Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
File: sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft (raw, json)
Hash identifier: B3aVWmgsQRoCxDHmwP9T8DBy07wQm9umiTr0c12K2Tw=
Subject key identifier: 43:52:CD:FF:CB:02:E4:A2:F3:FF:7D:37:3D:00:E3:73:46:C0:68:01
Authority key identifier: B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
Certificate issuer: /CN=b0d62d1666c5c4d192183531584afd72bed08485
Certificate serial: 0199221E9CF55DB8850A92E042272D724771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 03:00:55 +0000
Manifest this update: Sun 07 Sep 2025 03:00:55 +0000
Manifest next update: Mon 08 Sep 2025 03:00:55 +0000
Files and hashes: 1: QXyQtT8qy7cZkdePrzNkoMkFsLI.roa (hash: p4NnT1oNWa0lNXGn9ql046BScEcNjINqPaeSDpvSus0=)
2: sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl (hash: U5aJSby4LIZdXs1I3WSoU/vCf6HXgubHdGAzaXITvgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:9c:f5:5d:b8:85:0a:92:e0:42:27:2d:72:47:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d62d1666c5c4d192183531584afd72bed08485
Validity
Not Before: Sep 7 03:00:55 2025 GMT
Not After : Sep 8 03:00:55 2025 GMT
Subject: CN=4352cdffcb02e4a2f3ff7d373d00e37346c06801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:07:9f:1f:e4:39:17:5e:46:ee:03:4e:5b:50:
1e:fd:d1:35:5d:1a:fa:3a:ee:72:2a:f4:bb:ae:0b:
4f:06:32:1b:87:83:7d:57:00:54:53:b0:87:66:31:
da:85:81:e9:d4:39:86:bd:f9:2d:b3:b0:69:fe:9d:
33:f2:9e:df:9e:57:20:c3:5d:94:85:4e:e7:9b:bc:
8b:81:fb:d7:42:59:56:98:29:b8:2b:86:08:af:6f:
59:c2:03:74:7e:53:a1:11:b0:bd:01:6a:c3:2b:5c:
c7:26:ae:b7:db:fb:a8:af:5c:01:ae:53:9f:dd:19:
18:8a:ff:6e:c7:e9:99:1d:c4:5d:cd:2e:4a:0e:7b:
15:17:3d:72:90:5f:d9:b4:ca:96:e1:f1:54:c5:09:
47:94:9c:3f:a6:eb:9c:ad:3f:7d:a2:a2:48:c5:16:
a2:b6:2a:a8:b4:f1:4a:14:4a:71:cf:ad:da:d7:f7:
ac:f7:f6:6f:fb:8e:54:a5:5a:30:d9:25:dd:26:47:
18:f6:8c:a3:63:94:57:fc:2f:d8:cf:a8:e8:67:42:
c5:24:71:4f:e8:42:8a:11:43:af:70:62:58:fe:f0:
1c:c5:e2:ac:24:f5:a6:21:95:01:9e:a0:8e:7e:40:
e5:3f:92:9f:68:f2:15:49:7a:fa:c1:23:11:0b:d7:
41:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:52:CD:FF:CB:02:E4:A2:F3:FF:7D:37:3D:00:E3:73:46:C0:68:01
X509v3 Authority Key Identifier:
keyid:B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e9:a4:63:0d:e6:a2:82:76:48:23:fc:a8:c4:b2:57:91:e0:
c5:76:94:fd:43:a3:ba:d4:f2:28:39:8a:b0:b2:a2:0f:84:77:
