Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
File: S84INADK9hbzUCAynI1288S4OaU.mft (raw, json)
Hash identifier: zaReViam5V/s7lkt5H1yjGbhgVBPmC1hYzWYA/zJI6o=
Subject key identifier: 14:74:59:63:70:DD:F5:2A:C9:24:58:B8:36:EE:65:A9:C8:6A:EA:8A
Authority key identifier: 4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
Certificate issuer: /CN=4bce083400caf616f35020329c8d76f3c4b839a5
Certificate serial: 019845BF0E069B9A68DF48305FE8C2EE07AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 08:00:05 +0000
Manifest this update: Sat 26 Jul 2025 08:00:05 +0000
Manifest next update: Sun 27 Jul 2025 08:00:05 +0000
Files and hashes: 1: S84INADK9hbzUCAynI1288S4OaU.crl (hash: fRmheIeQZlw6rs82ZlwC/Ra2Mz/KTDl2eWufySZ6lXA=)
2: xu8AVZlYRkARGQOdM9wgzlgLlPk.roa (hash: z2f5UKfOO2uXvhmwbBAmMbbk0ctXWHQsq/ILki97gKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:0e:06:9b:9a:68:df:48:30:5f:e8:c2:ee:07:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bce083400caf616f35020329c8d76f3c4b839a5
Validity
Not Before: Jul 26 08:00:05 2025 GMT
Not After : Jul 27 08:00:05 2025 GMT
Subject: CN=1474596370ddf52ac92458b836ee65a9c86aea8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:75:e0:b9:ea:ec:36:d8:93:70:99:f3:b8:34:
51:49:45:b2:05:3f:c9:bc:40:86:82:b0:11:d6:50:
78:98:2c:5c:c0:24:1f:a7:3c:a9:e9:b0:c3:d2:92:
c0:8d:b9:9e:a4:f7:96:69:76:06:b1:f8:7b:fc:c7:
a0:f4:29:d3:01:ef:1a:dc:c9:c0:5d:1b:db:d3:c1:
51:dc:93:a8:e3:cc:57:8a:af:03:d9:0c:80:01:ab:
0a:c3:0c:4b:89:3e:d8:e6:92:43:96:dc:90:73:d0:
76:ef:4b:6d:80:3c:01:5a:42:68:f4:35:a3:a5:73:
59:fc:60:b5:da:b5:22:c8:71:c7:1c:bd:0e:d8:ad:
f9:dd:42:8a:7f:3f:6c:c6:bf:02:18:2a:e7:37:1e:
fe:e6:78:13:d2:a5:e1:8c:54:80:e1:83:4c:db:03:
38:c0:da:af:cc:9b:f0:09:f9:37:83:64:b3:8e:6a:
68:8b:ec:b2:2a:a1:cd:9d:64:ff:89:c4:4d:70:e2:
c9:b2:2c:d2:65:be:5e:0a:b8:9d:41:f0:ba:50:ae:
af:ec:26:f4:86:b1:5e:88:bb:10:d4:e0:6b:ed:30:
b6:fc:ea:2b:f8:b0:4c:ed:95:86:34:7d:89:97:d1:
25:e2:af:e0:f2:5c:50:fd:e4:b0:8a:6c:37:da:f6:
80:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:74:59:63:70:DD:F5:2A:C9:24:58:B8:36:EE:65:A9:C8:6A:EA:8A
X509v3 Authority Key Identifier:
keyid:4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6d:0b:12:72:13:4c:8a:0b:96:b3:50:79:a5:e1:7f:b4:4c:
9d:cd:5b:fa:59:3f:20:af:89:e9:8b:8c:6f:f4:f8:eb:d6:05:
96:e7:4a:57:dc:dc:ca:ba:80:83:17:e0:c6:a4:e9:17:e0:82:
5a:d8:26:d1:61:1c:ca:19:1e:a8:68:06:3a:cf:ce:23:d1:8d:
b9:84:f4:01:eb:73:ba:da:77:f5:db:43:41:fd:d6:52:75:1c:
45:0e:61:13:53:62:93:bb:8b:54:cc:eb:5f:dd:9f:5b:ed:c8:
14:10:b2:96:24:d8:ed:1f:55:8f:11:2e:04:93:08:8a:27:af:
5e:31:6e:c3:39:9b:26:36:45:aa:ef:2a:2c:17:15:1d:b5:c9:
59:d4:72:d4:a8:c6:57:67:76:94:c7:a5:74:c5:23:7c:ba:67:
21:e6:78:7d:1d:6b:48:97:f5:94:4b:5c:51:2c:6c:a9:88:92:
79:43:ae:11:98:d8:39:e7:6c:b9:b4:c3:c8:da:2c:a7:0c:60:
85:89:d5:9e:14:40:71:ba:0e:83:31:4e:34:8e:43:9b:a3:79:
27:3b:50:e4:fe:4f:c8:78:1d:ea:c4:cc:b2:92:05:76:d6:e9:
0f:3b:41:db:74:ed:ee:ed:7b:fe:30:e0:19:84:d9:37:c2:af:
ca:e2:35:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFvw4Gm5po30gwX+jC7geuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiY2UwODM0MDBjYWY2MTZmMzUwMjAzMjljOGQ3NmYzYzRi
ODM5YTUwHhcNMjUwNzI2MDgwMDA1WhcNMjUwNzI3MDgwMDA1WjAzMTEwLwYDVQQD
EygxNDc0NTk2MzcwZGRmNTJhYzkyNDU4YjgzNmVlNjVhOWM4NmFlYThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nXguersNtiTcJnzuDRRSUWyBT/J
vECGgrAR1lB4mCxcwCQfpzyp6bDD0pLAjbmepPeWaXYGsfh7/Meg9CnTAe8a3MnA
XRvb08FR3JOo48xXiq8D2QyAAasKwwxLiT7Y5pJDltyQc9B270ttgDwBWkJo9DWj
pXNZ/GC12rUiyHHHHL0O2K353UKKfz9sxr8CGCrnNx7+5ngT0qXhjFSA4YNM2wM4
wNqvzJvwCfk3g2Szjmpoi+yyKqHNnWT/icRNcOLJsizSZb5eCridQfC6UK6v7Cb0
hrFeiLsQ1OBr7TC2/Oor+LBM7ZWGNH2Jl9El4q/g8lxQ/eSwimw32vaABwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBR0WWNw3fUqySRYuDbuZanIauqKMB8GA1UdIwQY
MBaAFEvOCDQAyvYW81AgMpyNdvPEuDmlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzg0SU5BREs5aGJ6VUNBeW5JMTI4OFM0T2FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83N2ZmMmEtZGQ2Yi00MGNhLTk5N2Mt
ODBhN2ViYTZmOGU5LzEvUzg0SU5BREs5aGJ6VUNBeW5JMTI4OFM0T2FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC83N2ZmMmEtZGQ2Yi00MGNhLTk5N2MtODBhN2ViYTZmOGU5
LzEvUzg0SU5BREs5aGJ6VUNBeW5JMTI4OFM0T2FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAW0LEnIT
TIoLlrNQeaXhf7RMnc1b+lk/IK+J6YuMb/T469YFludKV9zcyrqAgxfgxqTpF+CC
Wtgm0WEcyhkeqGgGOs/OI9GNuYT0Aetzutp39dtDQf3WUnUcRQ5hE1Nik7uLVMzr
X92fW+3IFBCyliTY7R9VjxEuBJMIiievXjFuwzmbJjZFqu8qLBcVHbXJWdRy1KjG
V2d2lMeldMUjfLpnIeZ4fR1rSJf1lEtcUSxsqYiSeUOuEZjYOedsubTDyNospwxg
hYnVnhRAcboOgzFONI5Dm6N5JztQ5P5PyHgd6sTMspIFdtbpDztB23Tt7u17/jDg
GYTZN8KvyuI1VA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:43:01 2025 by rpki-client