Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
File: sBECIYfjOVoVJPoadUHqeTKFr8I.mft (raw, json)
Hash identifier: qdVfh2X/GQ69K7CPt/EnddurZOnbg6rn6SvnNuQ5sJc=
Subject key identifier: 57:D4:64:46:FD:90:68:6D:97:4A:B5:B0:6A:9D:F1:EC:F3:03:D3:DD
Authority key identifier: B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
Certificate issuer: /CN=b011022187e3395a1524fa1a7541ea793285afc2
Certificate serial: 019939B964AF16CAA3EEBE274B535D251633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
Manifest number: 1682
Signing time: Thu 11 Sep 2025 17:01:15 +0000
Manifest this update: Thu 11 Sep 2025 17:01:15 +0000
Manifest next update: Fri 12 Sep 2025 17:01:15 +0000
Files and hashes: 1: JzP7e_-IzWbRBsyrki_po14NIZs.roa (hash: 2xaFuIKLrgS1M1OrFYGfnFmo0uzFtyDCt4fM8dRZejI=)
2: mPhBEESpSSmoxdu-n5OAjI6sC_I.roa (hash: 6Dj5yn1/ctkVobyO+cPsteiP8qKS3BhAZ1jJUQtNU9w=)
3: sBECIYfjOVoVJPoadUHqeTKFr8I.crl (hash: N9iPbXm6yD87U8rwXKowKIihnB/UNbjZtEhWaJK0MvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:b9:64:af:16:ca:a3:ee:be:27:4b:53:5d:25:16:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b011022187e3395a1524fa1a7541ea793285afc2
Validity
Not Before: Sep 11 17:01:15 2025 GMT
Not After : Sep 12 17:01:15 2025 GMT
Subject: CN=57d46446fd90686d974ab5b06a9df1ecf303d3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:59:5a:c8:cb:ab:92:f6:de:e4:db:23:e6:16:
9c:e6:27:89:80:cc:43:af:be:50:46:16:b2:79:13:
59:e1:ac:41:78:03:5c:8b:c8:ab:40:11:59:be:8a:
1d:09:6a:a2:58:53:9b:0d:2e:1e:19:fe:79:28:77:
aa:0a:86:bd:b6:cc:bc:df:f6:df:ce:e9:4b:83:e6:
36:1d:08:5c:60:5c:70:d5:f1:2f:ab:f3:ba:09:74:
c9:31:f1:89:27:7c:76:39:27:b8:a0:66:4b:75:58:
fd:e5:98:e8:45:ef:8d:cc:e8:b4:27:46:b5:38:1f:
e7:b1:32:9e:b2:5b:14:31:9d:c7:be:5b:5d:9d:a8:
4f:46:0d:74:8a:4a:86:10:d3:76:6f:5f:a2:8d:01:
82:ce:9d:eb:9e:de:9d:af:4a:88:5e:bf:90:27:60:
93:1a:30:92:9e:b3:91:34:fd:ba:43:56:17:0f:d8:
9c:c7:8e:2f:8f:61:8e:dd:a5:0d:9e:92:b7:26:eb:
b2:00:c1:d6:60:74:ce:56:93:f9:b8:2d:44:bb:c7:
e1:d6:84:a0:7b:8b:fc:5b:3e:40:2c:45:14:10:05:
26:2c:f4:82:de:03:e4:7a:4e:29:69:54:a8:fe:ba:
b0:d6:19:58:50:c8:95:ab:ef:b8:0a:e6:a4:33:98:
c0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D4:64:46:FD:90:68:6D:97:4A:B5:B0:6A:9D:F1:EC:F3:03:D3:DD
X509v3 Authority Key Identifier:
keyid:B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:fa:b5:2c:0e:e1:32:83:f1:00:df:00:e0:ef:70:f9:cf:eb:
32:ab:cf:80:33:0a:92:9f:e3:9b:d0:af:91:b4:6d:b6:4e:17:
2f:1c:d6:1f:04:45:29:18:23:1e:53:30:de:4f:a5:cb:3e:4d:
1a:38:22:2f:6b:83:b8:92:7f:f1:95:b2:68:21:6e:41:4d:32:
61:98:f9:1a:06:e4:82:67:c8:55:2f:54:44:5b:ec:bf:af:41:
85:e4:7d:5a:d3:8d:b6:76:d1:db:31:77:1a:42:47:0c:24:12:
29:f3:1d:be:22:8a:ec:9e:ab:a8:62:c6:30:dc:66:b0:02:f4:
8a:9a:d5:38:3d:2f:72:8e:6e:a7:8d:f6:85:1a:4f:8a:c7:4c:
e8:91:07:2e:f0:7e:69:b5:8a:c1:81:85:9a:d5:bf:6f:28:56:
c8:45:6a:1c:43:a6:e1:8a:ba:0a:84:72:bc:a1:4e:49:fb:ec:
e4:98:1c:7d:2c:20:da:8b:1f:b8:bb:2e:62:87:50:18:61:89:
e3:7a:13:f9:53:f4:d0:fa:35:54:27:df:31:99:31:bc:2c:d1:
33:20:6a:a2:cb:ca:4d:22:5f:e4:19:30:8f:bb:ef:d8:35:fe:
a8:2a:44:52:79:30:74:21:8f:41:51:0d:e6:70:6c:76:2d:7d:
9f:79:29:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk5uWSvFsqj7r4nS1NdJRYzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMTEwMjIxODdlMzM5NWExNTI0ZmExYTc1NDFlYTc5MzI4
NWFmYzIwHhcNMjUwOTExMTcwMTE1WhcNMjUwOTEyMTcwMTE1WjAzMTEwLwYDVQQD
Eyg1N2Q0NjQ0NmZkOTA2ODZkOTc0YWI1YjA2YTlkZjFlY2YzMDNkM2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFlayMurkvbe5Nsj5hac5ieJgMxD
r75QRhayeRNZ4axBeANci8irQBFZvoodCWqiWFObDS4eGf55KHeqCoa9tsy83/bf
zulLg+Y2HQhcYFxw1fEvq/O6CXTJMfGJJ3x2OSe4oGZLdVj95ZjoRe+NzOi0J0a1
OB/nsTKeslsUMZ3HvltdnahPRg10ikqGENN2b1+ijQGCzp3rnt6dr0qIXr+QJ2CT
GjCSnrORNP26Q1YXD9icx44vj2GO3aUNnpK3JuuyAMHWYHTOVpP5uC1Eu8fh1oSg
e4v8Wz5ALEUUEAUmLPSC3gPkek4paVSo/rqw1hlYUMiVq++4CuakM5jACwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfUZEb9kGhtl0q1sGqd8ezzA9PdMB8GA1UdIwQY
MBaAFLARAiGH4zlaFST6GnVB6nkyha/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0JFQ0lZZmpPVm9WSlBvYWRVSHFlVEtGcjhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lOGJiZDItMTM2MS00MWEzLTkwZjAt
NTMzNGU2YjhjNWZlLzEvc0JFQ0lZZmpPVm9WSlBvYWRVSHFlVEtGcjhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9lOGJiZDItMTM2MS00MWEzLTkwZjAtNTMzNGU2YjhjNWZl
LzEvc0JFQ0lZZmpPVm9WSlBvYWRVSHFlVEtGcjhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPq1LA7h
MoPxAN8A4O9w+c/rMqvPgDMKkp/jm9CvkbRttk4XLxzWHwRFKRgjHlMw3k+lyz5N
GjgiL2uDuJJ/8ZWyaCFuQU0yYZj5GgbkgmfIVS9URFvsv69BheR9WtONtnbR2zF3
GkJHDCQSKfMdviKK7J6rqGLGMNxmsAL0iprVOD0vco5up432hRpPisdM6JEHLvB+
abWKwYGFmtW/byhWyEVqHEOm4Yq6CoRyvKFOSfvs5JgcfSwg2osfuLsuYodQGGGJ
43oT+VP00Po1VCffMZkxvCzRMyBqosvKTSJf5Bkwj7vv2DX+qCpEUnkwdCGPQVEN
5nBsdi19n3kpYQ==
-----END CERTIFICATE-----
Generated at Thu Sep 11 19:16:25 2025 by rpki-client