Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
File: sYfM7EmqX2aqAmSNkbSi7o_3veY.mft (raw, json)
Hash identifier: iPptEY7DX9XjUTBpjtdIUGVI+6gHqaaihk/BMsUTNH0=
Subject key identifier: 76:72:C6:BA:54:10:FD:E1:1B:8A:A0:5E:F0:49:A2:F7:19:B2:F0:58
Authority key identifier: B1:87:CC:EC:49:AA:5F:66:AA:02:64:8D:91:B4:A2:EE:8F:F7:BD:E6
Certificate issuer: /CN=b187ccec49aa5f66aa02648d91b4a2ee8ff7bde6
Certificate serial: 01984708C0957B696E89AA6FD2A0611EAFBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
Manifest number: 032E
Signing time: Sat 26 Jul 2025 14:00:12 +0000
Manifest this update: Sat 26 Jul 2025 14:00:12 +0000
Manifest next update: Sun 27 Jul 2025 14:00:12 +0000
Files and hashes: 1: OfdMOcUbbc7oEojb1zo08qkIRuQ.roa (hash: IicrU+y2VcBYbd4QyyTDfZZRjrYA59p1rvePkvFgFRg=)
2: sYfM7EmqX2aqAmSNkbSi7o_3veY.crl (hash: T/Qpg98ZPSQCIFLxawW8B4hIa8xhZBkLJ9dwVq6gKxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:08:c0:95:7b:69:6e:89:aa:6f:d2:a0:61:1e:af:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b187ccec49aa5f66aa02648d91b4a2ee8ff7bde6
Validity
Not Before: Jul 26 14:00:12 2025 GMT
Not After : Jul 27 14:00:12 2025 GMT
Subject: CN=7672c6ba5410fde11b8aa05ef049a2f719b2f058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:04:c1:29:4a:ae:b9:6b:3b:e0:2d:22:f5:65:
42:c0:42:10:42:8d:97:dc:dd:2c:32:af:d6:49:c4:
ba:90:1d:65:7c:02:92:9c:09:fc:56:ef:c4:de:50:
9d:24:57:a6:61:5c:a7:20:1f:9b:57:a2:fd:6c:37:
87:cc:74:da:58:32:dc:58:19:50:53:c5:3b:5b:93:
73:25:f4:d3:5f:18:02:c1:e3:4e:b7:db:30:e3:5c:
e7:88:56:a9:13:b6:a3:64:58:7f:22:91:e8:e4:2d:
c9:ac:3b:d5:04:33:f9:4a:9b:95:9b:c0:0b:0d:50:
42:f7:9f:34:eb:01:ba:61:8e:1f:00:a9:b9:48:e7:
55:ad:a8:14:0b:8b:03:0b:5b:aa:bd:15:92:bd:77:
b9:8c:51:84:d7:0b:51:0c:53:43:b2:04:15:dd:5b:
f4:5d:e0:ca:36:e0:64:96:5f:c4:5a:7c:da:59:19:
70:93:d1:a7:51:e8:4b:0b:be:b9:31:8e:c8:48:55:
61:61:61:5e:8c:e9:79:37:8e:5b:f7:c5:1e:d1:8c:
81:fa:6c:b7:45:c6:42:f4:c8:57:1c:3e:3c:03:00:
fd:ed:35:b9:72:7e:f1:91:ca:88:ba:02:c3:6a:7a:
b5:64:19:76:cd:a7:56:0f:ee:fd:ba:f9:77:92:1e:
b9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:72:C6:BA:54:10:FD:E1:1B:8A:A0:5E:F0:49:A2:F7:19:B2:F0:58
X509v3 Authority Key Identifier:
keyid:B1:87:CC:EC:49:AA:5F:66:AA:02:64:8D:91:B4:A2:EE:8F:F7:BD:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:63:90:90:e9:24:e0:4e:52:1d:1c:7b:01:94:2b:42:70:b0:
9a:db:8e:29:ef:e4:3f:68:98:cf:44:a1:ed:c5:4b:e3:4e:5e:
de:41:73:0b:a9:ab:ff:56:dd:e6:74:13:7e:47:1e:09:2e:92:
ac:6b:66:93:dd:82:da:2b:b7:66:d0:da:91:40:7b:8e:82:f4:
b3:f1:76:6c:cb:1d:8c:92:92:70:1f:4d:3f:35:e5:8f:96:cf:
ed:28:47:d2:d5:02:d9:7e:7f:0d:05:ee:a0:75:7b:1c:7c:73:
d6:5a:da:5d:9f:b4:db:2e:7e:b8:5a:37:5a:72:f7:9f:f6:56:
5f:43:68:b6:2b:a7:42:ec:89:94:71:0c:69:c8:f4:84:34:30:
aa:8f:9d:e9:37:06:32:26:93:1b:d5:55:cf:60:c5:0c:37:3f:
9f:ca:b3:ea:d9:38:55:12:7a:70:bf:3d:e4:10:47:99:80:64:
95:bc:69:6b:7e:83:90:dc:63:51:09:55:9f:c6:99:ac:cf:90:
30:76:57:bc:a9:66:61:08:93:ff:95:f3:68:7a:5d:d7:32:2d:
ae:1c:b2:ce:50:35:a1:85:be:39:2d:df:45:85:30:79:96:fd:
04:0c:7d:fb:3e:02:26:7b:5a:33:8b:2f:3b:40:2d:d1:4d:c8:
ef:5e:db:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHCMCVe2luiapv0qBhHq++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxODdjY2VjNDlhYTVmNjZhYTAyNjQ4ZDkxYjRhMmVlOGZm
N2JkZTYwHhcNMjUwNzI2MTQwMDEyWhcNMjUwNzI3MTQwMDEyWjAzMTEwLwYDVQQD
Eyg3NjcyYzZiYTU0MTBmZGUxMWI4YWEwNWVmMDQ5YTJmNzE5YjJmMDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQTBKUquuWs74C0i9WVCwEIQQo2X
3N0sMq/WScS6kB1lfAKSnAn8Vu/E3lCdJFemYVynIB+bV6L9bDeHzHTaWDLcWBlQ
U8U7W5NzJfTTXxgCweNOt9sw41zniFapE7ajZFh/IpHo5C3JrDvVBDP5SpuVm8AL
DVBC95806wG6YY4fAKm5SOdVragUC4sDC1uqvRWSvXe5jFGE1wtRDFNDsgQV3Vv0
XeDKNuBkll/EWnzaWRlwk9GnUehLC765MY7ISFVhYWFejOl5N45b98Ue0YyB+my3
RcZC9MhXHD48AwD97TW5cn7xkcqIugLDanq1ZBl2zadWD+79uvl3kh650QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZyxrpUEP3hG4qgXvBJovcZsvBYMB8GA1UdIwQY
MBaAFLGHzOxJql9mqgJkjZG0ou6P973mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1lmTTdFbXFYMmFxQW1TTmtiU2k3b18zdmVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC83MjI4MWEtZDY4OC00MTVkLWEyYzYt
MTdmNGUwZjZjZGViLzEvc1lmTTdFbXFYMmFxQW1TTmtiU2k3b18zdmVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC83MjI4MWEtZDY4OC00MTVkLWEyYzYtMTdmNGUwZjZjZGVi
LzEvc1lmTTdFbXFYMmFxQW1TTmtiU2k3b18zdmVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAImOQkOkk
4E5SHRx7AZQrQnCwmtuOKe/kP2iYz0Sh7cVL405e3kFzC6mr/1bd5nQTfkceCS6S
rGtmk92C2iu3ZtDakUB7joL0s/F2bMsdjJKScB9NPzXlj5bP7ShH0tUC2X5/DQXu
oHV7HHxz1lraXZ+02y5+uFo3WnL3n/ZWX0NotiunQuyJlHEMacj0hDQwqo+d6TcG
MiaTG9VVz2DFDDc/n8qz6tk4VRJ6cL895BBHmYBklbxpa36DkNxjUQlVn8aZrM+Q
MHZXvKlmYQiT/5XzaHpd1zItrhyyzlA1oYW+OS3fRYUweZb9BAx9+z4CJntaM4sv
O0At0U3I717btA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 15:52:13 2025 by rpki-client