Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
File: SXIqDKi7yU1IpctIzMku_vhFp-M.mft (raw, json)
Hash identifier: fRToXpcXoMk2O0HomwL45rxngxO2sZYdXOqE1IITl/w=
Subject key identifier: 03:20:83:D4:0F:47:20:02:46:AF:4F:73:72:A5:74:7D:B5:F1:0D:2D
Authority key identifier: 49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
Certificate issuer: /CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Certificate serial: 01984664C6C9A69648B2A24E0632BE36343F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
Manifest number: 15B7
Signing time: Sat 26 Jul 2025 11:01:06 +0000
Manifest this update: Sat 26 Jul 2025 11:01:06 +0000
Manifest next update: Sun 27 Jul 2025 11:01:06 +0000
Files and hashes: 1: 2_e31xA0ke3Styc34JcGbffddwc.roa (hash: SiZtRmCeZumulAZS0QR6GtmaGOYbZYgtQLDnc2RPi2w=)
2: N3VmvFOmqCre_Lx0IfYjn2v2b6w.roa (hash: bp1wfw2pyxZJdYCZm2jvav72UAXwLNhJfCLzE6u3iuo=)
3: SXIqDKi7yU1IpctIzMku_vhFp-M.crl (hash: /nmuaDtn53fk3uiyW112kpVXy+Ceqv+LBXGrZuO85FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:c6:c9:a6:96:48:b2:a2:4e:06:32:be:36:34:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Validity
Not Before: Jul 26 11:01:06 2025 GMT
Not After : Jul 27 11:01:06 2025 GMT
Subject: CN=032083d40f47200246af4f7372a5747db5f10d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:8e:0d:a2:71:d6:78:95:68:7a:65:6b:ed:4f:
ff:cc:74:c9:24:b8:52:6d:31:28:d0:e6:9d:9b:02:
90:7f:81:93:c3:6b:a1:04:07:fc:42:6a:a5:58:00:
47:22:93:eb:1a:4f:b9:66:75:df:b3:0a:82:e4:49:
a4:d3:3d:f8:02:ba:89:99:30:3b:9d:79:d8:6b:46:
17:6f:cd:fe:ac:c0:0c:ce:58:8f:f6:7f:fe:f1:7d:
af:60:aa:3a:92:6c:8f:40:53:05:3e:f3:59:47:c7:
1c:9a:e8:96:06:0b:75:6e:fd:43:e8:49:a2:28:f1:
a9:81:90:6d:74:09:cd:c1:22:cc:9c:93:a9:1f:28:
4c:44:0f:b0:b9:cc:34:90:cc:67:c9:c2:40:88:f1:
32:fd:66:77:64:84:56:dc:5a:da:f1:79:2c:1f:2d:
ce:b2:4b:02:bb:c4:be:63:81:79:52:f2:1f:78:31:
36:7e:8f:11:e0:11:f1:5c:e6:a5:8c:d9:85:9f:b5:
dc:48:33:db:89:74:c9:8d:5b:09:82:b6:ff:e6:36:
ad:2d:0b:c3:22:eb:b7:21:20:6f:d4:53:35:9c:9e:
3c:62:3a:33:82:d2:46:85:8b:ba:8f:bd:00:dc:00:
ed:ba:1f:e8:ec:ac:63:1b:d3:c5:52:b2:49:4e:70:
62:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:20:83:D4:0F:47:20:02:46:AF:4F:73:72:A5:74:7D:B5:F1:0D:2D
X509v3 Authority Key Identifier:
keyid:49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:03:b7:bd:81:5e:67:4f:1f:f7:cf:67:02:f5:26:97:dc:19:
85:3c:58:a0:96:bb:d5:3c:a6:76:68:fa:47:1c:b9:be:f3:7f:
4f:25:4f:85:1f:ed:55:e4:74:79:d0:8f:45:70:93:1e:0c:30:
fd:83:5e:b8:26:b8:3f:19:c2:d9:51:bb:f3:16:47:c9:61:4e:
22:36:95:a7:c5:f4:97:c4:88:6f:c4:05:f7:3b:55:b4:ea:83:
0e:e9:f6:ae:6d:19:9e:c7:69:f0:fa:15:58:ff:43:cf:f4:c4:
92:80:12:53:ca:d8:18:d2:f1:63:35:f4:d3:a6:f9:93:1b:4f:
6f:0a:45:f9:87:a9:9c:cc:fc:9b:92:1f:00:bf:74:61:ea:f3:
09:32:66:ee:5f:74:df:a9:4e:63:0b:47:72:c9:b8:78:2f:c7:
7e:79:86:9d:8b:3e:09:fa:f5:8e:2d:6b:32:16:be:08:3d:04:
f8:b1:93:60:74:4e:53:dd:e2:1c:58:2b:1a:88:dc:5c:e4:c4:
f9:69:8c:e9:57:74:0d:3d:74:a5:9c:d6:ac:50:01:99:9b:9a:
a7:84:0d:bb:4e:82:d9:18:2f:1c:cf:2e:ca:37:9c:8b:1f:28:
0f:33:27:5d:d1:c5:17:71:75:b6:f7:08:95:4f:14:bf:bd:d1:
43:aa:e7:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGZMbJppZIsqJOBjK+NjQ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NzIyYTBjYThiYmM5NGQ0OGE1Y2I0OGNjYzkyZWZlZjg0
NWE3ZTMwHhcNMjUwNzI2MTEwMTA2WhcNMjUwNzI3MTEwMTA2WjAzMTEwLwYDVQQD
EygwMzIwODNkNDBmNDcyMDAyNDZhZjRmNzM3MmE1NzQ3ZGI1ZjEwZDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+44NonHWeJVoemVr7U//zHTJJLhS
bTEo0OadmwKQf4GTw2uhBAf8QmqlWABHIpPrGk+5ZnXfswqC5Emk0z34ArqJmTA7
nXnYa0YXb83+rMAMzliP9n/+8X2vYKo6kmyPQFMFPvNZR8ccmuiWBgt1bv1D6Emi
KPGpgZBtdAnNwSLMnJOpHyhMRA+wucw0kMxnycJAiPEy/WZ3ZIRW3Fra8XksHy3O
sksCu8S+Y4F5UvIfeDE2fo8R4BHxXOaljNmFn7XcSDPbiXTJjVsJgrb/5jatLQvD
Iuu3ISBv1FM1nJ48YjozgtJGhYu6j70A3ADtuh/o7KxjG9PFUrJJTnBiHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMgg9QPRyACRq9Pc3KldH218Q0tMB8GA1UdIwQY
MBaAFElyKgyou8lNSKXLSMzJLv74RafjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1hJcURLaTd5VTFJcGN0SXpNa3VfdmhGcC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9lYzUyMDgtZjY5NS00YmRiLTliYjIt
ZTE4ZmE2NTgwNTVhLzEvU1hJcURLaTd5VTFJcGN0SXpNa3VfdmhGcC1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9lYzUyMDgtZjY5NS00YmRiLTliYjItZTE4ZmE2NTgwNTVh
LzEvU1hJcURLaTd5VTFJcGN0SXpNa3VfdmhGcC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQO3vYFe
Z08f989nAvUml9wZhTxYoJa71Tymdmj6Rxy5vvN/TyVPhR/tVeR0edCPRXCTHgww
/YNeuCa4PxnC2VG78xZHyWFOIjaVp8X0l8SIb8QF9ztVtOqDDun2rm0Znsdp8PoV
WP9Dz/TEkoASU8rYGNLxYzX006b5kxtPbwpF+YepnMz8m5IfAL90YerzCTJm7l90
36lOYwtHcsm4eC/HfnmGnYs+Cfr1ji1rMha+CD0E+LGTYHROU93iHFgrGojcXOTE
+WmM6Vd0DT10pZzWrFABmZuap4QNu06C2RgvHM8uyjecix8oDzMnXdHFF3F1tvcI
lU8Uv73RQ6rnRA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:30:52 2025 by rpki-client