Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft
File: S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft (raw, json)
Hash identifier: 9deb25SALwVXZVBN+xD83l/6G3sbx4NIVH0fKYlg9og=
Subject key identifier: 0B:EC:E4:EC:38:34:DD:FE:D0:93:8F:C8:C2:35:17:BD:4A:31:D7:BE
Authority key identifier: 4B:72:06:6D:7E:6C:A8:AD:2F:FA:62:A6:9B:06:79:23:A4:2D:F9:6F
Certificate issuer: /CN=4b72066d7e6ca8ad2ffa62a69b067923a42df96f
Certificate serial: 01987562C09750F824956BD06327BA0B2021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft
Manifest number: 12B2
Signing time: Mon 04 Aug 2025 14:01:02 +0000
Manifest this update: Mon 04 Aug 2025 14:01:02 +0000
Manifest next update: Tue 05 Aug 2025 14:01:02 +0000
Files and hashes: 1: 1D0kryG-hg5X4kNtLF0_L_6fbtc.roa (hash: Zop4UA3qvwcLs+PgF6ZAbdQWhdOq1xNbvhqjWudAWN0=)
2: S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.crl (hash: UGTqFzD7Uhu57XT5Utn+gUzcnlrzLswcxhhbSaqLc4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:c0:97:50:f8:24:95:6b:d0:63:27:ba:0b:20:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b72066d7e6ca8ad2ffa62a69b067923a42df96f
Validity
Not Before: Aug 4 14:01:02 2025 GMT
Not After : Aug 5 14:01:02 2025 GMT
Subject: CN=0bece4ec3834ddfed0938fc8c23517bd4a31d7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:90:1c:bd:a4:28:08:13:fc:b7:b7:4c:d4:
72:24:25:34:17:8b:64:9e:32:47:65:a0:4c:46:f3:
f8:fa:08:b5:25:79:aa:16:f3:21:24:ac:5e:03:9b:
e8:25:de:7e:cf:f2:84:4c:b3:5a:f6:a0:c7:a0:b5:
a2:98:e0:1f:41:b2:93:e4:39:ae:62:2f:17:c4:9a:
c0:d9:1a:9d:51:e7:16:4e:2f:34:cd:8a:da:17:6c:
46:1a:d2:40:57:d1:f8:02:83:d6:e4:2e:5b:b2:ba:
50:c2:b3:05:e0:e5:e3:30:e0:3d:8c:5e:75:74:82:
fd:8a:46:a0:fe:29:4f:05:84:19:9e:7c:ad:b0:53:
2a:33:b1:dd:59:3e:f7:31:da:87:79:b5:4a:54:39:
de:33:22:09:29:4b:39:b3:3e:54:39:fe:0f:d0:7a:
68:58:67:ed:e5:95:72:4d:7a:12:1a:11:da:75:0a:
d3:a6:6e:0d:0a:bf:59:1d:12:54:04:72:7d:d8:44:
22:a0:21:73:14:2b:f3:fa:d5:06:43:07:4d:b8:45:
36:e0:1c:ca:5e:61:f0:23:b6:72:85:39:c3:e9:8d:
c3:b9:89:55:af:b4:f8:f7:5c:3a:be:d2:d7:da:63:
30:8e:35:56:c1:4b:d8:40:9e:af:de:59:b6:da:64:
ae:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EC:E4:EC:38:34:DD:FE:D0:93:8F:C8:C2:35:17:BD:4A:31:D7:BE
X509v3 Authority Key Identifier:
keyid:4B:72:06:6D:7E:6C:A8:AD:2F:FA:62:A6:9B:06:79:23:A4:2D:F9:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:83:67:b7:f6:ef:8d:1b:6e:52:23:c8:58:7d:92:a2:b4:0e:
82:a9:75:bb:55:e5:1c:00:a2:43:62:ae:34:67:46:c9:c6:a4:
9d:46:9e:74:bc:78:47:91:9e:4c:61:67:9a:78:c7:c5:c2:bb:
aa:16:6c:55:09:c6:77:15:95:3d:7e:bc:fc:4a:b5:db:33:4b:
94:54:38:68:97:41:52:ae:7f:18:de:af:c6:94:83:10:19:a4:
fb:2f:cc:64:22:2b:c3:97:f5:20:92:54:9a:29:9f:ab:a0:b5:
29:2e:46:e9:8b:e0:ee:a4:97:7b:cd:46:02:6a:83:1b:5d:54:
83:fc:d9:34:1b:06:d4:93:7d:3f:88:28:5e:7f:9d:fc:0c:56:
4b:34:bd:80:83:de:59:25:e8:6f:44:3e:e5:20:89:dd:45:cc:
21:be:61:32:b8:9b:a0:56:a8:04:61:57:fd:ce:04:fe:25:2d:
4c:c0:6c:af:61:ee:0a:07:24:e2:65:cf:91:1c:e1:96:6b:99:
c8:c3:35:9d:ca:91:6c:c0:9e:f8:06:fb:5b:ed:63:e9:0e:d2:
71:56:92:7c:9f:db:01:3b:38:2d:e0:86:f0:6b:78:89:a2:16:
d8:e8:a9:ba:86:96:89:72:43:83:76:b3:f8:65:13:95:05:11:
fb:f2:4c:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh1YsCXUPgklWvQYye6CyAhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNzIwNjZkN2U2Y2E4YWQyZmZhNjJhNjliMDY3OTIzYTQy
ZGY5NmYwHhcNMjUwODA0MTQwMTAyWhcNMjUwODA1MTQwMTAyWjAzMTEwLwYDVQQD
EygwYmVjZTRlYzM4MzRkZGZlZDA5MzhmYzhjMjM1MTdiZDRhMzFkN2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymyQHL2kKAgT/Le3TNRyJCU0F4tk
njJHZaBMRvP4+gi1JXmqFvMhJKxeA5voJd5+z/KETLNa9qDHoLWimOAfQbKT5Dmu
Yi8XxJrA2RqdUecWTi80zYraF2xGGtJAV9H4AoPW5C5bsrpQwrMF4OXjMOA9jF51
dIL9ikag/ilPBYQZnnytsFMqM7HdWT73MdqHebVKVDneMyIJKUs5sz5UOf4P0Hpo
WGft5ZVyTXoSGhHadQrTpm4NCr9ZHRJUBHJ92EQioCFzFCvz+tUGQwdNuEU24BzK
XmHwI7ZyhTnD6Y3DuYlVr7T491w6vtLX2mMwjjVWwUvYQJ6v3lm22mSuSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvs5Ow4NN3+0JOPyMI1F71KMde+MB8GA1UdIwQY
MBaAFEtyBm1+bKitL/pippsGeSOkLflvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzNJR2JYNXNxSzB2LW1LbW13WjVJNlF0LVc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hNjRiMDktNjRkZi00NzBjLWE2NGQt
MWY2OTkxODc3YjI2LzEvUzNJR2JYNXNxSzB2LW1LbW13WjVJNlF0LVc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9hNjRiMDktNjRkZi00NzBjLWE2NGQtMWY2OTkxODc3YjI2
LzEvUzNJR2JYNXNxSzB2LW1LbW13WjVJNlF0LVc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPoNnt/bv
jRtuUiPIWH2SorQOgql1u1XlHACiQ2KuNGdGycaknUaedLx4R5GeTGFnmnjHxcK7
qhZsVQnGdxWVPX68/Eq12zNLlFQ4aJdBUq5/GN6vxpSDEBmk+y/MZCIrw5f1IJJU
mimfq6C1KS5G6Yvg7qSXe81GAmqDG11Ug/zZNBsG1JN9P4goXn+d/AxWSzS9gIPe
WSXob0Q+5SCJ3UXMIb5hMriboFaoBGFX/c4E/iUtTMBsr2HuCgck4mXPkRzhlmuZ
yMM1ncqRbMCe+Ab7W+1j6Q7ScVaSfJ/bATs4LeCG8Gt4iaIW2OipuoaWiXJDg3az
+GUTlQUR+/JM9g==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:22:39 2025 by rpki-client