Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
File: SZ8D5I7WKpaEDrLy15w-whon8c4.mft (raw, json)
Hash identifier: S8kAZCE14IiSHWwrjoK17qkxuDODCd2lpVSrB6Bmbyk=
Subject key identifier: D4:19:66:57:83:CD:5F:4E:2F:58:52:98:30:DC:34:2E:AB:E1:8B:63
Authority key identifier: 49:9F:03:E4:8E:D6:2A:96:84:0E:B2:F2:D7:9C:3E:C2:1A:27:F1:CE
Certificate issuer: /CN=499f03e48ed62a96840eb2f2d79c3ec21a27f1ce
Certificate serial: 0198443EB21FBBC98C281ECBF675786BFDDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 01:00:16 +0000
Manifest this update: Sat 26 Jul 2025 01:00:16 +0000
Manifest next update: Sun 27 Jul 2025 01:00:16 +0000
Files and hashes: 1: SZ8D5I7WKpaEDrLy15w-whon8c4.crl (hash: qP7Pk2+8+Hqvpwg6prQHuI9+jzaWTEyu2iYBmsT0KK4=)
2: yzTNOCEQUyiIncYM071wY64qAlg.roa (hash: hLDsFeTn5OhhHpxN9Rt6KZxw/jMGMbLdQEqz1BHAxCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 01:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:3e:b2:1f:bb:c9:8c:28:1e:cb:f6:75:78:6b:fd:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=499f03e48ed62a96840eb2f2d79c3ec21a27f1ce
Validity
Not Before: Jul 26 01:00:16 2025 GMT
Not After : Jul 27 01:00:16 2025 GMT
Subject: CN=d419665783cd5f4e2f58529830dc342eabe18b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:57:1b:1a:89:ae:97:d3:42:73:cd:7f:34:4b:
f7:44:7a:89:24:27:81:41:55:a0:f4:0b:36:70:94:
c0:01:2b:16:23:08:01:76:98:08:9d:cf:6b:0a:b3:
41:6b:ed:4e:20:8b:3d:93:29:89:3b:ed:34:9d:fc:
a5:50:99:da:a5:ef:67:ed:96:2e:92:f4:7c:bd:82:
42:c0:66:a2:ca:0c:0d:11:b5:5c:ef:06:13:53:5a:
a2:78:9c:01:a0:4b:7c:42:9e:51:b6:a9:35:40:88:
1c:09:bf:1f:94:76:69:31:c2:5a:06:08:92:9b:33:
bc:3a:ac:54:9f:df:19:60:aa:d8:1f:a3:f5:89:95:
72:4f:00:c8:8d:05:45:73:32:08:70:2f:a8:5d:69:
05:d9:de:8c:d8:e2:d2:76:d1:23:1f:b1:13:91:a9:
0e:30:4c:ce:86:03:af:08:0d:17:6f:a9:d1:8d:56:
00:6c:52:a5:81:8e:c8:a8:42:8e:a6:3b:6a:6f:db:
97:6e:aa:9d:60:db:e4:4f:be:6b:42:c0:4e:bc:fe:
8e:5d:95:4b:a1:39:f6:30:3f:c0:33:7a:69:37:ae:
8b:8e:15:b4:86:29:a6:18:2e:8c:4d:e7:02:9f:7c:
71:9d:75:5e:bf:9c:40:0c:e2:3d:97:cd:11:48:2c:
13:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:19:66:57:83:CD:5F:4E:2F:58:52:98:30:DC:34:2E:AB:E1:8B:63
X509v3 Authority Key Identifier:
keyid:49:9F:03:E4:8E:D6:2A:96:84:0E:B2:F2:D7:9C:3E:C2:1A:27:F1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:50:73:c4:27:55:da:14:aa:58:6a:a8:77:41:9d:3b:b6:42:
