Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
File: sGVRk378luFF4zoevKJEktwSDss.mft (raw, json)
Hash identifier: 4u/RSN7dBlezzGsDiBLfF32xvEjvSQTbF3iKvO349VA=
Subject key identifier: 45:83:13:1E:6D:0B:7F:FF:D4:58:56:E5:8D:27:BB:6E:26:47:27:F0
Authority key identifier: B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
Certificate issuer: /CN=b06551937efc96e145e33a1ebca24492dc120ecb
Certificate serial: 0198413DC0480D3C8BDD026D2E65F56E643A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
Manifest number: 1601
Signing time: Fri 25 Jul 2025 11:00:22 +0000
Manifest this update: Fri 25 Jul 2025 11:00:22 +0000
Manifest next update: Sat 26 Jul 2025 11:00:22 +0000
Files and hashes: 1: CwqvWSmBdm9lt3PehiaP0H6J-oY.roa (hash: gTSav2fMjMmokQJGJr0YwjWXX9H3AhJSgjsJ2wpM5SA=)
2: QdvbepQukFmfMSQYf6HBBLcHcMk.roa (hash: F/Id75RSk4+xz0N0tNwJ7jB7AAssoyiwdWIUCFeT7Qg=)
3: sGVRk378luFF4zoevKJEktwSDss.crl (hash: hMYygkjeQAXvQAuVTB1cOEcccYJqr3wDiNV4+sEJW0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:3d:c0:48:0d:3c:8b:dd:02:6d:2e:65:f5:6e:64:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06551937efc96e145e33a1ebca24492dc120ecb
Validity
Not Before: Jul 25 11:00:22 2025 GMT
Not After : Jul 26 11:00:22 2025 GMT
Subject: CN=4583131e6d0b7fffd45856e58d27bb6e264727f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b7:f9:3c:e8:e2:61:11:11:ae:71:1c:82:2f:
aa:02:73:ee:16:ec:c7:4d:81:22:67:74:71:a7:04:
d9:4a:8e:eb:70:7e:36:32:45:f4:1a:e5:ca:08:79:
74:e8:99:c5:52:7d:4f:47:ad:ba:c8:79:4d:1a:93:
0c:61:c4:92:92:88:dc:a6:e7:58:c6:b4:5f:4b:28:
84:ee:d4:91:e7:cf:ec:15:45:22:81:c7:b7:93:c3:
16:aa:60:ae:f9:34:ac:22:3d:48:57:1f:cb:9f:40:
47:7f:3a:44:c4:e2:bd:40:7c:0c:74:f0:09:67:f6:
79:34:e3:bc:f3:68:03:4b:63:61:c0:39:67:1c:ff:
a4:f9:29:1d:15:a2:f0:e4:f0:0b:3b:73:86:50:d0:
4f:3e:c3:39:4d:0a:85:f6:43:43:0c:28:eb:68:e2:
39:94:31:03:27:be:81:92:e9:aa:47:e6:58:b0:3d:
94:df:e3:fb:b0:b8:2f:c1:24:43:2e:03:be:a7:c1:
66:79:34:b3:e2:73:ac:76:d6:85:4a:9a:c0:b2:b7:
1c:9e:83:0e:38:62:ec:ed:db:7d:50:20:8c:bb:eb:
38:9f:60:e0:5c:4e:74:c5:d6:7b:6e:d6:3d:75:29:
dd:57:3b:81:77:44:b6:ec:ef:7f:84:4f:72:df:5d:
7a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:83:13:1E:6D:0B:7F:FF:D4:58:56:E5:8D:27:BB:6E:26:47:27:F0
X509v3 Authority Key Identifier:
keyid:B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:84:42:8c:e3:56:50:52:95:09:1b:3b:0e:00:78:3b:fd:11:
89:05:36:98:6d:96:0f:e9:98:76:1e:e3:77:dc:0c:25:c6:ab:
c8:45:c3:54:2e:8c:3f:4a:a7:a0:8e:ef:81:86:e6:29:fe:b8:
55:6a:37:5c:e7:f6:76:17:a5:81:b4:a8:b4:e7:1c:9e:1e:56:
7c:97:12:72:d9:de:55:4c:44:53:be:b0:00:74:65:6e:8b:fb:
44:9c:90:9a:5e:17:99:31:d1:22:c1:c4:4b:1e:7a:19:4d:b6:
3d:63:9a:83:ea:23:e4:01:ef:63:08:01:01:d3:98:23:f2:ee:
bd:a4:37:d8:6a:5f:10:16:58:35:1b:fc:ba:f0:d4:bd:c6:0c:
05:f2:b3:48:d4:6e:97:f1:7e:e1:9f:19:22:01:34:58:41:7b:
ab:b5:c8:63:cc:02:f2:8e:49:8a:f4:c0:99:8b:d2:91:b3:09:
f3:dd:ce:6a:f8:38:25:d4:e7:b2:e5:a7:b6:d6:17:b8:cd:c0:
08:c4:78:09:e0:aa:94:bc:d6:4d:49:57:3a:b9:1c:d4:de:0d:
64:3b:68:b8:45:b7:eb:84:e1:40:13:9a:7e:1a:c9:a0:4b:70:
9e:e4:df:56:5f:7f:04:6e:22:b3:06:d6:23:3d:25:b5:80:13:
70:3b:47:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhBPcBIDTyL3QJtLmX1bmQ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNjU1MTkzN2VmYzk2ZTE0NWUzM2ExZWJjYTI0NDkyZGMx
MjBlY2IwHhcNMjUwNzI1MTEwMDIyWhcNMjUwNzI2MTEwMDIyWjAzMTEwLwYDVQQD
Eyg0NTgzMTMxZTZkMGI3ZmZmZDQ1ODU2ZTU4ZDI3YmI2ZTI2NDcyN2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLf5POjiYRERrnEcgi+qAnPuFuzH
TYEiZ3RxpwTZSo7rcH42MkX0GuXKCHl06JnFUn1PR626yHlNGpMMYcSSkojcpudY
xrRfSyiE7tSR58/sFUUigce3k8MWqmCu+TSsIj1IVx/Ln0BHfzpExOK9QHwMdPAJ
Z/Z5NOO882gDS2NhwDlnHP+k+SkdFaLw5PALO3OGUNBPPsM5TQqF9kNDDCjraOI5
lDEDJ76BkumqR+ZYsD2U3+P7sLgvwSRDLgO+p8FmeTSz4nOsdtaFSprAsrccnoMO
OGLs7dt9UCCMu+s4n2DgXE50xdZ7btY9dSndVzuBd0S27O9/hE9y3116tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWDEx5tC3//1FhW5Y0nu24mRyfwMB8GA1UdIwQY
MBaAFLBlUZN+/JbhReM6HryiRJLcEg7LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0dWUmszNzhsdUZGNHpvZXZLSkVrdHdTRHNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8yYzQ3MzEtODlkNS00ZTliLWI0YWEt
YmYwOWFkMzJjODg4LzEvc0dWUmszNzhsdUZGNHpvZXZLSkVrdHdTRHNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8yYzQ3MzEtODlkNS00ZTliLWI0YWEtYmYwOWFkMzJjODg4
LzEvc0dWUmszNzhsdUZGNHpvZXZLSkVrdHdTRHNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmIRCjONW
UFKVCRs7DgB4O/0RiQU2mG2WD+mYdh7jd9wMJcaryEXDVC6MP0qnoI7vgYbmKf64
VWo3XOf2dhelgbSotOccnh5WfJcSctneVUxEU76wAHRlbov7RJyQml4XmTHRIsHE
Sx56GU22PWOag+oj5AHvYwgBAdOYI/LuvaQ32GpfEBZYNRv8uvDUvcYMBfKzSNRu
l/F+4Z8ZIgE0WEF7q7XIY8wC8o5JivTAmYvSkbMJ893Oavg4JdTnsuWnttYXuM3A
CMR4CeCqlLzWTUlXOrkc1N4NZDtouEW364ThQBOafhrJoEtwnuTfVl9/BG4iswbW
Iz0ltYATcDtHQA==
-----END CERTIFICATE-----
Generated at Fri Jul 25 12:43:12 2025 by rpki-client