Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
File: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft (raw, json)
Hash identifier: Wu2IwtM2rFiB8E2we0xZUx9zoZyozDXY1JPEeiLhoEE=
Subject key identifier: D8:F4:B9:9D:BA:31:D2:F7:D7:53:2F:63:26:29:67:F1:21:E1:B8:84
Authority key identifier: B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
Certificate issuer: /CN=b0095ed011c94358245c32757d46bed860df4c19
Certificate serial: 01992255D44FD3A17F759790232229C4C583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
Manifest number: 061A
Signing time: Sun 07 Sep 2025 04:01:14 +0000
Manifest this update: Sun 07 Sep 2025 04:01:14 +0000
Manifest next update: Mon 08 Sep 2025 04:01:14 +0000
Files and hashes: 1: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl (hash: 6th3fzDD7xZR+zoeB7uQn8V4O3E0XpMm+q4zyim/v60=)
2: t0wNgCpzIiHd0fZLik8oKup2IRU.roa (hash: eDGvGeZXSnNxXFSxZa5NU4er/BuDVU9oTOPF3gyQwp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:d4:4f:d3:a1:7f:75:97:90:23:22:29:c4:c5:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0095ed011c94358245c32757d46bed860df4c19
Validity
Not Before: Sep 7 04:01:14 2025 GMT
Not After : Sep 8 04:01:14 2025 GMT
Subject: CN=d8f4b99dba31d2f7d7532f63262967f121e1b884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:66:40:3e:a6:4f:29:55:7a:6c:84:86:02:dc:
95:82:9e:2b:75:28:15:d7:81:bb:c6:ea:b1:b0:de:
0a:b6:7b:66:e9:ae:53:3f:d2:bd:75:43:94:5d:da:
a1:2f:8b:1d:ff:99:2c:b3:c0:56:52:b1:42:13:a3:
8e:fa:91:d4:7a:85:2c:20:4b:a6:56:9a:28:b4:6c:
aa:5c:38:72:fd:51:89:25:f5:90:05:8d:8a:82:7c:
99:c3:91:f7:cd:4e:02:ee:46:0e:dd:b7:4c:43:19:
e6:f3:25:3c:36:7d:93:07:07:d0:59:d8:8a:4a:7f:
c5:ee:dc:b6:f1:d5:79:19:9a:2d:98:64:7e:7d:9a:
87:bc:86:f7:1c:f8:88:1e:90:d5:01:68:bd:80:e6:
27:bb:19:23:79:98:fb:bc:b8:2c:ff:80:1a:17:eb:
3c:36:d6:34:6f:54:cb:b3:05:87:f9:f6:95:3d:f2:
9b:a6:18:74:cb:d1:af:5a:ac:41:c0:51:f3:b0:a5:
28:65:37:16:c2:fb:d6:6e:15:f2:f2:e3:b8:6a:b7:
97:7f:f2:ef:ae:10:db:68:d8:d7:37:30:58:5e:c5:
45:9b:2c:a9:99:9e:7d:95:91:09:04:7a:d9:d6:fc:
5d:98:88:85:1e:5b:cc:b7:4e:80:c1:f0:02:70:53:
a9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F4:B9:9D:BA:31:D2:F7:D7:53:2F:63:26:29:67:F1:21:E1:B8:84
X509v3 Authority Key Identifier:
keyid:B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:11:68:4d:db:83:81:54:bd:c9:ea:3c:9a:15:39:3a:ed:6d:
09:86:ff:82:25:e6:94:57:a9:82:e8:c7:72:22:2f:a3:5a:c3:
