Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
File: r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft (raw, json)
Hash identifier: ACNyTSfP3FxW0pWCPwkc2IeRFmlKr+31pOko5SCAunI=
Subject key identifier: 01:1E:68:1B:4C:CA:E9:D8:79:90:71:B9:40:FC:8E:FE:69:CC:1B:13
Authority key identifier: AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
Certificate issuer: /CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Certificate serial: 0199221E22A72108B64DA1975A0FF6870E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 03:00:24 +0000
Manifest this update: Sun 07 Sep 2025 03:00:24 +0000
Manifest next update: Mon 08 Sep 2025 03:00:24 +0000
Files and hashes: 1: WRw_zQ2egi-s7g_XDa3-zCzmCZo.roa (hash: 02LV3UJv16rTHuq6tHPlIKsn2U/3pYjP8DRzavT1ujg=)
2: r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl (hash: mLY4uwxRbSWL/t0BU5RrzeIbJ9NKRQcSgRryROOTN/E=)
3: tMXBcGUIKGTfYRMTtfG6biesR-c.roa (hash: JWcwNHGeY4nL5R6D6KA+SUTM4UCaSarGczrFPqLJ+XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:22:a7:21:08:b6:4d:a1:97:5a:0f:f6:87:0e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Validity
Not Before: Sep 7 03:00:24 2025 GMT
Not After : Sep 8 03:00:24 2025 GMT
Subject: CN=011e681b4ccae9d8799071b940fc8efe69cc1b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7b:3d:5a:b6:b3:28:7a:51:9e:33:47:11:1e:
af:c1:40:00:04:fd:d7:6c:f0:b5:92:64:c1:9b:85:
d1:f7:24:5c:9f:46:6b:2b:47:05:a2:77:62:bc:47:
d5:1b:a2:5f:aa:e6:8b:2a:57:71:39:df:e0:1f:dc:
72:97:96:64:28:f5:57:19:1e:31:4a:00:80:01:b4:
71:d2:b2:2c:26:46:e2:8c:55:d9:51:0a:26:bb:04:
ed:10:89:0f:30:2f:7b:59:c1:f3:4b:5d:ec:df:f6:
c7:b4:e3:bf:f9:eb:f6:3c:0a:ed:b7:a5:6c:2d:7f:
c8:1a:ed:91:b5:60:fe:47:00:83:c5:94:de:ab:d2:
96:df:33:c8:72:73:40:d3:97:d2:8a:a5:f1:a7:23:
dc:ce:06:50:f1:36:11:73:b0:a3:66:bd:97:26:32:
f5:c7:54:c9:85:b1:c5:97:55:bc:ce:bc:53:73:04:
e9:b2:ce:69:ab:63:a1:c2:07:01:dd:02:4d:d6:6f:
85:b5:ea:98:06:b7:81:df:d7:19:d2:be:8a:24:20:
db:8a:3e:ff:d6:1e:94:a5:0f:59:f7:35:0e:4f:25:
27:aa:a8:35:10:b7:1d:28:7f:e1:91:a5:b0:9c:b2:
4b:8d:e2:a5:eb:7d:b2:59:83:58:12:43:58:09:79:
e7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1E:68:1B:4C:CA:E9:D8:79:90:71:B9:40:FC:8E:FE:69:CC:1B:13
X509v3 Authority Key Identifier:
keyid:AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b8:1b:4c:b2:82:dc:0a:fc:c4:df:28:af:69:98:dd:e9:87:
