Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
File: S_asD7A5JnNFTDlH9DV-RZTtJm0.mft (raw, json)
Hash identifier: nRPm+gjrUO8eyxXOg+5sJJ5qUPrzoK3BdmcoC58y2sY=
Subject key identifier: 01:01:17:5A:88:96:BF:4C:93:C7:8B:2A:97:46:7C:BB:A2:75:2D:FB
Authority key identifier: 4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D
Certificate issuer: /CN=4bf6ac0fb0392673454c3947f4357e4594ed266d
Certificate serial: 019892FF14CF063ECC708B6A1A481D91F266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
Manifest number: 1629
Signing time: Sun 10 Aug 2025 08:00:47 +0000
Manifest this update: Sun 10 Aug 2025 08:00:47 +0000
Manifest next update: Mon 11 Aug 2025 08:00:47 +0000
Files and hashes: 1: S_asD7A5JnNFTDlH9DV-RZTtJm0.crl (hash: dRUm62yvVtYR9ImJL/LpTZ8sdcyGAFasOcqDZk0y7k4=)
2: VTOPr5cRplB2JyRppkTR7JFS0fo.roa (hash: s4FFCpaGghq+r1WTThyqyMnDAmNVSPddYtSZUOJOGf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:ff:14:cf:06:3e:cc:70:8b:6a:1a:48:1d:91:f2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf6ac0fb0392673454c3947f4357e4594ed266d
Validity
Not Before: Aug 10 08:00:47 2025 GMT
Not After : Aug 11 08:00:47 2025 GMT
Subject: CN=0101175a8896bf4c93c78b2a97467cbba2752dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:67:d5:6c:ff:1d:85:ab:67:96:ae:25:26:bb:
5c:82:cb:d9:93:42:5f:88:df:75:04:7e:cf:78:d2:
df:47:f5:4e:75:e1:f8:1a:94:8b:be:2e:e1:27:5b:
dc:99:aa:48:47:7f:7e:e7:3a:8e:7e:9a:7b:e4:44:
f4:19:f2:58:6f:01:f1:f7:2f:ea:09:d1:65:02:0f:
48:4c:b4:c2:c6:93:b1:65:10:dc:47:d9:6a:ec:ee:
da:14:c1:de:0f:8e:8c:3d:41:ec:00:b2:60:a5:8e:
85:7f:9c:93:0a:34:eb:b6:1f:e4:67:0d:58:ab:6d:
55:55:52:c2:09:dd:e4:e2:1f:67:6e:b9:e1:dd:2c:
ed:e7:53:95:e1:35:1d:b7:bb:90:37:7f:d2:fa:7b:
ce:d6:2e:9d:af:c1:e3:16:00:1a:a4:05:67:7b:6c:
38:67:cc:9a:21:f0:7b:0e:10:96:f6:99:72:dd:1a:
63:8b:ae:17:d8:11:8d:d8:bc:dd:b0:51:c2:08:a5:
4c:8c:50:31:38:29:2d:f4:34:ec:dd:40:59:af:fa:
ec:eb:4b:8c:2f:36:3b:52:79:2a:6e:39:08:71:8c:
92:0d:81:4b:74:e3:e4:92:ed:4d:c8:7e:4c:d4:98:
ea:98:f7:7b:72:29:eb:e5:12:39:a5:46:e9:11:a9:
91:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:01:17:5A:88:96:BF:4C:93:C7:8B:2A:97:46:7C:BB:A2:75:2D:FB
X509v3 Authority Key Identifier:
keyid:4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0b:14:57:03:21:ce:0b:dd:eb:2a:37:87:bc:01:48:e8:d0:
9b:aa:0b:7e:5b:8d:c3:8a:9c:30:22:dc:78:80:45:a8:b5:22:
01:b6:70:df:67:e8:0c:e5:dd:92:8a:bd:d8:df:f0:aa:3e:db:
3d:75:72:ed:11:e2:e3:ee:1e:77:ee:49:12:2d:cc:58:ff:b9:
9c:48:38:66:c1:05:78:2d:f0:74:3f:a6:c5:86:30:70:7e:1d:
80:bf:3c:8a:ca:63:b2:bd:3d:b3:d4:15:43:d0:1a:c1:44:4d:
a5:bf:a8:8a:55:90:91:a6:1a:e3:3b:4f:4e:1b:15:17:3a:4f:
6e:9c:c4:cb:a8:68:ef:13:12:9d:80:f7:06:3b:27:91:94:f3:
d6:e3:64:ba:63:fe:97:12:ad:b0:d2:98:e2:34:d4:57:2f:4c:
8f:71:59:aa:0f:38:58:25:a8:32:ba:90:73:eb:56:42:7c:00:
d0:be:cc:68:ce:50:c2:5e:67:3e:05:42:cd:b9:87:6a:45:d9:
48:65:bb:c1:eb:c2:de:d1:76:d8:41:01:ee:10:ed:bb:0c:c3:
d1:04:f0:f2:6b:7e:f2:dd:77:8c:02:95:31:23:46:a5:7c:6c:
61:56:87:ef:70:ff:cf:45:9f:ff:77:f6:7b:be:6e:f4:b6:ae:
25:e7:11:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiS/xTPBj7McItqGkgdkfJmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZjZhYzBmYjAzOTI2NzM0NTRjMzk0N2Y0MzU3ZTQ1OTRl
ZDI2NmQwHhcNMjUwODEwMDgwMDQ3WhcNMjUwODExMDgwMDQ3WjAzMTEwLwYDVQQD
EygwMTAxMTc1YTg4OTZiZjRjOTNjNzhiMmE5NzQ2N2NiYmEyNzUyZGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2fVbP8dhatnlq4lJrtcgsvZk0Jf
iN91BH7PeNLfR/VOdeH4GpSLvi7hJ1vcmapIR39+5zqOfpp75ET0GfJYbwHx9y/q
CdFlAg9ITLTCxpOxZRDcR9lq7O7aFMHeD46MPUHsALJgpY6Ff5yTCjTrth/kZw1Y
q21VVVLCCd3k4h9nbrnh3Szt51OV4TUdt7uQN3/S+nvO1i6dr8HjFgAapAVne2w4
Z8yaIfB7DhCW9ply3Rpji64X2BGN2LzdsFHCCKVMjFAxOCkt9DTs3UBZr/rs60uM
LzY7UnkqbjkIcYySDYFLdOPkku1NyH5M1JjqmPd7cinr5RI5pUbpEamRcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAEBF1qIlr9Mk8eLKpdGfLuidS37MB8GA1UdIwQY
MBaAFEv2rA+wOSZzRUw5R/Q1fkWU7SZtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU19hc0Q3QTVKbk5GVERsSDlEVi1SWlR0Sm0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yZDYyMGUtNWFhNC00NzU5LWIwODgt
YmFjMjAwMjkzMmQ5LzEvU19hc0Q3QTVKbk5GVERsSDlEVi1SWlR0Sm0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yZDYyMGUtNWFhNC00NzU5LWIwODgtYmFjMjAwMjkzMmQ5
LzEvU19hc0Q3QTVKbk5GVERsSDlEVi1SWlR0Sm0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAagsUVwMh
zgvd6yo3h7wBSOjQm6oLfluNw4qcMCLceIBFqLUiAbZw32foDOXdkoq92N/wqj7b
PXVy7RHi4+4ed+5JEi3MWP+5nEg4ZsEFeC3wdD+mxYYwcH4dgL88ispjsr09s9QV
Q9AawURNpb+oilWQkaYa4ztPThsVFzpPbpzEy6ho7xMSnYD3BjsnkZTz1uNkumP+
lxKtsNKY4jTUVy9Mj3FZqg84WCWoMrqQc+tWQnwA0L7MaM5Qwl5nPgVCzbmHakXZ
SGW7wevC3tF22EEB7hDtuwzD0QTw8mt+8t13jAKVMSNGpXxsYVaH73D/z0Wf/3f2
e75u9LauJecRdA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:47:47 2025 by rpki-client