5f:28:34:c7:76:6c:fe:66:7f:4f:10:30:d8:a3:c4:44:8b:e4:
3a:f3:06:d1:63:f4:b4:e6:04:72:92:7e:d3:53:8b:a5:a7:6f:
33:9b:51:88:e9:ec:a1:be:ea:5c:85:a2:0c:77:dd:83:3a:0d:
0e:40:9b:62:20:f7:3c:47:5c:ee:77:a6:82:fe:4b:b1:a2:79:
0d:f3:a4:c1:eb:29:cf:0c:7d:80:ce:ec:4b:bb:72:d6:15:f4:
9b:09:5d:15:c6:e2:bb:30:0c:55:ce:30:d6:7c:aa:db:b5:bb:
e7:bb:fe:0f:b6:22:ed:fa:d9:50:69:28:ec:e2:e9:4c:93:a1:
d6:82:6c:e4:75:51:80:06:69:b2:f1:db:12:f0:7c:72:82:55:
59:f4:74:08:83:28:53:75:66:ed:1e:42:6c:67:2d:9c:49:96:
8e:7d:31:61:aa:8d:14:38:61:16:3c:9e:12:1a:44:25:f4:0b:
87:46:62:e7:ee:3d:15:22:3a:d4:e9:98:e9:bc:e4:1e:3d:5d:
84:28:17:e8:2a:39:48:54:eb:30:8e:5c:a8:30:51:8a:2f:34:
d6:a1:86:0b:8e:06:6f:45:29:3b:1f:b2:8d:9e:f4:fe:b6:c3:
7c:64:66:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhEPrIfu8mMKB7L9nV4a/3aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5OWYwM2U0OGVkNjJhOTY4NDBlYjJmMmQ3OWMzZWMyMWEy
N2YxY2UwHhcNMjUwNzI2MDEwMDE2WhcNMjUwNzI3MDEwMDE2WjAzMTEwLwYDVQQD
EyhkNDE5NjY1NzgzY2Q1ZjRlMmY1ODUyOTgzMGRjMzQyZWFiZTE4YjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVcbGomul9NCc81/NEv3RHqJJCeB
QVWg9As2cJTAASsWIwgBdpgInc9rCrNBa+1OIIs9kymJO+00nfylUJnape9n7ZYu
kvR8vYJCwGaiygwNEbVc7wYTU1qieJwBoEt8Qp5Rtqk1QIgcCb8flHZpMcJaBgiS
mzO8OqxUn98ZYKrYH6P1iZVyTwDIjQVFczIIcC+oXWkF2d6M2OLSdtEjH7ETkakO
MEzOhgOvCA0Xb6nRjVYAbFKlgY7IqEKOpjtqb9uXbqqdYNvkT75rQsBOvP6OXZVL
oTn2MD/AM3ppN66LjhW0himmGC6MTecCn3xxnXVev5xADOI9l80RSCwThQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQZZleDzV9OL1hSmDDcNC6r4YtjMB8GA1UdIwQY
MBaAFEmfA+SO1iqWhA6y8tecPsIaJ/HOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1o4RDVJN1dLcGFFRHJMeTE1dy13aG9uOGM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9hYzA5NTAtMjI3My00ZWUxLWE4MzAt
NDIyZTZkM2ZlOTNlLzEvU1o4RDVJN1dLcGFFRHJMeTE1dy13aG9uOGM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9hYzA5NTAtMjI3My00ZWUxLWE4MzAtNDIyZTZkM2ZlOTNl
LzEvU1o4RDVJN1dLcGFFRHJMeTE1dy13aG9uOGM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAflBzxCdV
2hSqWGqod0GdO7ZCXyg0x3Zs/mZ/TxAw2KPERIvkOvMG0WP0tOYEcpJ+01OLpadv
M5tRiOnsob7qXIWiDHfdgzoNDkCbYiD3PEdc7nemgv5LsaJ5DfOkwespzwx9gM7s
S7ty1hX0mwldFcbiuzAMVc4w1nyq27W757v+D7Yi7frZUGko7OLpTJOh1oJs5HVR
gAZpsvHbEvB8coJVWfR0CIMoU3Vm7R5CbGctnEmWjn0xYaqNFDhhFjyeEhpEJfQL
h0Zi5+49FSI61OmY6bzkHj1dhCgX6Co5SFTrMI5cqDBRii801qGGC44Gb0UpOx+y
jZ70/rbDfGRmVg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:08:18 2025 by rpki-client