Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
File: Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft (raw, json)
Hash identifier: YadPoIbkiBSzwcQsyGkWFZFStsMhxNfyy2X2jcNuAhk=
Subject key identifier: A9:9C:D7:83:CB:BB:99:84:99:83:3A:2B:5D:17:B6:64:12:4D:8D:E3
Authority key identifier: 4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0
Certificate issuer: /CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0
Certificate serial: 01984A77A51AD5D58395E5986C9C49BB458B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 06:00:11 +0000
Manifest this update: Sun 27 Jul 2025 06:00:11 +0000
Manifest next update: Mon 28 Jul 2025 06:00:11 +0000
Files and hashes: 1: E_IIvSbgDnePwa4szd7VMD6gnys.roa (hash: XolhJaC158fPYvnn4RwApw3vI0d4xDumHbsdRnhLiB8=)
2: Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl (hash: n+gsEdX93AchFXbK0zH9PwCCPfe5+R652PKvlvo/1VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:a5:1a:d5:d5:83:95:e5:98:6c:9c:49:bb:45:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0
Validity
Not Before: Jul 27 06:00:11 2025 GMT
Not After : Jul 28 06:00:11 2025 GMT
Subject: CN=a99cd783cbbb998499833a2b5d17b664124d8de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:34:10:04:3f:c5:a0:2c:eb:e3:cc:9f:92:ac:
6f:1c:e3:59:31:4f:25:10:ad:54:83:df:72:46:a9:
fb:60:f3:40:d9:3f:59:dc:bc:c6:22:27:70:47:dc:
06:c3:35:3e:ef:97:f3:1b:81:ad:09:83:a4:63:65:
04:79:c8:77:d5:e1:cb:97:8e:d2:f7:cd:14:e0:1b:
0d:d3:71:65:00:2f:2f:56:99:c4:29:dd:df:88:07:
28:9c:30:eb:2b:2d:a6:5f:f4:8b:5f:7d:8e:01:04:
82:88:06:f3:40:86:d7:d4:50:c7:3b:4f:39:ad:fa:
f3:e3:d3:0e:c8:dc:ac:f1:87:cd:fc:19:e2:57:82:
6f:e9:ce:97:c9:94:4f:cf:bd:25:b4:71:79:69:81:
e3:d3:e6:7a:e1:50:ec:b9:89:93:2a:c8:8f:12:f5:
58:c3:66:d7:81:35:f6:94:44:20:6d:30:95:c8:c8:
83:b1:ec:46:3f:11:e8:56:9f:7d:8c:59:c7:7d:e2:
59:2e:80:e7:8f:77:40:8f:50:30:08:47:04:cd:dc:
df:5b:ea:3e:8c:2a:3c:e8:48:f0:fd:a4:a4:f9:80:
96:17:f4:8a:17:b5:40:86:57:2e:68:6d:29:80:49:
ec:e6:36:79:3a:76:9d:78:bf:17:7d:26:d8:f2:0f:
72:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9C:D7:83:CB:BB:99:84:99:83:3A:2B:5D:17:B6:64:12:4D:8D:E3
X509v3 Authority Key Identifier:
keyid:4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:19:5e:e0:7b:e8:e2:83:13:87:77:04:27:0d:72:af:64:5d:
8e:fc:a8:67:49:54:0d:f4:0e:ac:21:23:79:be:3a:17:70:b7:
f3:db:42:67:0e:9e:8b:d0:3d:ea:d7:58:6e:0d:fd:f8:bd:c1:
91:55:9e:a1:4a:24:d0:52:cd:65:03:70:74:e6:46:c1:51:1f:
8c:81:d9:1a:75:ec:39:10:89:84:67:b2:8c:ac:a1:3b:43:b8:
13:20:c6:04:9f:51:59:4a:13:d4:74:af:8a:98:43:67:19:97:
9e:c2:76:8b:d3:03:94:f6:dc:a2:bb:82:32:67:cd:63:13:d0:
ce:99:55:3f:49:6a:01:3d:f1:ba:8a:34:78:97:a1:f5:a9:e6:
e3:eb:41:f4:44:8c:14:94:82:49:49:ee:67:8d:63:72:91:15:
ac:b1:d7:9d:93:13:20:aa:42:32:8f:f8:e8:47:19:6b:8e:56:
49:06:47:d6:a1:bf:5b:30:ce:2a:d2:30:df:30:53:80:e1:7e:
6d:db:72:87:35:2f:fd:2c:94:79:41:19:b9:c5:d9:02:aa:85:
73:3b:5e:5d:cd:3f:d4:93:e1:45:d5:da:58:f1:f9:33:4f:6e:
6f:c1:0f:4b:f3:58:23:3e:1e:f7:91:21:22:bf:79:d2:d1:0c:
e3:2a:36:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKd6Ua1dWDleWYbJxJu0WLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNGUyY2YwMDJkNDVmZjlhZGUyYWI4NjQzYWRiZmUwODNj
YTEyZDAwHhcNMjUwNzI3MDYwMDExWhcNMjUwNzI4MDYwMDExWjAzMTEwLwYDVQQD
EyhhOTljZDc4M2NiYmI5OTg0OTk4MzNhMmI1ZDE3YjY2NDEyNGQ4ZGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TQQBD/FoCzr48yfkqxvHONZMU8l
EK1Ug99yRqn7YPNA2T9Z3LzGIidwR9wGwzU+75fzG4GtCYOkY2UEech31eHLl47S
980U4BsN03FlAC8vVpnEKd3fiAconDDrKy2mX/SLX32OAQSCiAbzQIbX1FDHO085
rfrz49MOyNys8YfN/BniV4Jv6c6XyZRPz70ltHF5aYHj0+Z64VDsuYmTKsiPEvVY
w2bXgTX2lEQgbTCVyMiDsexGPxHoVp99jFnHfeJZLoDnj3dAj1AwCEcEzdzfW+o+
jCo86Ejw/aSk+YCWF/SKF7VAhlcuaG0pgEns5jZ5OnadeL8XfSbY8g9y3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmc14PLu5mEmYM6K10XtmQSTY3jMB8GA1UdIwQY
MBaAFEpOLPAC1F/5reKrhkOtv+CDyhLQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2s0czhBTFVYX210NHF1R1E2Ml80SVBLRXRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMDg3OWMtOTc2Ni00YTA1LWFkYmYt
OWFjODFlZjQ1OTJjLzEvU2s0czhBTFVYX210NHF1R1E2Ml80SVBLRXRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zMDg3OWMtOTc2Ni00YTA1LWFkYmYtOWFjODFlZjQ1OTJj
LzEvU2s0czhBTFVYX210NHF1R1E2Ml80SVBLRXRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRle4Hvo
4oMTh3cEJw1yr2RdjvyoZ0lUDfQOrCEjeb46F3C389tCZw6ei9A96tdYbg39+L3B
kVWeoUok0FLNZQNwdOZGwVEfjIHZGnXsORCJhGeyjKyhO0O4EyDGBJ9RWUoT1HSv
iphDZxmXnsJ2i9MDlPbcoruCMmfNYxPQzplVP0lqAT3xuoo0eJeh9anm4+tB9ESM
FJSCSUnuZ41jcpEVrLHXnZMTIKpCMo/46EcZa45WSQZH1qG/WzDOKtIw3zBTgOF+
bdtyhzUv/SyUeUEZucXZAqqFczteXc0/1JPhRdXaWPH5M09ub8EPS/NYIz4e95Eh
Ir950tEM4yo2rQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:29:26 2025 by rpki-client