Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
File: S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft (raw, json)
Hash identifier: Zm5vf6pGLmkWHD+0szDDEb4LafaJZuYntd6/L7BYLaI=
Subject key identifier: B2:DA:A5:DE:E6:2B:CC:DB:5F:EF:3D:18:50:72:F7:45:81:EF:93:1B
Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
Certificate issuer: /CN=4b98127943e7175734964010c89ef821416a31b3
Certificate serial: 01984A09B9ADC64207BA5BD6C05AF3264DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 04:00:07 +0000
Manifest this update: Sun 27 Jul 2025 04:00:07 +0000
Manifest next update: Mon 28 Jul 2025 04:00:07 +0000
Files and hashes: 1: CXkACV-63YQsGoLAT_fjFmpIWrY.roa (hash: VrWjblsIWiGRBo5IbexwcD3xb4sOkqQVyxbnH8/frQ4=)
2: S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl (hash: +pTCTSmrQNiLPx+GhAie43R02g2D8U8w33B7I38oa84=)
3: pPYYG56VOORuxgT5M_ZuhSvmRfg.roa (hash: UBXy6znS5i9dvxzfkJnX+PZpKfrnJ0My4xHbPC9KdaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:b9:ad:c6:42:07:ba:5b:d6:c0:5a:f3:26:4d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b98127943e7175734964010c89ef821416a31b3
Validity
Not Before: Jul 27 04:00:07 2025 GMT
Not After : Jul 28 04:00:07 2025 GMT
Subject: CN=b2daa5dee62bccdb5fef3d185072f74581ef931b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c3:03:ba:0b:7c:58:79:76:99:71:03:6c:da:
ce:92:4c:e4:7e:b3:2e:9a:c8:3b:f7:a0:02:5f:be:
35:29:f1:89:2c:6a:ad:e1:cc:4f:9a:a1:64:2a:7b:
bd:ea:a2:0c:37:d9:2e:6d:46:df:7f:7e:8c:1a:b4:
e4:75:a8:ec:1f:f6:76:97:70:b5:ed:00:87:79:ae:
cc:14:88:17:8b:5a:44:55:c2:14:70:f5:e0:7d:5c:
0b:39:8d:e3:ec:a4:c5:01:4c:d3:75:06:ec:7f:bf:
12:2e:89:0e:26:99:f2:c0:49:b5:a9:2c:08:28:15:
a6:a0:9e:0f:ef:b5:bf:36:bf:57:88:a0:7a:8d:1b:
e2:fe:49:f8:1d:36:0a:37:70:f9:9a:7d:a9:f8:06:
1f:d1:c0:bb:32:ad:b5:54:29:f6:64:dc:c9:97:2a:
24:a7:6c:42:84:70:b2:d9:6d:a6:91:04:c8:e2:1c:
85:5e:d9:5b:4b:46:27:f8:e1:78:93:6f:fe:ce:6e:
24:21:57:a8:77:9f:9b:21:91:f9:b9:be:d0:4b:c9:
39:4b:f2:c0:2b:e0:30:6c:7c:5c:85:b1:c2:42:9d:
55:fa:4f:4a:bf:65:ad:60:8c:02:19:2d:10:16:78:
b0:1d:88:f6:45:eb:42:9d:42:e6:d3:66:5d:4c:2d:
5f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DA:A5:DE:E6:2B:CC:DB:5F:EF:3D:18:50:72:F7:45:81:EF:93:1B
X509v3 Authority Key Identifier:
keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:39:5b:0c:62:78:ee:cb:1f:1e:85:29:b1:e5:3f:b1:c5:62:
07:3c:cf:e0:8b:55:78:2f:1d:02:8f:97:3b:06:00:04:a2:de:
5c:34:dd:bf:65:a2:49:49:43:3e:9c:c5:04:14:a4:42:73:76:
a9:b8:79:b1:30:8f:8c:24:47:72:f6:7c:76:a9:dc:79:8f:44:
1d:f4:cf:e4:f8:2a:d8:d1:3d:7e:27:05:9c:3a:84:76:8e:fa:
c2:a6:36:31:89:74:41:95:2e:ce:e6:f2:e3:db:00:65:91:80:
5d:1b:34:02:13:65:8f:f4:70:49:73:cb:1c:c1:31:5f:5f:4c:
40:fb:de:b5:46:54:0b:e9:e4:2c:a0:07:f5:ef:a6:63:f7:29:
af:83:fd:7b:e7:70:73:8b:5a:e0:59:6d:10:6c:64:d6:50:4f:
20:63:f5:59:e6:fd:62:af:53:10:b8:8f:de:48:0c:6e:d6:9c:
b9:ec:37:ec:5c:80:0a:2e:a2:5d:4f:0d:9c:57:fd:c3:58:da:
c0:2b:25:16:7c:d2:bb:b1:97:7a:82:2c:36:86:8d:4a:6e:97:
04:97:09:9c:32:76:32:c6:9d:d1:97:4c:1e:ec:d6:be:ac:a4:
c2:bc:6c:0a:00:a0:72:87:6b:96:b1:51:42:4a:3f:3b:14:cf:
8f:ef:1b:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCbmtxkIHulvWwFrzJk3YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOTgxMjc5NDNlNzE3NTczNDk2NDAxMGM4OWVmODIxNDE2
YTMxYjMwHhcNMjUwNzI3MDQwMDA3WhcNMjUwNzI4MDQwMDA3WjAzMTEwLwYDVQQD
EyhiMmRhYTVkZWU2MmJjY2RiNWZlZjNkMTg1MDcyZjc0NTgxZWY5MzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MMDugt8WHl2mXEDbNrOkkzkfrMu
msg796ACX741KfGJLGqt4cxPmqFkKnu96qIMN9kubUbff36MGrTkdajsH/Z2l3C1
7QCHea7MFIgXi1pEVcIUcPXgfVwLOY3j7KTFAUzTdQbsf78SLokOJpnywEm1qSwI
KBWmoJ4P77W/Nr9XiKB6jRvi/kn4HTYKN3D5mn2p+AYf0cC7Mq21VCn2ZNzJlyok
p2xChHCy2W2mkQTI4hyFXtlbS0Yn+OF4k2/+zm4kIVeod5+bIZH5ub7QS8k5S/LA
K+AwbHxchbHCQp1V+k9Kv2WtYIwCGS0QFniwHYj2RetCnULm02ZdTC1fzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLapd7mK8zbX+89GFBy90WB75MbMB8GA1UdIwQY
MBaAFEuYEnlD5xdXNJZAEMie+CFBajGzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2Njgt
NjIxNzkyZjdlNTZhLzEvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2NjgtNjIxNzkyZjdlNTZh
LzEvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTlbDGJ4
7ssfHoUpseU/scViBzzP4ItVeC8dAo+XOwYABKLeXDTdv2WiSUlDPpzFBBSkQnN2
qbh5sTCPjCRHcvZ8dqnceY9EHfTP5Pgq2NE9ficFnDqEdo76wqY2MYl0QZUuzuby
49sAZZGAXRs0AhNlj/RwSXPLHMExX19MQPvetUZUC+nkLKAH9e+mY/cpr4P9e+dw
c4ta4FltEGxk1lBPIGP1Web9Yq9TELiP3kgMbtacuew37FyACi6iXU8NnFf9w1ja
wCslFnzSu7GXeoIsNoaNSm6XBJcJnDJ2Msad0ZdMHuzWvqykwrxsCgCgcodrlrFR
Qko/OxTPj+8b0Q==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:26:15 2025 by rpki-client