6e:e6:03:f4:1a:eb:e7:48:4a:c9:a1:35:76:0b:01:87:26:55:
81:cc:a9:f3:13:76:25:d3:67:bc:0f:e9:66:93:8c:18:26:70:
4b:3f:a7:0d:9b:44:c3:ea:18:f3:11:94:ed:d2:d9:c0:ed:ce:
a1:37:db:4d:1c:a2:7f:81:71:f3:7f:c6:0f:2d:fe:4e:db:fe:
5e:5d:63:6f:a0:55:c3:b3:9b:26:b2:45:c9:c8:eb:04:72:0c:
87:49:2c:d1:fb:bc:cb:00:50:ed:0e:5e:0a:e6:ec:f5:ec:ec:
bc:30:a9:b3:09:cc:2d:08:23:96:0b:f3:21:0b:8f:ff:e4:63:
b5:ad:68:fa:d3:61:32:5a:cb:40:20:c6:27:9e:99:43:a2:1c:
8c:68:cc:81:bf:5e:d3:66:de:c2:31:aa:06:ac:3f:65:14:95:
60:af:43:27:b5:c8:21:30:8f:ce:b5:02:13:b9:58:d6:59:79:
d2:1a:63:47:5a:93:5f:54:c4:7c:5a:11:4f:b6:c7:e8:ef:7d:
34:a6:02:ff:b5:4d:50:e7:2c:56:63:48:af:96:23:ee:96:91:
e6:2a:83:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHpz1XbiFCpLgQictckdxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZDYyZDE2NjZjNWM0ZDE5MjE4MzUzMTU4NGFmZDcyYmVk
MDg0ODUwHhcNMjUwOTA3MDMwMDU1WhcNMjUwOTA4MDMwMDU1WjAzMTEwLwYDVQQD
Eyg0MzUyY2RmZmNiMDJlNGEyZjNmZjdkMzczZDAwZTM3MzQ2YzA2ODAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAefH+Q5F15G7gNOW1Ae/dE1XRr6
Ou5yKvS7rgtPBjIbh4N9VwBUU7CHZjHahYHp1DmGvfkts7Bp/p0z8p7fnlcgw12U
hU7nm7yLgfvXQllWmCm4K4YIr29ZwgN0flOhEbC9AWrDK1zHJq632/uor1wBrlOf
3RkYiv9ux+mZHcRdzS5KDnsVFz1ykF/ZtMqW4fFUxQlHlJw/puucrT99oqJIxRai
tiqotPFKFEpxz63a1/es9/Zv+45UpVow2SXdJkcY9oyjY5RX/C/Yz6joZ0LFJHFP
6EKKEUOvcGJY/vAcxeKsJPWmIZUBnqCOfkDlP5KfaPIVSXr6wSMRC9dBpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENSzf/LAuSi8/99Nz0A43NGwGgBMB8GA1UdIwQY
MBaAFLDWLRZmxcTRkhg1MVhK/XK+0ISFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc05ZdEZtYkZ4TkdTR0RVeFdFcjljcjdRaElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iNGFhNjMtNDI1OS00NGU2LWFjMjkt
NGZhNTNiZjBlMTU1LzEvc05ZdEZtYkZ4TkdTR0RVeFdFcjljcjdRaElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9iNGFhNjMtNDI1OS00NGU2LWFjMjktNGZhNTNiZjBlMTU1
LzEvc05ZdEZtYkZ4TkdTR0RVeFdFcjljcjdRaElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeumkYw3m
ooJ2SCP8qMSyV5HgxXaU/UOjutTyKDmKsLKiD4R3buYD9Brr50hKyaE1dgsBhyZV
gcyp8xN2JdNnvA/pZpOMGCZwSz+nDZtEw+oY8xGU7dLZwO3OoTfbTRyif4Fx83/G
Dy3+Ttv+Xl1jb6BVw7ObJrJFycjrBHIMh0ks0fu8ywBQ7Q5eCubs9ezsvDCpswnM
LQgjlgvzIQuP/+Rjta1o+tNhMlrLQCDGJ56ZQ6IcjGjMgb9e02bewjGqBqw/ZRSV
YK9DJ7XIITCPzrUCE7lY1ll50hpjR1qTX1TEfFoRT7bH6O99NKYC/7VNUOcsVmNI
r5Yj7paR5iqDMA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:47 2025 by rpki-client