Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
File: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft (raw, json)
Hash identifier: fMnelayYyq+3T/OYLT8i4Voyz1GgyyugPzfPoFT2Gl0=
Subject key identifier: 76:53:EF:01:55:53:94:64:04:33:CF:69:4E:D4:F3:39:6F:69:32:48
Authority key identifier: B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
Certificate issuer: /CN=b0095ed011c94358245c32757d46bed860df4c19
Certificate serial: 01988DA1FEFFB013E594AC343C94E231D2C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
Manifest number: 05CD
Signing time: Sat 09 Aug 2025 07:01:00 +0000
Manifest this update: Sat 09 Aug 2025 07:01:00 +0000
Manifest next update: Sun 10 Aug 2025 07:01:00 +0000
Files and hashes: 1: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl (hash: sp43cOYnRZoHpV7UTt5G0M1nQCkJy2CPGL0JfiG9pdw=)
2: t0wNgCpzIiHd0fZLik8oKup2IRU.roa (hash: eDGvGeZXSnNxXFSxZa5NU4er/BuDVU9oTOPF3gyQwp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a1:fe:ff:b0:13:e5:94:ac:34:3c:94:e2:31:d2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0095ed011c94358245c32757d46bed860df4c19
Validity
Not Before: Aug 9 07:01:00 2025 GMT
Not After : Aug 10 07:01:00 2025 GMT
Subject: CN=7653ef01555394640433cf694ed4f3396f693248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:25:80:b1:da:ba:00:e7:ad:f5:19:33:fb:bd:
74:ec:b9:c1:39:93:44:64:23:d3:38:bf:1d:16:2a:
75:ee:08:db:50:55:ab:c1:0b:83:80:54:5c:07:a7:
6c:06:25:65:aa:34:d0:95:2b:6e:0b:0a:9e:54:68:
f3:9c:c4:0d:91:37:2d:7f:66:93:29:6d:28:7d:52:
08:92:aa:88:a8:f7:20:a1:80:37:c8:f9:34:95:0b:
87:58:a8:7b:62:c2:6c:e6:f2:78:b8:9f:f1:45:96:
86:4b:2d:ca:d8:77:2f:2f:13:d7:72:55:53:26:13:
c3:0e:4a:17:38:ea:25:a6:02:10:12:32:fa:d7:a6:
84:0b:d1:2c:d2:bf:b1:e7:6a:39:c3:4b:54:0d:06:
76:4a:e4:9d:34:81:f1:10:04:d7:8e:c5:4e:41:ee:
5e:3e:76:48:f3:bb:4c:5c:33:a9:0c:b9:35:fa:32:
4e:0b:cb:15:9c:3e:29:ef:fa:d0:43:77:55:6a:b3:
c3:9a:6e:3a:c4:bb:f5:6c:c3:d3:ee:e1:32:58:34:
7d:a5:28:4c:46:ad:67:76:78:7a:5c:28:c5:3c:31:
05:ab:4a:4c:75:a3:36:cb:6b:64:8a:8e:eb:42:56:
af:6f:5a:ac:29:4e:0e:39:32:c3:63:63:96:ce:45:
a6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:53:EF:01:55:53:94:64:04:33:CF:69:4E:D4:F3:39:6F:69:32:48
X509v3 Authority Key Identifier:
keyid:B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:29:14:7a:47:f6:97:c0:f8:82:7b:21:ed:32:7c:a2:aa:b8:
b7:8f:11:43:cf:54:bf:4b:44:01:03:74:bf:a1:77:02:0c:2d:
