Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
File: SGfTe3Yct6BfxzPj20M2b6NiU2w.mft (raw, json)
Hash identifier: bDdvNBz1jaTZQ62W9XniIkU/rm3qM0GVV1gijouN63M=
Subject key identifier: F5:02:AF:26:08:56:F8:DE:A3:77:F9:8E:D9:8C:D7:11:F6:13:9A:F5
Authority key identifier: 48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C
Certificate issuer: /CN=4867d37b761cb7a05fc733e3db43366fa362536c
Certificate serial: 019921B13135A4ECB70367D46D5510DC64D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
Manifest number: 0F46
Signing time: Sun 07 Sep 2025 01:01:24 +0000
Manifest this update: Sun 07 Sep 2025 01:01:24 +0000
Manifest next update: Mon 08 Sep 2025 01:01:24 +0000
Files and hashes: 1: Nx8KeWYh1HnL5iAJ_PCU7YJun4c.roa (hash: MQQ4lqV14DgsP9PSgDv3Sm3nFuHvBvMEPlVur5pwdsw=)
2: SGfTe3Yct6BfxzPj20M2b6NiU2w.crl (hash: N1b/P8IUPbFrvtnHN/euAO0hVNXJLK00T+ZPZiY3irg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:31:35:a4:ec:b7:03:67:d4:6d:55:10:dc:64:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4867d37b761cb7a05fc733e3db43366fa362536c
Validity
Not Before: Sep 7 01:01:24 2025 GMT
Not After : Sep 8 01:01:24 2025 GMT
Subject: CN=f502af260856f8dea377f98ed98cd711f6139af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0c:e8:ce:9f:42:48:9f:e6:86:73:e4:6e:60:
10:60:7c:40:59:51:2a:83:1d:fb:56:37:21:e9:86:
32:fd:2a:23:ce:cb:0e:e2:64:d9:db:1e:da:6f:37:
40:33:5e:07:0e:0b:5a:fa:79:18:54:1a:69:1a:43:
93:f8:3d:b7:33:b2:78:c8:50:f1:71:c0:5b:a1:a9:
59:27:02:17:32:f4:1f:1b:58:6d:50:f5:ac:7c:11:
f7:69:47:91:99:e9:12:04:90:fc:d8:c7:73:ca:cc:
fa:46:81:5b:8e:ab:b1:43:5e:ac:32:d8:8c:16:c6:
a5:4c:d0:f1:28:25:34:14:b5:5a:0c:32:60:f7:08:
51:e9:85:63:89:ea:95:aa:1d:a2:7c:2f:3c:e1:aa:
d7:28:e5:bc:84:9c:1e:c1:b7:e0:ae:66:d7:08:fb:
1c:9a:e7:34:33:73:60:3e:ba:ee:41:61:ca:34:a8:
39:17:0b:70:ae:56:75:f0:7c:e8:07:59:27:5a:b2:
2b:af:59:26:24:d1:f9:1a:56:61:ee:68:f8:d9:f0:
0a:ee:34:45:71:5d:16:29:d4:6f:63:2f:6a:e4:4e:
01:e8:9b:17:5c:c2:8a:1c:4e:cd:bc:1a:a6:11:4f:
be:66:40:bc:ea:cb:f4:dc:cc:ba:f1:97:cd:c7:47:
a3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:02:AF:26:08:56:F8:DE:A3:77:F9:8E:D9:8C:D7:11:F6:13:9A:F5
X509v3 Authority Key Identifier:
keyid:48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:7d:c6:2a:bb:1e:c1:22:19:e7:4d:68:cb:ad:cb:7e:dc:42:
6d:92:4f:8e:14:de:06:cd:8b:14:29:07:f9:1c:38:ae:af:1f:
c3:66:87:21:dd:77:d7:e6:f0:3f:db:f4:1e:77:df:68:10:15:
10:ef:29:92:9c:f7:8b:fc:09:62:66:10:c2:6a:63:0b:20:2e:
f0:9e:b8:db:61:b0:ba:5f:fc:99:be:52:ef:ce:44:63:31:7a:
31:b5:d4:d9:83:6a:11:7e:a1:cd:12:6e:82:ee:fb:09:c1:9a:
44:7e:e5:4d:3d:36:9c:6a:e0:52:8c:2d:e8:66:00:d1:98:79:
71:c9:79:6a:b2:a5:f7:1d:72:f8:31:f5:d2:ff:17:1f:03:78:
74:ac:98:c6:f8:83:3a:b3:ba:2c:20:3d:a5:49:e3:3e:81:ba:
c9:1b:b1:f9:55:23:38:19:5d:48:3a:a1:77:c6:e7:8b:e2:0d:
9c:11:93:13:25:52:2d:f4:db:5e:98:a8:74:5a:6f:d0:2d:16:
e7:48:94:4f:48:5e:3b:dc:9b:d9:c4:d0:16:fa:45:26:25:28:
c7:6d:31:cb:76:cf:8b:cd:0d:a8:dd:87:3e:a0:a8:78:a4:eb:
87:b5:4a:9c:da:0f:c9:20:9c:18:75:5c:1e:53:ea:2f:c3:2b:
7d:75:50:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsTE1pOy3A2fUbVUQ3GTSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NjdkMzdiNzYxY2I3YTA1ZmM3MzNlM2RiNDMzNjZmYTM2
MjUzNmMwHhcNMjUwOTA3MDEwMTI0WhcNMjUwOTA4MDEwMTI0WjAzMTEwLwYDVQQD
EyhmNTAyYWYyNjA4NTZmOGRlYTM3N2Y5OGVkOThjZDcxMWY2MTM5YWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Azozp9CSJ/mhnPkbmAQYHxAWVEq
gx37Vjch6YYy/SojzssO4mTZ2x7abzdAM14HDgta+nkYVBppGkOT+D23M7J4yFDx
ccBboalZJwIXMvQfG1htUPWsfBH3aUeRmekSBJD82Mdzysz6RoFbjquxQ16sMtiM
FsalTNDxKCU0FLVaDDJg9whR6YVjieqVqh2ifC884arXKOW8hJwewbfgrmbXCPsc
muc0M3NgPrruQWHKNKg5FwtwrlZ18HzoB1knWrIrr1kmJNH5GlZh7mj42fAK7jRF
cV0WKdRvYy9q5E4B6JsXXMKKHE7NvBqmEU++ZkC86sv03My68ZfNx0ejBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUCryYIVvjeo3f5jtmM1xH2E5r1MB8GA1UdIwQY
MBaAFEhn03t2HLegX8cz49tDNm+jYlNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0dmVGUzWWN0NkJmeHpQajIwTTJiNk5pVTJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMGM1YjctZDJhYy00YTVhLTgwOTgt
NjBmOWRlYTQzODk5LzEvU0dmVGUzWWN0NkJmeHpQajIwTTJiNk5pVTJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9lMGM1YjctZDJhYy00YTVhLTgwOTgtNjBmOWRlYTQzODk5
LzEvU0dmVGUzWWN0NkJmeHpQajIwTTJiNk5pVTJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi33GKrse
wSIZ501oy63LftxCbZJPjhTeBs2LFCkH+Rw4rq8fw2aHId131+bwP9v0HnffaBAV
EO8pkpz3i/wJYmYQwmpjCyAu8J6422Gwul/8mb5S785EYzF6MbXU2YNqEX6hzRJu
gu77CcGaRH7lTT02nGrgUowt6GYA0Zh5ccl5arKl9x1y+DH10v8XHwN4dKyYxviD
OrO6LCA9pUnjPoG6yRux+VUjOBldSDqhd8bni+INnBGTEyVSLfTbXpiodFpv0C0W
50iUT0heO9yb2cTQFvpFJiUox20xy3bPi80NqN2HPqCoeKTrh7VKnNoPySCcGHVc
HlPqL8MrfXVQnQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:00:37 2025 by rpki-client