Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
File: soU6oesyv-4P6xSDwUk20QHxbt8.mft (raw, json)
Hash identifier: mhPL82XpX4AZWaIwnL+k7jY1MRtJdK3P6T3aR/k+7Ac=
Subject key identifier: 7B:C5:BC:69:1F:49:58:EE:CD:E2:24:B4:3D:7E:32:01:49:C5:74:EF
Authority key identifier: B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
Certificate issuer: /CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Certificate serial: 01983D60E30C0594FF9291AA2B5B7264971E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
Manifest number: 1601
Signing time: Thu 24 Jul 2025 17:00:16 +0000
Manifest this update: Thu 24 Jul 2025 17:00:16 +0000
Manifest next update: Fri 25 Jul 2025 17:00:16 +0000
Files and hashes: 1: GGuZV4w4l_L1AAB0u4gI9OxObhI.roa (hash: CLNm60QGfX0COSZodNNnpcHnrbcFlA00OSTVLEP9aw4=)
2: QgESeVhsipvfmTCXEv6UR11P7ys.roa (hash: Mu2ldKy/m2YeXhlwaFd2rkbf1PYIDTAFyxWdZhH8Ols=)
3: soU6oesyv-4P6xSDwUk20QHxbt8.crl (hash: 9hhV4nPCbGMJcuqF9c5Q9LPceTxBE4paMWha5z1vU8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 17:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:60:e3:0c:05:94:ff:92:91:aa:2b:5b:72:64:97:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Validity
Not Before: Jul 24 17:00:16 2025 GMT
Not After : Jul 25 17:00:16 2025 GMT
Subject: CN=7bc5bc691f4958eecde224b43d7e320149c574ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d8:ff:ff:a6:7c:8e:56:f0:c2:24:0f:6b:fd:
d2:58:06:bc:88:ca:26:1e:93:27:04:c6:3e:00:71:
af:df:2a:e4:d9:4d:72:a7:9c:25:60:18:88:5c:95:
c2:d4:5d:64:1e:a4:ba:0d:51:de:89:ce:36:91:11:
ba:fd:cd:0c:b3:ff:55:14:78:3a:43:b8:ee:a1:1e:
8a:03:3a:9c:69:7e:db:69:8f:47:16:a4:2a:8e:26:
5e:c6:9a:99:c6:e9:4d:a6:ea:ff:dd:4e:3e:f7:fd:
32:60:a5:17:fb:7a:ca:16:14:25:c5:74:5a:0b:ef:
8f:ee:a7:82:04:f5:69:a4:f9:77:bf:f0:ed:96:38:
17:70:27:58:11:ea:9c:80:b4:94:c1:c8:98:46:be:
35:7e:1d:22:bf:1f:7b:23:db:54:79:bd:78:e3:6c:
2b:0b:01:a3:05:de:4b:18:22:8a:61:a2:ac:06:a6:
64:ae:61:05:b4:5b:19:07:7b:bc:1a:3a:d0:c1:ca:
f5:f0:5c:0f:00:5e:ef:64:0c:9b:b6:37:4c:eb:98:
1c:b7:80:38:8f:3a:2e:5a:2a:1b:b5:62:db:48:1a:
3f:3d:9f:a9:a9:cf:c1:9e:1b:f3:5c:54:70:e5:8a:
b7:9c:14:a3:8e:05:eb:3a:22:36:b0:33:2a:51:dc:
c8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C5:BC:69:1F:49:58:EE:CD:E2:24:B4:3D:7E:32:01:49:C5:74:EF
X509v3 Authority Key Identifier:
keyid:B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:6b:95:74:bf:4e:dd:49:93:7d:41:ed:b5:fc:39:a0:7a:36:
c4:50:cd:df:82:3e:49:b6:0f:22:60:cc:e1:42:87:f6:9c:a3:
9d:53:29:2c:e1:d4:5e:19:87:60:5a:59:c6:36:19:cf:16:dd:
06:d3:c1:a6:6b:d0:bf:69:fa:08:06:91:f8:46:33:1f:28:60:
55:e5:c6:2d:7a:c5:0a:40:df:f6:b0:89:47:c5:17:6a:3c:3c:
c6:44:f2:3a:cd:ba:8e:37:ef:ae:dc:29:c8:d6:8e:80:46:f4:
a1:aa:69:d2:4e:63:41:3b:df:22:3a:48:b9:bc:8f:6a:07:78:
56:6b:0d:d4:a9:39:94:43:34:18:cb:d4:be:9d:6b:35:eb:c6:
de:4d:c2:cd:f4:0a:62:0b:f3:1c:69:b4:82:b4:42:b4:d6:53:
bc:b3:58:36:d2:31:07:8d:a7:32:14:15:85:bf:78:54:9f:7e:
5d:b3:08:99:0f:8d:aa:43:01:82:9b:55:72:b6:59:16:c8:28:
cb:e7:1c:3b:6a:93:15:b4:92:d4:46:7f:ba:27:25:cb:75:6a:
85:39:90:70:35:09:e3:49:68:d9:25:80:46:30:7b:27:df:54:
b5:7a:7d:8f:70:b9:19:3e:16:33:89:0d:b4:15:aa:07:b4:1e:
fd:15:06:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg9YOMMBZT/kpGqK1tyZJceMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyODUzYWExZWIzMmJmZWUwZmViMTQ4M2MxNDkzNmQxMDFm
MTZlZGYwHhcNMjUwNzI0MTcwMDE2WhcNMjUwNzI1MTcwMDE2WjAzMTEwLwYDVQQD
Eyg3YmM1YmM2OTFmNDk1OGVlY2RlMjI0YjQzZDdlMzIwMTQ5YzU3NGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNj//6Z8jlbwwiQPa/3SWAa8iMom
HpMnBMY+AHGv3yrk2U1yp5wlYBiIXJXC1F1kHqS6DVHeic42kRG6/c0Ms/9VFHg6
Q7juoR6KAzqcaX7baY9HFqQqjiZexpqZxulNpur/3U4+9/0yYKUX+3rKFhQlxXRa
C++P7qeCBPVppPl3v/DtljgXcCdYEeqcgLSUwciYRr41fh0ivx97I9tUeb1442wr
CwGjBd5LGCKKYaKsBqZkrmEFtFsZB3u8GjrQwcr18FwPAF7vZAybtjdM65gct4A4
jzouWiobtWLbSBo/PZ+pqc/BnhvzXFRw5Yq3nBSjjgXrOiI2sDMqUdzIxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvFvGkfSVjuzeIktD1+MgFJxXTvMB8GA1UdIwQY
MBaAFLKFOqHrMr/uD+sUg8FJNtEB8W7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc29VNm9lc3l2LTRQNnhTRHdVazIwUUh4YnQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zMWM4MTUtZDk2YS00YmI2LThjY2Yt
ZjJiODEwNzliNzQ2LzEvc29VNm9lc3l2LTRQNnhTRHdVazIwUUh4YnQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8zMWM4MTUtZDk2YS00YmI2LThjY2YtZjJiODEwNzliNzQ2
LzEvc29VNm9lc3l2LTRQNnhTRHdVazIwUUh4YnQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcmuVdL9O
3UmTfUHttfw5oHo2xFDN34I+SbYPImDM4UKH9pyjnVMpLOHUXhmHYFpZxjYZzxbd
BtPBpmvQv2n6CAaR+EYzHyhgVeXGLXrFCkDf9rCJR8UXajw8xkTyOs26jjfvrtwp
yNaOgEb0oapp0k5jQTvfIjpIubyPagd4VmsN1Kk5lEM0GMvUvp1rNevG3k3CzfQK
YgvzHGm0grRCtNZTvLNYNtIxB42nMhQVhb94VJ9+XbMImQ+NqkMBgptVcrZZFsgo
y+ccO2qTFbSS1EZ/uicly3VqhTmQcDUJ40lo2SWARjB7J99UtXp9j3C5GT4WM4kN
tBWqB7Qe/RUG6w==
-----END CERTIFICATE-----
Generated at Fri Jul 25 01:01:22 2025 by rpki-client