3f:63:f5:c5:ad:08:e9:2d:11:05:fb:a4:d9:3f:aa:e0:b5:c0:
38:25:d6:62:60:c0:4c:b1:66:1e:30:c1:e7:c1:11:8d:34:2c:
48:4c:f0:42:fe:f1:9f:e2:76:85:bb:d5:1f:87:77:95:16:7b:
31:aa:51:21:0a:7b:16:fa:c1:92:10:55:14:1c:ce:49:e6:72:
9e:e6:ba:f0:76:81:8b:08:9a:78:de:1f:30:a0:a3:ce:14:37:
7b:e4:8f:1f:f1:35:c7:14:9f:bc:f8:4d:a3:ef:01:54:97:9e:
92:79:91:eb:25:9c:4a:01:ce:07:28:9f:eb:06:d2:78:af:ea:
87:70:85:30:14:35:ca:8f:68:e2:32:77:9d:a2:16:af:3f:86:
1d:4b:dc:da:30:29:a2:6d:4a:35:a4:28:5b:76:1c:fb:57:da:
20:0e:60:7f:ce:28:78:34:b4:27:37:39:a6:8d:b6:49:e1:fc:
5d:31:ec:70:67:14:4f:64:d0:48:43:f2:dd:e9:8d:9b:7a:55:
12:90:2a:d0:0a:18:50:5e:27:d5:d8:b3:1e:4f:ad:8b:9d:d9:
ad:69:11:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiNof7/sBPllKw0PJTiMdLIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMDk1ZWQwMTFjOTQzNTgyNDVjMzI3NTdkNDZiZWQ4NjBk
ZjRjMTkwHhcNMjUwODA5MDcwMTAwWhcNMjUwODEwMDcwMTAwWjAzMTEwLwYDVQQD
Eyg3NjUzZWYwMTU1NTM5NDY0MDQzM2NmNjk0ZWQ0ZjMzOTZmNjkzMjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiWAsdq6AOet9Rkz+7107LnBOZNE
ZCPTOL8dFip17gjbUFWrwQuDgFRcB6dsBiVlqjTQlStuCwqeVGjznMQNkTctf2aT
KW0ofVIIkqqIqPcgoYA3yPk0lQuHWKh7YsJs5vJ4uJ/xRZaGSy3K2HcvLxPXclVT
JhPDDkoXOOolpgIQEjL616aEC9Es0r+x52o5w0tUDQZ2SuSdNIHxEATXjsVOQe5e
PnZI87tMXDOpDLk1+jJOC8sVnD4p7/rQQ3dVarPDmm46xLv1bMPT7uEyWDR9pShM
Rq1ndnh6XCjFPDEFq0pMdaM2y2tkio7rQlavb1qsKU4OOTLDY2OWzkWmhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZT7wFVU5RkBDPPaU7U8zlvaTJIMB8GA1UdIwQY
MBaAFLAJXtARyUNYJFwydX1Gvthg30wZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0FsZTBCSEpRMWdrWERKMWZVYS0yR0RmVEJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS80OWNkZWMtNjlmMC00NTQwLTg5YmEt
ZWE0NTk2OTk1MGNjLzEvc0FsZTBCSEpRMWdrWERKMWZVYS0yR0RmVEJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS80OWNkZWMtNjlmMC00NTQwLTg5YmEtZWE0NTk2OTk1MGNj
LzEvc0FsZTBCSEpRMWdrWERKMWZVYS0yR0RmVEJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApCkUekf2
l8D4gnsh7TJ8oqq4t48RQ89Uv0tEAQN0v6F3AgwtP2P1xa0I6S0RBfuk2T+q4LXA
OCXWYmDATLFmHjDB58ERjTQsSEzwQv7xn+J2hbvVH4d3lRZ7MapRIQp7FvrBkhBV
FBzOSeZynua68HaBiwiaeN4fMKCjzhQ3e+SPH/E1xxSfvPhNo+8BVJeeknmR6yWc
SgHOByif6wbSeK/qh3CFMBQ1yo9o4jJ3naIWrz+GHUvc2jApom1KNaQoW3Yc+1fa
IA5gf84oeDS0Jzc5po22SeH8XTHscGcUT2TQSEPy3emNm3pVEpAq0AoYUF4n1diz
Hk+ti53ZrWkRJQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:41:31 2025 by rpki-client