61:66:3b:e9:50:0a:87:7b:73:db:2e:7b:5f:33:d0:3e:2a:88:
ea:3a:20:df:ad:ba:c0:58:f6:3e:c0:4c:17:8f:76:93:43:24:
bc:a8:c3:92:26:ca:66:0c:71:63:7c:c5:b1:31:15:bc:a0:ca:
0e:d7:b0:bd:e6:66:5a:d1:8a:78:96:9a:73:72:7e:1f:42:cf:
41:59:36:e4:b4:c9:ef:9d:b3:83:0c:09:6e:e1:f6:63:90:bd:
ee:4c:5c:fa:a6:09:c9:9b:73:66:58:64:08:da:1a:97:da:c1:
6f:11:c0:34:9c:8c:98:0a:f2:ef:a5:e6:a2:b7:49:8d:d3:2e:
a4:fe:7f:b8:f2:8b:2e:ac:c6:78:75:42:7a:1a:6a:9d:f2:1c:
b4:88:6e:cf:10:29:b1:7e:47:cc:07:1c:bb:a0:16:c7:74:e5:
c1:8a:6f:3d:1d:be:20:44:43:a4:c7:f9:10:1e:b9:fc:97:08:
70:81:f0:f4:a8:be:0f:77:3b:51:3e:3c:4b:3d:c1:e8:e2:0f:
63:05:28:14:42:95:89:2c:91:34:95:d8:a9:c6:b2:79:69:df:
70:20:ea:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVdRP06F/dZeQIyIpxMWDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMDk1ZWQwMTFjOTQzNTgyNDVjMzI3NTdkNDZiZWQ4NjBk
ZjRjMTkwHhcNMjUwOTA3MDQwMTE0WhcNMjUwOTA4MDQwMTE0WjAzMTEwLwYDVQQD
EyhkOGY0Yjk5ZGJhMzFkMmY3ZDc1MzJmNjMyNjI5NjdmMTIxZTFiODg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWZAPqZPKVV6bISGAtyVgp4rdSgV
14G7xuqxsN4Ktntm6a5TP9K9dUOUXdqhL4sd/5kss8BWUrFCE6OO+pHUeoUsIEum
VpootGyqXDhy/VGJJfWQBY2KgnyZw5H3zU4C7kYO3bdMQxnm8yU8Nn2TBwfQWdiK
Sn/F7ty28dV5GZotmGR+fZqHvIb3HPiIHpDVAWi9gOYnuxkjeZj7vLgs/4AaF+s8
NtY0b1TLswWH+faVPfKbphh0y9GvWqxBwFHzsKUoZTcWwvvWbhXy8uO4areXf/Lv
rhDbaNjXNzBYXsVFmyypmZ59lZEJBHrZ1vxdmIiFHlvMt06AwfACcFOpmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNj0uZ26MdL311MvYyYpZ/Eh4biEMB8GA1UdIwQY
MBaAFLAJXtARyUNYJFwydX1Gvthg30wZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0FsZTBCSEpRMWdrWERKMWZVYS0yR0RmVEJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS80OWNkZWMtNjlmMC00NTQwLTg5YmEt
ZWE0NTk2OTk1MGNjLzEvc0FsZTBCSEpRMWdrWERKMWZVYS0yR0RmVEJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS80OWNkZWMtNjlmMC00NTQwLTg5YmEtZWE0NTk2OTk1MGNj
LzEvc0FsZTBCSEpRMWdrWERKMWZVYS0yR0RmVEJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXBFoTduD
gVS9yeo8mhU5Ou1tCYb/giXmlFepgujHciIvo1rDYWY76VAKh3tz2y57XzPQPiqI
6jog3626wFj2PsBMF492k0MkvKjDkibKZgxxY3zFsTEVvKDKDtewveZmWtGKeJaa
c3J+H0LPQVk25LTJ752zgwwJbuH2Y5C97kxc+qYJyZtzZlhkCNoal9rBbxHANJyM
mAry76XmordJjdMupP5/uPKLLqzGeHVCehpqnfIctIhuzxApsX5HzAccu6AWx3Tl
wYpvPR2+IERDpMf5EB65/JcIcIHw9Ki+D3c7UT48Sz3B6OIPYwUoFEKViSyRNJXY
qcayeWnfcCDqMg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 09:57:07 2025 by rpki-client