Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
File: sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft (raw, json)
Hash identifier: g3qutDlbfctbjKnBOsmmig8+23il0PWUDbXw7uy1CIM=
Subject key identifier: 28:ED:01:66:E9:B3:60:64:BD:E7:93:6A:67:EE:11:EB:1B:C6:D2:F5
Authority key identifier: B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57
Certificate issuer: /CN=b061bd3cca3d33645a276e0f3224ff89eee44857
Certificate serial: 019854FCF53AA47D1EBFF946CDB5498233D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
Manifest number: 0998
Signing time: Tue 29 Jul 2025 07:02:00 +0000
Manifest this update: Tue 29 Jul 2025 07:02:00 +0000
Manifest next update: Wed 30 Jul 2025 07:02:00 +0000
Files and hashes: 1: YijLZfZ1VVcQMfbO2kW4jsYTug8.roa (hash: f055fbJfO/jOl/pVZwNG+0XakEEdz2iyjouPpXHwKII=)
2: sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl (hash: hm2n4Wvs9JgUf9gx57yG4EIwe+LhANTAf14Mcje/Esc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fc:f5:3a:a4:7d:1e:bf:f9:46:cd:b5:49:82:33:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b061bd3cca3d33645a276e0f3224ff89eee44857
Validity
Not Before: Jul 29 07:02:00 2025 GMT
Not After : Jul 30 07:02:00 2025 GMT
Subject: CN=28ed0166e9b36064bde7936a67ee11eb1bc6d2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a2:90:28:6a:7c:15:12:a3:e3:ae:53:bf:39:
9b:a9:12:41:d4:28:97:98:57:b1:64:46:f3:c5:8a:
58:18:26:2f:c3:5a:b7:fc:61:e9:5b:6a:99:61:31:
b9:ba:d3:eb:1e:98:56:1a:37:bc:0c:62:63:c9:34:
16:92:d6:18:31:2f:96:e7:50:06:75:7e:10:51:cb:
90:45:25:d4:8c:ed:ad:3e:67:0b:50:5e:85:fd:04:
6a:04:6e:cb:21:b5:1c:20:88:55:1b:dc:d4:bb:2b:
33:51:15:27:b4:45:1e:bc:b9:50:37:06:71:48:72:
9f:7e:87:8e:ed:3f:dd:40:60:f8:e6:ce:46:18:42:
65:ff:30:68:aa:36:64:3b:65:be:93:22:9b:de:09:
5b:6e:44:9f:68:5a:37:bd:02:fc:81:d0:75:14:1a:
24:b8:7a:4c:a2:a0:84:07:99:aa:81:95:0b:b2:2e:
59:09:c8:78:e3:6d:61:43:3c:65:3e:c6:6c:0d:b6:
d7:22:f0:a6:a7:70:ba:9c:37:30:8d:66:c6:89:55:
18:ab:64:8f:ac:e4:0d:06:b5:b6:84:43:55:c0:94:
3e:62:1f:64:b3:18:a1:33:a9:cc:53:16:11:ff:60:
f5:08:cc:18:53:2e:97:29:ab:05:41:3b:d8:f2:05:
a5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:ED:01:66:E9:B3:60:64:BD:E7:93:6A:67:EE:11:EB:1B:C6:D2:F5
X509v3 Authority Key Identifier:
keyid:B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:af:c8:8d:f0:8b:96:48:da:f4:4e:28:59:fa:da:ee:1f:68:
db:85:09:ac:73:30:d4:73:ac:66:71:8e:13:6f:e0:4a:da:a4:
78:06:a1:4f:59:6a:91:5e:42:43:89:4b:3a:c8:3a:03:ac:cf:
68:be:6f:4b:4c:ae:9d:63:23:e3:5c:bd:03:6d:05:ac:fc:25:
26:f5:45:a3:f8:89:a9:f4:04:0c:93:cf:f8:a5:22:c6:4f:ad:
1c:eb:71:b0:3f:06:1e:51:e8:06:d5:55:5d:86:d6:5d:8a:9d:
87:6d:da:8f:d1:9f:b3:26:c2:3e:d7:a9:f5:de:3d:3a:3c:69:
bf:3b:c6:c1:78:2c:e9:a5:b9:38:44:62:1b:a2:00:ef:fc:8f:
46:0b:58:b0:2d:37:14:62:48:2d:0b:17:f8:b1:b7:10:7f:d8:
52:eb:ea:eb:a1:b3:8c:63:6c:13:f8:24:73:9e:60:bb:81:e8:
88:3c:c4:a9:bc:45:26:da:4b:5b:cd:ab:73:ce:54:42:be:22:
11:f9:9f:1a:12:88:f0:48:81:62:01:22:5b:ca:54:12:c5:61:
66:16:cb:69:1b:0e:3e:ee:ea:0f:6e:24:64:ed:64:e5:58:76:
13:71:1e:c9:ac:17:15:06:f8:39:3f:83:23:c2:18:0f:be:d5:
7f:9e:01:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhU/PU6pH0ev/lGzbVJgjPYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNjFiZDNjY2EzZDMzNjQ1YTI3NmUwZjMyMjRmZjg5ZWVl
NDQ4NTcwHhcNMjUwNzI5MDcwMjAwWhcNMjUwNzMwMDcwMjAwWjAzMTEwLwYDVQQD
EygyOGVkMDE2NmU5YjM2MDY0YmRlNzkzNmE2N2VlMTFlYjFiYzZkMmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKKQKGp8FRKj465TvzmbqRJB1CiX
mFexZEbzxYpYGCYvw1q3/GHpW2qZYTG5utPrHphWGje8DGJjyTQWktYYMS+W51AG
dX4QUcuQRSXUjO2tPmcLUF6F/QRqBG7LIbUcIIhVG9zUuyszURUntEUevLlQNwZx
SHKffoeO7T/dQGD45s5GGEJl/zBoqjZkO2W+kyKb3glbbkSfaFo3vQL8gdB1FBok
uHpMoqCEB5mqgZULsi5ZCch4421hQzxlPsZsDbbXIvCmp3C6nDcwjWbGiVUYq2SP
rOQNBrW2hENVwJQ+Yh9ksxihM6nMUxYR/2D1CMwYUy6XKasFQTvY8gWlBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjtAWbps2BkveeTamfuEesbxtL1MB8GA1UdIwQY
MBaAFLBhvTzKPTNkWiduDzIk/4nu5EhXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0dHOVBNbzlNMlJhSjI0UE1pVF9pZTdrU0ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82NTc1MzMtMTFlYy00ODRiLWJlNmEt
MzJmZGEzMTE4NmVmLzEvc0dHOVBNbzlNMlJhSjI0UE1pVF9pZTdrU0ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82NTc1MzMtMTFlYy00ODRiLWJlNmEtMzJmZGEzMTE4NmVm
LzEvc0dHOVBNbzlNMlJhSjI0UE1pVF9pZTdrU0ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALa/IjfCL
lkja9E4oWfra7h9o24UJrHMw1HOsZnGOE2/gStqkeAahT1lqkV5CQ4lLOsg6A6zP
aL5vS0yunWMj41y9A20FrPwlJvVFo/iJqfQEDJPP+KUixk+tHOtxsD8GHlHoBtVV
XYbWXYqdh23aj9GfsybCPtep9d49OjxpvzvGwXgs6aW5OERiG6IA7/yPRgtYsC03
FGJILQsX+LG3EH/YUuvq66GzjGNsE/gkc55gu4HoiDzEqbxFJtpLW82rc85UQr4i
EfmfGhKI8EiBYgEiW8pUEsVhZhbLaRsOPu7qD24kZO1k5Vh2E3EeyawXFQb4OT+D
I8IYD77Vf54BBA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 14:49:15 2025 by rpki-client