Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
File: sWq92UIPBLqcHNLDTcezUpiK-Nk.mft (raw, json)
Hash identifier: RVJtG5XOQdaHoxifpewmsk0Rrt2yb/F5KUj3C8tXvGg=
Subject key identifier: 7D:9B:E2:C8:85:76:2D:4D:68:6D:31:98:7B:CC:54:8C:83:29:84:90
Authority key identifier: B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9
Certificate issuer: /CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
Certificate serial: 01987B2D88315D4428D89B0013199AE60B84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
Manifest number: 1357
Signing time: Tue 05 Aug 2025 17:00:37 +0000
Manifest this update: Tue 05 Aug 2025 17:00:37 +0000
Manifest next update: Wed 06 Aug 2025 17:00:37 +0000
Files and hashes: 1: SX7CKkNX5ke670AWCb1741Boh3c.roa (hash: /+lvUIY6Nj8pitkJ880DAygWMpOJMtNOHpSYINj0dno=)
2: sWq92UIPBLqcHNLDTcezUpiK-Nk.crl (hash: 2Mft/BMvbD7PDO3DOdLoJOUlYkyv4gcz61yKTMh+BLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:2d:88:31:5d:44:28:d8:9b:00:13:19:9a:e6:0b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
Validity
Not Before: Aug 5 17:00:37 2025 GMT
Not After : Aug 6 17:00:37 2025 GMT
Subject: CN=7d9be2c885762d4d686d31987bcc548c83298490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c4:e8:80:dd:3f:c3:c1:94:16:17:09:cb:51:
8a:1f:4c:54:64:b2:51:2f:40:22:4f:91:f0:85:84:
9b:70:af:72:ed:63:0c:36:f0:8b:07:74:ba:be:25:
e4:a8:6f:17:ea:63:13:26:29:35:5d:02:12:93:7e:
6d:6a:3e:d2:50:d0:a7:c9:79:4f:50:a7:76:7c:64:
50:78:49:33:32:8e:e5:8f:f0:02:be:1a:d2:56:e3:
65:75:da:da:9e:bf:ae:a1:e6:22:ed:1b:37:b6:3e:
c5:24:9f:19:8a:d2:6b:2e:4c:73:28:f6:2b:70:2e:
64:98:ae:78:d6:d2:91:9c:30:7c:7d:f3:82:42:40:
dd:bd:7a:12:02:57:b0:3b:f9:54:8d:7e:7c:d2:fa:
35:f0:46:ae:bb:2f:8e:aa:e5:ce:62:20:20:82:fe:
9b:c3:80:ec:3b:74:7a:40:33:de:6a:88:40:b3:3f:
af:26:c4:e0:90:4b:85:b4:3b:59:26:0b:f7:1d:87:
8a:c4:74:4c:a7:7e:af:ef:23:11:bb:5e:d7:2d:9e:
73:01:5e:9f:01:38:e6:59:94:22:4e:f6:4c:8d:84:
25:6e:ca:22:85:17:a5:be:b6:0d:2f:8c:a8:c3:88:
c1:f3:08:83:a7:e6:cd:55:42:04:30:6e:94:2d:63:
ac:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9B:E2:C8:85:76:2D:4D:68:6D:31:98:7B:CC:54:8C:83:29:84:90
X509v3 Authority Key Identifier:
keyid:B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d7:67:64:88:4b:4e:61:cb:ac:cd:db:f0:03:bd:d4:4a:20:
92:72:9d:46:ee:6b:8f:72:6c:06:72:32:97:79:09:86:5f:03:
2b:55:00:61:58:39:cf:70:65:9a:6c:4f:e3:49:8a:60:7d:ac:
24:50:a7:21:b1:29:12:b0:b5:a7:2d:dd:58:bb:a9:49:24:6d:
cb:04:53:95:e8:c0:3f:b3:05:22:b6:2f:0a:8b:d8:02:22:e8:
ff:59:1d:b4:df:d4:b7:6b:70:cb:19:23:68:a7:f4:b1:d4:ac:
e5:1c:4b:14:0e:2d:2c:fb:f7:75:ab:86:78:b1:19:f8:03:f4:
be:dc:5a:fd:6b:98:d7:9c:b8:26:e1:26:06:c4:3a:93:fe:6b:
d1:75:68:15:00:9f:93:99:fe:20:cc:37:ec:80:88:a1:49:8a:
81:83:b2:22:72:9d:b5:71:b4:56:f2:29:6c:10:23:3f:32:2f:
9d:e5:42:76:8b:20:44:37:21:bc:fc:58:f1:0f:92:9d:1e:33:
f5:15:90:d6:56:39:d2:fc:cf:98:8b:70:83:cf:a7:c8:b7:79:
7a:06:9e:07:c1:91:cf:eb:86:21:71:ef:c9:06:7b:d5:6a:b6:
21:40:0e:2d:7f:c6:71:10:ba:08:c4:15:e5:7e:95:eb:f5:11:
d2:02:cf:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7LYgxXUQo2JsAExma5guEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNmFiZGQ5NDIwZjA0YmE5YzFjZDJjMzRkYzdiMzUyOTg4
YWY4ZDkwHhcNMjUwODA1MTcwMDM3WhcNMjUwODA2MTcwMDM3WjAzMTEwLwYDVQQD
Eyg3ZDliZTJjODg1NzYyZDRkNjg2ZDMxOTg3YmNjNTQ4YzgzMjk4NDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucTogN0/w8GUFhcJy1GKH0xUZLJR
L0AiT5HwhYSbcK9y7WMMNvCLB3S6viXkqG8X6mMTJik1XQISk35taj7SUNCnyXlP
UKd2fGRQeEkzMo7lj/ACvhrSVuNlddranr+uoeYi7Rs3tj7FJJ8ZitJrLkxzKPYr
cC5kmK541tKRnDB8ffOCQkDdvXoSAlewO/lUjX580vo18Eauuy+OquXOYiAggv6b
w4DsO3R6QDPeaohAsz+vJsTgkEuFtDtZJgv3HYeKxHRMp36v7yMRu17XLZ5zAV6f
ATjmWZQiTvZMjYQlbsoihRelvrYNL4yow4jB8wiDp+bNVUIEMG6ULWOstQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2b4siFdi1NaG0xmHvMVIyDKYSQMB8GA1UdIwQY
MBaAFLFqvdlCDwS6nBzSw03Hs1KYivjZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yYWRjMzktMzYzMC00MjVmLWFmMjkt
ZmJiMGQzYzEwNDIzLzEvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8yYWRjMzktMzYzMC00MjVmLWFmMjktZmJiMGQzYzEwNDIz
LzEvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAStdnZIhL
TmHLrM3b8AO91EogknKdRu5rj3JsBnIyl3kJhl8DK1UAYVg5z3BlmmxP40mKYH2s
JFCnIbEpErC1py3dWLupSSRtywRTlejAP7MFIrYvCovYAiLo/1kdtN/Ut2twyxkj
aKf0sdSs5RxLFA4tLPv3dauGeLEZ+AP0vtxa/WuY15y4JuEmBsQ6k/5r0XVoFQCf
k5n+IMw37ICIoUmKgYOyInKdtXG0VvIpbBAjPzIvneVCdosgRDchvPxY8Q+SnR4z
9RWQ1lY50vzPmItwg8+nyLd5egaeB8GRz+uGIXHvyQZ71Wq2IUAOLX/GcRC6CMQV
5X6V6/UR0gLPIw==
-----END CERTIFICATE-----
Generated at Tue Aug 5 23:02:47 2025 by rpki-client