Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
File: svJ5U61GkMBo-0D581YAM3m7Y_g.mft (raw, json)
Hash identifier: ToobDeowqPkhguuMm3+kfnOqJmP+4e/7mDsqvm1zPRg=
Subject key identifier: BB:A1:3B:A4:C2:CE:95:0A:6A:16:96:24:09:FD:E5:E3:1D:98:9F:FA
Authority key identifier: B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
Certificate issuer: /CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Certificate serial: 01984A0A3B5C94689C538E1AA4D90B1A09FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
Manifest number: 0F91
Signing time: Sun 27 Jul 2025 04:00:41 +0000
Manifest this update: Sun 27 Jul 2025 04:00:41 +0000
Manifest next update: Mon 28 Jul 2025 04:00:41 +0000
Files and hashes: 1: bkaEgwUfFQuvU4deHKYEq645oxo.roa (hash: a6t899hSFrNnCxDeJsEHX7KWBkAwoAJJxMP3KbPkcsM=)
2: gM8Vs4rZduYc-FMusqbqCtswvSM.roa (hash: PdGvc2+s2b+cxeznU9E/uPp7OuLxD8n8FSf7bdTA3Io=)
3: svJ5U61GkMBo-0D581YAM3m7Y_g.crl (hash: 0nkwsftfgrdfK/Zw6zI6oVI/ZKTDigFAzpCZQLCjGWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:3b:5c:94:68:9c:53:8e:1a:a4:d9:0b:1a:09:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Validity
Not Before: Jul 27 04:00:41 2025 GMT
Not After : Jul 28 04:00:41 2025 GMT
Subject: CN=bba13ba4c2ce950a6a16962409fde5e31d989ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:13:74:cc:d4:32:71:87:8b:08:c7:d1:15:33:
e1:79:19:3c:85:32:0e:1a:9c:64:ee:c9:b9:ab:b5:
c9:9e:81:cd:ab:9b:20:13:de:bb:c9:3b:cf:f1:8c:
09:41:08:41:80:53:27:20:23:70:7e:74:36:11:00:
6b:1a:ff:ff:32:dd:09:28:ca:c8:12:8c:34:f0:da:
20:0c:86:cb:1f:6e:38:33:ca:00:4d:58:52:54:45:
c4:e3:2a:c1:53:9e:a4:2e:95:81:c9:ba:0d:1a:8b:
22:74:a4:ed:b5:51:fc:09:61:b4:73:cb:67:77:dd:
78:c5:50:9e:29:19:37:81:bf:85:85:6a:8c:d1:6a:
a6:71:73:57:17:73:54:05:34:6a:e5:97:c1:18:93:
30:e7:8c:ff:4f:5d:9b:37:4a:da:d3:d7:db:0d:80:
9c:3d:d1:85:7e:fb:7f:e2:1f:6f:20:41:14:aa:f0:
4a:fc:b0:66:c7:26:92:5f:35:f1:98:99:20:e4:89:
4e:2a:09:20:7a:4d:78:e1:ea:e3:de:cb:6c:fd:ea:
0f:7f:ee:2c:4c:01:88:d5:58:7a:e7:95:0a:eb:ae:
65:8b:61:bb:59:c6:f0:19:8f:3f:4c:9d:8e:20:6e:
90:e4:28:24:00:e7:be:74:c7:04:f9:18:49:01:e0:
54:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A1:3B:A4:C2:CE:95:0A:6A:16:96:24:09:FD:E5:E3:1D:98:9F:FA
X509v3 Authority Key Identifier:
keyid:B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:3c:b5:a7:e3:c8:45:29:88:99:5c:7b:39:aa:06:2c:c7:a0:
60:84:6c:6b:c3:e8:06:1a:2f:c8:73:49:3f:51:8e:44:da:94:
e2:7e:cb:e5:96:66:57:6c:f6:0b:8a:cf:72:51:23:b0:c4:fb:
76:97:4a:3d:29:ef:f4:5f:23:16:86:d4:99:ba:3b:6c:95:51:
1e:44:96:9f:7f:bc:61:8b:b1:d7:91:a7:15:28:83:f3:8a:f5:
fa:18:a4:a4:f1:e8:fd:fc:2c:1c:75:c0:79:b0:12:3d:1c:1b:
38:6c:be:c9:ba:bf:53:e2:99:90:4c:1f:2b:89:91:5d:05:52:
67:2d:62:14:60:83:ee:5c:58:60:2a:59:50:2c:1e:48:73:d0:
ab:d3:0e:bf:45:61:24:03:c3:9a:fb:c1:77:72:aa:db:3f:b6:
0a:8d:b0:8b:01:03:04:26:76:ae:95:5f:a6:64:f0:ac:ba:24:
3b:84:02:0e:79:0c:44:6f:bd:96:82:f4:31:3d:98:17:0a:49:
cf:6a:72:ec:ac:87:18:71:b9:f6:7e:85:84:5f:08:21:62:58:
42:dd:9a:71:4e:eb:f2:b9:c6:a3:fb:9f:74:d0:14:4d:da:29:
98:32:8e:a8:fb:0d:8b:0e:5c:a6:a5:2b:63:93:8e:9a:21:d3:
8c:57:3b:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCjtclGicU44apNkLGgn7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZjI3OTUzYWQ0NjkwYzA2OGZiNDBmOWYzNTYwMDMzNzli
YjYzZjgwHhcNMjUwNzI3MDQwMDQxWhcNMjUwNzI4MDQwMDQxWjAzMTEwLwYDVQQD
EyhiYmExM2JhNGMyY2U5NTBhNmExNjk2MjQwOWZkZTVlMzFkOTg5ZmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBN0zNQycYeLCMfRFTPheRk8hTIO
Gpxk7sm5q7XJnoHNq5sgE967yTvP8YwJQQhBgFMnICNwfnQ2EQBrGv//Mt0JKMrI
Eow08NogDIbLH244M8oATVhSVEXE4yrBU56kLpWByboNGosidKTttVH8CWG0c8tn
d914xVCeKRk3gb+FhWqM0WqmcXNXF3NUBTRq5ZfBGJMw54z/T12bN0ra09fbDYCc
PdGFfvt/4h9vIEEUqvBK/LBmxyaSXzXxmJkg5IlOKgkgek144erj3sts/eoPf+4s
TAGI1Vh655UK665li2G7WcbwGY8/TJ2OIG6Q5CgkAOe+dMcE+RhJAeBUrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLuhO6TCzpUKahaWJAn95eMdmJ/6MB8GA1UdIwQY
MBaAFLLyeVOtRpDAaPtA+fNWADN5u2P4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3ZKNVU2MUdrTUJvLTBENTgxWUFNM203WV9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wODk3M2YtZmI2YS00MWU1LTg3MjAt
ZmI0Y2YxMzdjMWU5LzEvc3ZKNVU2MUdrTUJvLTBENTgxWUFNM203WV9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8wODk3M2YtZmI2YS00MWU1LTg3MjAtZmI0Y2YxMzdjMWU5
LzEvc3ZKNVU2MUdrTUJvLTBENTgxWUFNM203WV9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTy1p+PI
RSmImVx7OaoGLMegYIRsa8PoBhovyHNJP1GORNqU4n7L5ZZmV2z2C4rPclEjsMT7
dpdKPSnv9F8jFobUmbo7bJVRHkSWn3+8YYux15GnFSiD84r1+hikpPHo/fwsHHXA
ebASPRwbOGy+ybq/U+KZkEwfK4mRXQVSZy1iFGCD7lxYYCpZUCweSHPQq9MOv0Vh
JAPDmvvBd3Kq2z+2Co2wiwEDBCZ2rpVfpmTwrLokO4QCDnkMRG+9loL0MT2YFwpJ
z2py7KyHGHG59n6FhF8IIWJYQt2acU7r8rnGo/ufdNAUTdopmDKOqPsNiw5cpqUr
Y5OOmiHTjFc71Q==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:33:12 2025 by rpki-client