Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
File: S8hY5QhWNUaEpdBKPsw1klgNVI0.mft (raw, json)
Hash identifier: uuwdNW4fxrr+8GIN68hBv8F2k78u1nAQrK9D1+vW87M=
Subject key identifier: CF:59:7E:F8:8F:14:02:CC:F5:EB:F5:96:AC:BB:8E:9A:67:D1:87:AF
Authority key identifier: 4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D
Certificate issuer: /CN=4bc858e50856354684a5d04a3ecc3592580d548d
Certificate serial: 0197499F6A73E1E8A74EC38B511AA2FA3069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
Manifest number: 083A
Signing time: Sat 07 Jun 2025 09:01:13 +0000
Manifest this update: Sat 07 Jun 2025 09:01:13 +0000
Manifest next update: Sun 08 Jun 2025 09:01:13 +0000
Files and hashes: 1: 1kPYBeHFqZcRahwRlHXvuPvT0zI.roa (hash: qhycFEi6FwqVVERso5+P+dTV24QXX6z3cT56YMpxbXU=)
2: S8hY5QhWNUaEpdBKPsw1klgNVI0.crl (hash: wuk9yr4VTZWNPpw8Vm+VPtfNRpt1yfT6NZ/0862ht/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:6a:73:e1:e8:a7:4e:c3:8b:51:1a:a2:fa:30:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc858e50856354684a5d04a3ecc3592580d548d
Validity
Not Before: Jun 7 09:01:13 2025 GMT
Not After : Jun 8 09:01:13 2025 GMT
Subject: CN=cf597ef88f1402ccf5ebf596acbb8e9a67d187af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4d:23:5b:4d:d4:f7:84:7a:54:08:72:22:56:
31:af:24:4a:a2:61:e2:c5:0f:d7:d8:f7:83:d2:76:
81:9b:32:2e:07:e1:d3:de:70:09:d7:44:dc:a1:f9:
98:89:0f:15:13:5e:e5:db:2a:f5:14:57:7b:af:5b:
59:28:43:ab:bb:49:ef:b3:80:e4:ce:c1:1a:a8:6b:
93:74:bb:a2:b0:fe:fa:86:81:39:39:f5:8d:b9:45:
a5:2e:cd:40:67:95:5a:52:c6:f8:2e:bc:61:03:0e:
1f:f8:45:db:22:73:66:e9:a8:03:49:28:b1:98:18:
dd:7b:e7:60:76:d3:78:fe:29:b0:6f:1d:07:c7:cf:
5f:ea:f0:57:61:a3:a0:56:0e:5d:62:2f:50:6f:23:
01:ec:01:4b:25:c2:d8:6d:69:ec:c5:4a:75:0b:7f:
74:66:c9:26:b9:61:cc:f0:44:51:f2:0a:9b:a0:7e:
42:a9:5c:5a:f6:6d:83:a2:8f:5f:82:25:79:6e:f4:
42:43:e8:17:d7:cb:b1:ad:91:b3:ad:8d:dd:45:99:
88:46:27:81:ba:13:ae:0a:72:d8:3e:a8:26:a8:e8:
8d:95:1b:b6:18:50:46:f0:e8:80:05:4b:64:3a:18:
3b:a8:2f:5d:c4:72:e1:35:8c:48:a3:77:05:4e:30:
43:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:59:7E:F8:8F:14:02:CC:F5:EB:F5:96:AC:BB:8E:9A:67:D1:87:AF
X509v3 Authority Key Identifier:
keyid:4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:4b:ef:10:dd:24:cc:22:3b:ad:de:3a:32:17:99:a2:e0:5c:
3f:b8:8e:1d:cc:92:f9:46:5f:1e:f6:fb:c4:e8:c0:66:cd:40:
88:5c:bc:b4:37:c7:36:6b:69:c7:b4:23:ad:ad:af:91:0c:9c:
4e:82:6f:77:8f:e2:3c:31:46:4c:14:0f:73:07:91:0a:15:c7:
8b:2f:79:4d:3d:fe:a0:d5:99:57:7e:ac:a8:66:44:73:1a:8d:
0f:6f:34:8e:be:d2:a6:ef:09:9e:95:ac:0a:e2:5e:f0:d5:9f:
b2:1f:a0:29:66:9f:6a:ef:e9:59:25:e0:bc:be:8f:7b:d9:3d:
7b:e6:32:6a:b1:16:7c:e5:9e:dc:9b:8a:bd:93:ff:b0:69:ef:
86:3a:3b:45:9d:e6:f5:80:ab:f0:08:59:75:cd:63:43:ee:37:
99:25:02:76:03:af:ff:7c:4b:a8:d9:fc:64:33:86:32:39:f5:
b7:72:bd:7e:c8:41:7c:7d:06:3b:c9:8b:e1:d4:d7:a0:12:6d:
60:4f:4f:a5:97:41:a6:ea:46:da:1e:2b:ec:c5:ec:cf:0b:17:
90:a6:e6:81:72:ea:97:d0:e4:a9:f2:7d:49:22:27:fc:e3:c7:
37:de:50:98:33:0e:7e:c0:f7:46:78:5f:62:a7:dd:1a:5e:f8:
fc:af:17:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJn2pz4einTsOLURqi+jBpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYzg1OGU1MDg1NjM1NDY4NGE1ZDA0YTNlY2MzNTkyNTgw
ZDU0OGQwHhcNMjUwNjA3MDkwMTEzWhcNMjUwNjA4MDkwMTEzWjAzMTEwLwYDVQQD
EyhjZjU5N2VmODhmMTQwMmNjZjVlYmY1OTZhY2JiOGU5YTY3ZDE4N2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU0jW03U94R6VAhyIlYxryRKomHi
xQ/X2PeD0naBmzIuB+HT3nAJ10TcofmYiQ8VE17l2yr1FFd7r1tZKEOru0nvs4Dk
zsEaqGuTdLuisP76hoE5OfWNuUWlLs1AZ5VaUsb4LrxhAw4f+EXbInNm6agDSSix
mBjde+dgdtN4/imwbx0Hx89f6vBXYaOgVg5dYi9QbyMB7AFLJcLYbWnsxUp1C390
ZskmuWHM8ERR8gqboH5CqVxa9m2Doo9fgiV5bvRCQ+gX18uxrZGzrY3dRZmIRieB
uhOuCnLYPqgmqOiNlRu2GFBG8OiABUtkOhg7qC9dxHLhNYxIo3cFTjBDjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9ZfviPFALM9ev1lqy7jppn0YevMB8GA1UdIwQY
MBaAFEvIWOUIVjVGhKXQSj7MNZJYDVSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzhoWTVRaFdOVWFFcGRCS1BzdzFrbGdOVkkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yNjc5NjYtZjAzOS00MTc0LTgxMGQt
M2Y0ZWY4MWEyZTUzLzEvUzhoWTVRaFdOVWFFcGRCS1BzdzFrbGdOVkkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yNjc5NjYtZjAzOS00MTc0LTgxMGQtM2Y0ZWY4MWEyZTUz
LzEvUzhoWTVRaFdOVWFFcGRCS1BzdzFrbGdOVkkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkvvEN0k
zCI7rd46MheZouBcP7iOHcyS+UZfHvb7xOjAZs1AiFy8tDfHNmtpx7Qjra2vkQyc
ToJvd4/iPDFGTBQPcweRChXHiy95TT3+oNWZV36sqGZEcxqND280jr7Spu8JnpWs
CuJe8NWfsh+gKWafau/pWSXgvL6Pe9k9e+YyarEWfOWe3JuKvZP/sGnvhjo7RZ3m
9YCr8AhZdc1jQ+43mSUCdgOv/3xLqNn8ZDOGMjn1t3K9fshBfH0GO8mL4dTXoBJt
YE9PpZdBpupG2h4r7MXszwsXkKbmgXLql9DkqfJ9SSIn/OPHN95QmDMOfsD3Rnhf
YqfdGl74/K8XgQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:45:41 2025 by rpki-client