:e2:b2:43:0f:8f:
b2:fe:7a:41:ef:e2:74:0a:56:65:f7:33:42:1f:2f:3a:37:8f:
aa:aa:64:ef:77:1a:a1:2e:42:1c:a1:64:20:d2:80:8c:45:33:
b8:4b:17:8d:f4:fc:b3:f3:17:11:98:99:ec:e5:12:62:c1:bb:
06:24:58:44:74:1e:34:91:fa:d9:13:34:f1:4e:b4:7f:c0:f7:
33:ee:38:e0:55:ee:ad:4f:02:d0:f7:c2:35:8c:05:a5:ad:c8:
7f:37:cb:58:58:29:c5:ac:bc:03:29:73:1f:ad:58:83:92:c8:
a6:9b:6d:d8:cb:87:a6:f4:f1:ec:49:fc:29:d7:0e:4a:a6:af:
c7:fe:c4:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhEdikJOBfJg1fNz4+sVwipMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZDAxZjcwY2Y1ZjRkZWVkOTNhOGMxNWU0OTQwMjllOTNh
YmVkNTUwHhcNMjUwNzI2MDIwMDUxWhcNMjUwNzI3MDIwMDUxWjAzMTEwLwYDVQQD
EygzOGNjNzllOGZmMmQ0YTMzNTczMDA0OGFhYzU4MWY5NTA2YjUyNWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3isi0aSVBeTh5irRr+lc9/M7m9kb
/zL8wL8dnfFHZKQ2Q+hEHj8/H0lkgesIsSMKU1OnU5PO5now7GlDKGannz7o1w8c
aL3f5ppBEc0OsNaxNgjUsuYglkbEgObIkBkQRhAaALcgo0u+uMUiwfbjBURQLpwj
7UEfXLoB6JCMiVjVmi3epJW4FohjZ6OQHerRij9TVDkjKVf+mRM2+cl/D8m5TJDK
H8WTsVDbannsFIktOMNj285/e8IPh8Y0uFkExHR1gEETejJgjhHnc03IdOORsS10
/xPL+MqXP67bjT65ezbM8mUZAVIIYHwnuiTpKI5a76MlCpCR71NaQCeX/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjMeej/LUozVzAEiqxYH5UGtSX4MB8GA1UdIwQY
MBaAFEnQH3DPX03u2TqMFeSUAp6Tq+1VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2RBZmNNOWZUZTdaT293VjVKUUNucE9yN1ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC84MjE1NzItMzQ0NS00OTEwLWExNWMt
ZjRjMTY2YzgzZjg4LzEvU2RBZmNNOWZUZTdaT293VjVKUUNucE9yN1ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC84MjE1NzItMzQ0NS00OTEwLWExNWMtZjRjMTY2YzgzZjg4
LzEvU2RBZmNNOWZUZTdaT293VjVKUUNucE9yN1ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGJLuARzd
4EVXm4Qe7ohqPj/LZosC3fKWZ/4YyBWsi8XW51QkSgqZ9IvJF67Zax+TmZedXkEM
6tuVPB5KT5a4O12j37XaslnKTvguLIqWmbjn60k+BtrOt20fu2UA6G0ugFycS6BJ
zLNBmEx7h2shMfhnsoD1f2jR7+KyQw+Psv56Qe/idApWZfczQh8vOjePqqpk73ca
oS5CHKFkINKAjEUzuEsXjfT8s/MXEZiZ7OUSYsG7BiRYRHQeNJH62RM08U60f8D3
M+444FXurU8C0PfCNYwFpa3IfzfLWFgpxay8AylzH61Yg5LIpptt2MuHpvTx7En8
KdcOSqavx/7E4A==
-----END CERTIFICATE-----
Generated at Sat Jul 26 07:42:22 2025 by rpki-client