Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
File: sDwwLC9SJ349CraEL2iqX40Nd4c.mft (raw, json)
Hash identifier: 3lCZW9NlTscJuRJSxIq31yIBUbstegmjjg8QG86xwaQ=
Subject key identifier: EB:34:91:F8:0C:AB:58:BE:A1:DB:C1:36:D3:98:88:62:1F:36:B0:4C
Authority key identifier: B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87
Certificate issuer: /CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
Certificate serial: 0198733D7BE89FD110B2DE84FA3D43A2095B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
Manifest number: 0C9F
Signing time: Mon 04 Aug 2025 04:01:05 +0000
Manifest this update: Mon 04 Aug 2025 04:01:05 +0000
Manifest next update: Tue 05 Aug 2025 04:01:05 +0000
Files and hashes: 1: QmAm7-ckXWNCy_EyjMRgtbazq1M.roa (hash: cL7W6FgXh5+bmFrfSXRxDbf8HtHE6dFb//gf0dsJOB8=)
2: WdOqlklUlY-sNbaLSfkpvoRt0iM.roa (hash: nFChOa8TYCoMQ8iwf2JuylM1/1NoIavp13ZTbwdNwn8=)
3: kIN_jMTtiRLUszBNqKlNoyJk3dk.roa (hash: lHRqbJ9tYmnELEYhJx16n/sdjvBPGJLZ5vlonZ4KvjA=)
4: sDwwLC9SJ349CraEL2iqX40Nd4c.crl (hash: 4EovVk3m/qHfeQ7jMFclHFpo8E06VexFi9XZ9p0ElRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:7b:e8:9f:d1:10:b2:de:84:fa:3d:43:a2:09:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
Validity
Not Before: Aug 4 04:01:05 2025 GMT
Not After : Aug 5 04:01:05 2025 GMT
Subject: CN=eb3491f80cab58bea1dbc136d39888621f36b04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:80:65:fd:68:90:8c:3d:dc:68:45:35:20:
a8:ab:59:b1:fd:78:ef:de:4c:cf:4e:d3:4c:c4:4b:
9c:a9:68:1e:3d:aa:90:ea:cb:6d:39:39:2d:73:76:
eb:55:db:53:84:6e:a8:82:a0:67:40:c6:c7:2d:f1:
7c:41:f4:3c:71:5e:91:55:94:b9:c5:a7:65:e2:66:
45:51:7d:b5:0e:6a:ed:70:ec:ea:32:f4:f6:f5:43:
ef:c8:92:0a:54:04:54:32:9b:f3:00:7e:e8:5e:80:
8f:5b:2b:7f:5d:c7:b4:3a:fa:c7:18:57:ed:b2:cf:
44:b6:6c:b6:4f:d1:2c:ab:df:72:09:25:34:34:b1:
17:0a:94:b0:e5:cd:9d:8d:17:f7:f5:2c:20:29:52:
23:c4:d8:82:21:da:75:55:09:23:08:12:37:39:be:
f0:e1:ef:e5:72:df:fc:1c:e4:c3:3a:71:dd:37:d6:
cc:97:3b:af:a3:90:96:a0:f1:e4:f3:9a:58:b7:c5:
5e:e5:95:ef:74:1b:63:95:59:90:33:45:0a:5f:21:
47:7a:00:21:a5:b3:7a:ce:1c:d9:a7:ab:41:4d:ec:
d5:da:df:11:30:66:43:ab:d5:f6:c1:7c:c0:1d:fd:
fd:1f:49:82:b1:c3:29:47:e3:e2:33:5c:23:b0:96:
bd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:34:91:F8:0C:AB:58:BE:A1:DB:C1:36:D3:98:88:62:1F:36:B0:4C
X509v3 Authority Key Identifier:
keyid:B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c4:97:50:b4:1f:9a:14:9c:6b:bf:86:e9:7e:b6:eb:60:2e:
c0:1b:46:a1:2d:df:e6:c5:25:9e:84:55:5a:51:76:64:19:71:
2d:0b:f0:22:89:d6:eb:4d:68:ba:b2:d2:f6:c9:0d:66:4a:46:
e8:0b:67:46:2c:0f:14:ad:21:e4:c9:a8:36:0a:d3:9e:65:13:
b0:28:5d:14:37:6c:5e:91:c4:a7:c2:c5:54:8b:aa:1f:25:d6:
e2:98:70:d4:79:cb:51:fe:6d:69:9d:d0:1e:66:0a:5f:66:53:
c0:5f:f8:74:2b:e1:bb:ff:89:50:e9:e6:a9:ec:a9:e4:a1:54:
76:52:37:21:0c:c0:63:e5:a1:e4:43:cc:ab:d5:a9:a1:d8:cf:
5f:ea:b2:7c:3b:61:e0:b7:ce:89:ea:0a:95:03:a7:e9:ec:ac:
84:23:7f:41:21:3f:72:87:0e:5c:f3:33:73:f3:29:a7:65:c6:
99:d4:0b:e4:28:39:4f:83:82:58:f0:56:46:0a:f1:f4:66:1b:
be:57:7d:f2:62:78:70:3c:f8:23:3c:78:d2:d8:89:e6:06:15:
c0:46:f1:43:de:ce:52:2b:54:b6:70:c0:a6:8a:30:f5:c9:d3:
d9:17:ad:b5:02:55:7d:eb:2b:2a:5d:4f:c2:c2:95:b3:4b:55:
76:db:5e:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPXvon9EQst6E+j1DoglbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwM2MzMDJjMmY1MjI3N2UzZDBhYjY4NDJmNjhhYTVmOGQw
ZDc3ODcwHhcNMjUwODA0MDQwMTA1WhcNMjUwODA1MDQwMTA1WjAzMTEwLwYDVQQD
EyhlYjM0OTFmODBjYWI1OGJlYTFkYmMxMzZkMzk4ODg2MjFmMzZiMDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD+AZf1okIw93GhFNSCoq1mx/Xjv
3kzPTtNMxEucqWgePaqQ6sttOTktc3brVdtThG6ogqBnQMbHLfF8QfQ8cV6RVZS5
xadl4mZFUX21DmrtcOzqMvT29UPvyJIKVARUMpvzAH7oXoCPWyt/Xce0OvrHGFft
ss9Etmy2T9Esq99yCSU0NLEXCpSw5c2djRf39SwgKVIjxNiCIdp1VQkjCBI3Ob7w
4e/lct/8HOTDOnHdN9bMlzuvo5CWoPHk85pYt8Ve5ZXvdBtjlVmQM0UKXyFHegAh
pbN6zhzZp6tBTezV2t8RMGZDq9X2wXzAHf39H0mCscMpR+PiM1wjsJa9cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOs0kfgMq1i+odvBNtOYiGIfNrBMMB8GA1UdIwQY
MBaAFLA8MCwvUid+PQq2hC9oql+NDXeHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0R3d0xDOVNKMzQ5Q3JhRUwyaXFYNDBOZDRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hMmVjOWMtOWQ3Ni00ZTk0LTllM2Et
NmY3MDI0YzNhYWQ3LzEvc0R3d0xDOVNKMzQ5Q3JhRUwyaXFYNDBOZDRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9hMmVjOWMtOWQ3Ni00ZTk0LTllM2EtNmY3MDI0YzNhYWQ3
LzEvc0R3d0xDOVNKMzQ5Q3JhRUwyaXFYNDBOZDRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHcSXULQf
mhSca7+G6X6262AuwBtGoS3f5sUlnoRVWlF2ZBlxLQvwIonW601ourLS9skNZkpG
6AtnRiwPFK0h5MmoNgrTnmUTsChdFDdsXpHEp8LFVIuqHyXW4phw1HnLUf5taZ3Q
HmYKX2ZTwF/4dCvhu/+JUOnmqeyp5KFUdlI3IQzAY+Wh5EPMq9WpodjPX+qyfDth
4LfOieoKlQOn6eyshCN/QSE/cocOXPMzc/Mpp2XGmdQL5Cg5T4OCWPBWRgrx9GYb
vld98mJ4cDz4Izx40tiJ5gYVwEbxQ97OUitUtnDApoow9cnT2RettQJVfesrKl1P
wsKVs0tVdttetA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:43 2025 by rpki-client