d7:47:f7:c4:41:e1:27:77:e0:20:73:70:c3:c9:17:a1:da:d9:
ee:cc:b4:87:66:98:64:d4:f0:d4:40:75:27:56:80:d6:96:5a:
a0:a0:11:ca:37:b1:fe:a4:cc:ab:75:c2:aa:8b:15:cd:a1:d0:
02:19:88:21:07:73:1e:fd:28:7f:5e:06:2f:02:6a:cc:0e:bc:
84:2c:96:19:b6:46:e7:d9:a7:a9:44:2f:18:51:16:09:10:72:
57:b9:d1:be:34:a1:db:91:18:9c:68:b3:53:88:7f:54:89:4e:
7e:f5:28:93:be:83:60:3f:6e:89:17:4b:75:7e:2e:d5:61:1f:
88:90:05:c2:d5:fa:f0:f7:9a:50:8f:4d:5e:d3:aa:e7:74:df:
d7:ce:34:d8:6f:e1:d2:a0:4c:fc:85:47:e0:db:50:79:4b:3e:
49:eb:bc:cd:14:e5:01:81:c1:f5:79:e9:22:ab:65:c8:bd:4a:
28:81:21:6c:f4:24:37:46:5f:1c:27:34:1c:04:d9:d3:6b:14:
d9:1a:ca:ba:5c:ab:02:69:e3:50:d0:d8:6a:9a:e2:53:47:65:
48:57:75:13:fe:7d:8b:62:d8:d2:df:e1:ca:50:09:4e:8f:ee:
b5:7a:af:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHiKnIQi2TaGXWg/2hw6GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZTRhMGQ1ZmRhNjAwYzVkNWI3ZjYxOGY2ODZkN2U5MzA1
MWI0ZDcwHhcNMjUwOTA3MDMwMDI0WhcNMjUwOTA4MDMwMDI0WjAzMTEwLwYDVQQD
EygwMTFlNjgxYjRjY2FlOWQ4Nzk5MDcxYjk0MGZjOGVmZTY5Y2MxYjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Hs9WrazKHpRnjNHER6vwUAABP3X
bPC1kmTBm4XR9yRcn0ZrK0cFondivEfVG6JfquaLKldxOd/gH9xyl5ZkKPVXGR4x
SgCAAbRx0rIsJkbijFXZUQomuwTtEIkPMC97WcHzS13s3/bHtOO/+ev2PArtt6Vs
LX/IGu2RtWD+RwCDxZTeq9KW3zPIcnNA05fSiqXxpyPczgZQ8TYRc7CjZr2XJjL1
x1TJhbHFl1W8zrxTcwTpss5pq2OhwgcB3QJN1m+FteqYBreB39cZ0r6KJCDbij7/
1h6UpQ9Z9zUOTyUnqqg1ELcdKH/hkaWwnLJLjeKl632yWYNYEkNYCXnnUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAEeaBtMyunYeZBxuUD8jv5pzBsTMB8GA1UdIwQY
MBaAFK/koNX9pgDF1bf2GPaG1+kwUbTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvci1TZzFmMm1BTVhWdF9ZWTlvYlg2VEJSdE5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85NDY3YzgtMGM5MC00NmUxLTkxYzAt
ZTEwN2Q5ZjE2YzJkLzEvci1TZzFmMm1BTVhWdF9ZWTlvYlg2VEJSdE5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85NDY3YzgtMGM5MC00NmUxLTkxYzAtZTEwN2Q5ZjE2YzJk
LzEvci1TZzFmMm1BTVhWdF9ZWTlvYlg2VEJSdE5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMrgbTLKC
3Ar8xN8or2mY3emH10f3xEHhJ3fgIHNww8kXodrZ7sy0h2aYZNTw1EB1J1aA1pZa
oKARyjex/qTMq3XCqosVzaHQAhmIIQdzHv0of14GLwJqzA68hCyWGbZG59mnqUQv
GFEWCRByV7nRvjSh25EYnGizU4h/VIlOfvUok76DYD9uiRdLdX4u1WEfiJAFwtX6
8PeaUI9NXtOq53Tf18402G/h0qBM/IVH4NtQeUs+Seu8zRTlAYHB9XnpIqtlyL1K
KIEhbPQkN0ZfHCc0HATZ02sU2RrKulyrAmnjUNDYapriU0dlSFd1E/59i2LY0t/h
ylAJTo/utXqv9Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:49 2025 by rpki-client