Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
File: sQeA3za1uUL2YOQDov5ginXk5X0.mft (raw, json)
Hash identifier: gwiLYzLU4Qg2nyPiOeCx16yV7fOTUyPvrMieJvOtc9c=
Subject key identifier: 51:FE:69:02:A9:B2:C3:0A:E6:8A:60:CA:22:6A:BA:3F:C1:8A:E7:74
Authority key identifier: B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D
Certificate issuer: /CN=b10780df36b5b942f660e403a2fe608a75e4e57d
Certificate serial: 01984852BDE261A3CEB571EDE4BC6CFE1272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
Manifest number: 1592
Signing time: Sat 26 Jul 2025 20:00:38 +0000
Manifest this update: Sat 26 Jul 2025 20:00:38 +0000
Manifest next update: Sun 27 Jul 2025 20:00:38 +0000
Files and hashes: 1: dc2u-8bkbufd4cw_d9F3xDaopuc.roa (hash: Umyl5IxYyTMcYEGSrVHWEMRSVhNtzrLiUEYgvIObXig=)
2: sQeA3za1uUL2YOQDov5ginXk5X0.crl (hash: YjC0amNlThI5Gvointb6lfjTUZIO3DiV9J1DsKKlqIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:bd:e2:61:a3:ce:b5:71:ed:e4:bc:6c:fe:12:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10780df36b5b942f660e403a2fe608a75e4e57d
Validity
Not Before: Jul 26 20:00:38 2025 GMT
Not After : Jul 27 20:00:38 2025 GMT
Subject: CN=51fe6902a9b2c30ae68a60ca226aba3fc18ae774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:19:e1:70:23:4d:f7:5a:0b:04:ae:28:5b:73:
63:f7:2a:63:42:3b:e3:34:3b:42:5d:d9:5f:3c:a0:
1c:f0:b6:35:94:51:c1:49:c4:43:c4:8b:d4:3a:e1:
ba:3f:1f:5a:45:3b:f0:44:08:8c:d3:6d:84:49:2c:
9c:81:96:19:51:20:dd:e3:8d:b4:10:5f:7e:4c:f3:
a9:9b:0a:df:4e:05:f7:3c:3e:32:9e:f9:1b:53:fc:
f1:8e:33:f2:e8:66:ef:2d:42:95:93:ba:8f:f3:90:
c8:d5:86:a3:a7:9d:1e:98:79:cd:46:db:25:b8:a4:
b9:70:49:d7:25:85:2f:7c:d4:7f:cd:8b:52:f0:ca:
4d:6c:cb:55:23:8d:88:f7:18:27:da:4a:3e:c5:76:
5b:32:fb:39:07:ea:7b:9a:4e:f1:c3:6c:aa:7a:a7:
18:4d:a2:33:ec:cc:f8:5d:df:69:bd:a6:83:13:18:
eb:10:45:cf:86:f1:bc:2f:5d:3a:51:38:3e:17:04:
00:6f:34:5b:52:90:e0:98:e1:3c:90:84:01:33:ae:
cf:3a:ad:6c:fc:9e:cd:1f:3a:a1:91:2f:eb:4f:38:
bf:d9:71:8d:2e:91:c6:21:0c:db:25:21:3d:17:47:
1d:44:16:94:c7:48:a2:32:8e:72:cb:18:db:7b:e6:
68:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FE:69:02:A9:B2:C3:0A:E6:8A:60:CA:22:6A:BA:3F:C1:8A:E7:74
X509v3 Authority Key Identifier:
keyid:B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:6d:e4:62:ab:57:98:ba:28:17:f2:90:ed:93:9e:f3:6b:d6:
7f:0c:80:0b:44:57:68:c7:e5:65:43:0d:76:61:71:10:8a:9f:
9b:d8:24:4d:7c:78:14:e0:8c:55:46:2f:16:92:90:dc:c6:be:
56:e6:48:5c:db:db:ec:c6:42:59:ec:51:2a:3b:cc:ca:a6:bf:
ad:a8:76:bd:2f:ee:e5:e4:9d:16:54:76:02:78:46:df:19:6c:
37:5c:39:47:51:c8:51:4b:94:54:c3:11:6f:ec:78:d4:16:d8:
1d:52:18:e8:41:69:f0:78:61:68:6c:7f:fe:8f:f0:74:65:a5:
ee:14:7c:64:ae:f1:38:aa:6a:56:b5:bf:cb:b3:85:3b:dc:de:
08:cf:fa:bc:91:2f:3b:3e:7f:d8:77:54:8f:10:e4:fe:cb:59:
3b:fc:14:01:f9:dc:32:67:ea:11:a2:29:65:ba:88:84:04:54:
25:c4:45:f8:a5:8b:6b:f2:56:65:27:01:b0:14:23:84:9e:91:
fb:db:a2:33:0a:60:ad:de:65:e9:ad:f9:dd:5d:5e:5b:b9:b0:
c4:dd:1e:a3:05:11:48:ba:6f:10:79:bb:a6:58:97:5f:11:7b:
ca:34:fd:14:b0:d0:85:89:97:0b:8f:fd:62:f8:ff:f2:13:8e:
fb:12:82:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIUr3iYaPOtXHt5Lxs/hJyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMDc4MGRmMzZiNWI5NDJmNjYwZTQwM2EyZmU2MDhhNzVl
NGU1N2QwHhcNMjUwNzI2MjAwMDM4WhcNMjUwNzI3MjAwMDM4WjAzMTEwLwYDVQQD
Eyg1MWZlNjkwMmE5YjJjMzBhZTY4YTYwY2EyMjZhYmEzZmMxOGFlNzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hnhcCNN91oLBK4oW3Nj9ypjQjvj
NDtCXdlfPKAc8LY1lFHBScRDxIvUOuG6Px9aRTvwRAiM022ESSycgZYZUSDd4420
EF9+TPOpmwrfTgX3PD4ynvkbU/zxjjPy6GbvLUKVk7qP85DI1Yajp50emHnNRtsl
uKS5cEnXJYUvfNR/zYtS8MpNbMtVI42I9xgn2ko+xXZbMvs5B+p7mk7xw2yqeqcY
TaIz7Mz4Xd9pvaaDExjrEEXPhvG8L106UTg+FwQAbzRbUpDgmOE8kIQBM67POq1s
/J7NHzqhkS/rTzi/2XGNLpHGIQzbJSE9F0cdRBaUx0iiMo5yyxjbe+ZoIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFH+aQKpssMK5opgyiJquj/Biud0MB8GA1UdIwQY
MBaAFLEHgN82tblC9mDkA6L+YIp15OV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1FlQTN6YTF1VUwyWU9RRG92NWdpblhrNVgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iNTY1MDQtZWQxNy00MTk3LWJiYTAt
YTBhZGVjZmQ1ZmE5LzEvc1FlQTN6YTF1VUwyWU9RRG92NWdpblhrNVgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9iNTY1MDQtZWQxNy00MTk3LWJiYTAtYTBhZGVjZmQ1ZmE5
LzEvc1FlQTN6YTF1VUwyWU9RRG92NWdpblhrNVgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV23kYqtX
mLooF/KQ7ZOe82vWfwyAC0RXaMflZUMNdmFxEIqfm9gkTXx4FOCMVUYvFpKQ3Ma+
VuZIXNvb7MZCWexRKjvMyqa/rah2vS/u5eSdFlR2AnhG3xlsN1w5R1HIUUuUVMMR
b+x41BbYHVIY6EFp8HhhaGx//o/wdGWl7hR8ZK7xOKpqVrW/y7OFO9zeCM/6vJEv
Oz5/2HdUjxDk/stZO/wUAfncMmfqEaIpZbqIhARUJcRF+KWLa/JWZScBsBQjhJ6R
+9uiMwpgrd5l6a353V1eW7mwxN0eowURSLpvEHm7pliXXxF7yjT9FLDQhYmXC4/9
Yvj/8hOO+xKCrA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 02:22:08 2025 by rpki-client