Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft
File: S5nNYSQguFk0kdhobOTEr4W5CtU.mft (raw, json)
Hash identifier: B1ChiGM11tCNlybqljDb4OjtTLH72lfOGq7zLKaw2Tc=
Subject key identifier: 92:CD:CC:E5:EA:14:15:B4:46:45:A2:30:46:7E:ED:F7:0A:93:D9:28
Authority key identifier: 4B:99:CD:61:24:20:B8:59:34:91:D8:68:6C:E4:C4:AF:85:B9:0A:D5
Certificate issuer: /CN=4b99cd612420b8593491d8686ce4c4af85b90ad5
Certificate serial: 019892233D718A69ACC4E13436EE10BB5FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5nNYSQguFk0kdhobOTEr4W5CtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft
Manifest number: 57
Signing time: Sun 10 Aug 2025 04:00:39 +0000
Manifest this update: Sun 10 Aug 2025 04:00:39 +0000
Manifest next update: Mon 11 Aug 2025 04:00:39 +0000
Files and hashes: 1: 4qD1Oc9Rkwf3nkPKdA3PqgFhBVg.roa (hash: FAYdaSueDZBgvCYn8/TIySq6P0JIfXLy0IlKcRVzUNU=)
2: S5nNYSQguFk0kdhobOTEr4W5CtU.crl (hash: +z2rmRELlK7jKLjmF+RieMmt2J8upqdo/sc4dXhzaRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5nNYSQguFk0kdhobOTEr4W5CtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:23:3d:71:8a:69:ac:c4:e1:34:36:ee:10:bb:5f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b99cd612420b8593491d8686ce4c4af85b90ad5
Validity
Not Before: Aug 10 04:00:39 2025 GMT
Not After : Aug 11 04:00:39 2025 GMT
Subject: CN=92cdcce5ea1415b44645a230467eedf70a93d928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b7:10:ee:b0:42:05:9f:75:d0:52:fa:b8:c8:
9b:18:04:3c:3f:09:d2:6e:93:c3:61:4f:6f:ac:cf:
4b:e9:20:93:6e:e1:6a:2e:89:c4:d6:1d:6b:e6:20:
e5:62:07:6c:fa:3f:39:4a:95:46:12:02:c9:91:eb:
bd:db:2e:a9:2e:d4:3e:d7:76:2a:0c:2c:36:6f:13:
cb:14:d4:bb:51:bd:bd:b1:a0:2c:91:07:f7:90:35:
70:78:95:9a:1c:76:74:83:3b:1b:e2:9e:ac:5a:60:
43:a5:75:c5:fb:bb:89:5f:88:e7:2a:51:05:1a:30:
e5:a5:7c:42:89:ef:a4:97:4c:2c:1d:6c:2a:a1:5a:
72:83:ba:d9:61:22:f4:2a:17:0b:f3:99:a1:14:48:
1b:ad:ae:f1:d3:99:44:de:0b:33:a9:a6:9b:b3:e2:
a7:6a:ce:d9:5b:ad:44:a9:81:01:3f:99:95:fc:fc:
ad:80:19:8e:20:ee:74:d7:8b:da:af:43:67:7c:c4:
36:fb:b4:62:b6:bd:99:07:92:69:f3:37:64:92:77:
6f:09:e3:5d:29:cf:e4:4c:08:74:9e:97:b6:83:f2:
35:71:3e:1e:1d:19:95:29:0f:60:54:7b:ec:0e:65:
81:73:07:f5:51:5d:a1:b1:bb:b3:c1:87:62:fc:12:
2e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CD:CC:E5:EA:14:15:B4:46:45:A2:30:46:7E:ED:F7:0A:93:D9:28
X509v3 Authority Key Identifier:
keyid:4B:99:CD:61:24:20:B8:59:34:91:D8:68:6C:E4:C4:AF:85:B9:0A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5nNYSQguFk0kdhobOTEr4W5CtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:41:ca:55:b7:64:66:80:0c:89:e8:78:02:62:81:fe:ff:2f:
32:e1:fe:bd:7a:98:c4:c9:cd:f2:9a:8b:61:1d:e1:82:f9:bd:
14:75:83:28:4e:3d:5a:59:b5:89:75:88:b3:8d:df:53:b1:99:
72:06:f1:d6:d9:15:22:d9:13:79:a2:60:39:5c:cc:91:f7:61:
2f:71:df:42:d1:4a:64:d7:7f:1f:b1:21:98:28:fb:a0:04:37:
9c:65:68:e1:c9:a6:a2:16:0c:83:ca:8c:13:fa:c9:f0:06:e9:
d9:73:ee:31:78:1d:3b:00:eb:37:c6:b7:4b:be:a5:80:01:85:
ab:84:de:dc:6c:b6:16:71:32:e4:c8:53:1b:9d:f5:8f:f7:18:
d3:dd:77:5c:e4:3f:18:b1:c1:ff:38:fd:93:6a:4c:e9:3e:0b:
68:bf:b7:0e:66:00:82:da:7f:08:99:8a:a3:e1:0b:f0:87:19:
45:14:23:08:64:ba:91:b2:d8:34:e8:9d:19:97:26:43:9c:f1:
ee:61:e1:f6:9e:04:88:3c:67:5c:47:1c:46:ff:a4:b0:24:42:
47:bf:6c:25:32:a1:92:b2:0f:06:2d:8d:c0:70:bf:84:b2:1f:
f3:ee:6a:b1:df:5f:08:cf:3c:f6:d2:da:d9:d9:e7:b6:d2:37:
f0:b9:ff:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiSIz1ximmsxOE0Nu4Qu1+sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOTljZDYxMjQyMGI4NTkzNDkxZDg2ODZjZTRjNGFmODVi
OTBhZDUwHhcNMjUwODEwMDQwMDM5WhcNMjUwODExMDQwMDM5WjAzMTEwLwYDVQQD
Eyg5MmNkY2NlNWVhMTQxNWI0NDY0NWEyMzA0NjdlZWRmNzBhOTNkOTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7cQ7rBCBZ910FL6uMibGAQ8PwnS
bpPDYU9vrM9L6SCTbuFqLonE1h1r5iDlYgds+j85SpVGEgLJkeu92y6pLtQ+13Yq
DCw2bxPLFNS7Ub29saAskQf3kDVweJWaHHZ0gzsb4p6sWmBDpXXF+7uJX4jnKlEF
GjDlpXxCie+kl0wsHWwqoVpyg7rZYSL0KhcL85mhFEgbra7x05lE3gszqaabs+Kn
as7ZW61EqYEBP5mV/PytgBmOIO5014var0NnfMQ2+7Ritr2ZB5Jp8zdkkndvCeNd
Kc/kTAh0npe2g/I1cT4eHRmVKQ9gVHvsDmWBcwf1UV2hsbuzwYdi/BIunQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLNzOXqFBW0RkWiMEZ+7fcKk9koMB8GA1UdIwQY
MBaAFEuZzWEkILhZNJHYaGzkxK+FuQrVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzVuTllTUWd1Rmswa2Rob2JPVEVyNFc1Q3RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83YzFiMTctYjdiNS00NDAxLWIwYTct
OTc0NzIwODg5ZmZhLzEvUzVuTllTUWd1Rmswa2Rob2JPVEVyNFc1Q3RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS83YzFiMTctYjdiNS00NDAxLWIwYTctOTc0NzIwODg5ZmZh
LzEvUzVuTllTUWd1Rmswa2Rob2JPVEVyNFc1Q3RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlEHKVbdk
ZoAMieh4AmKB/v8vMuH+vXqYxMnN8pqLYR3hgvm9FHWDKE49Wlm1iXWIs43fU7GZ
cgbx1tkVItkTeaJgOVzMkfdhL3HfQtFKZNd/H7EhmCj7oAQ3nGVo4cmmohYMg8qM
E/rJ8Abp2XPuMXgdOwDrN8a3S76lgAGFq4Te3Gy2FnEy5MhTG531j/cY0913XOQ/
GLHB/zj9k2pM6T4LaL+3DmYAgtp/CJmKo+EL8IcZRRQjCGS6kbLYNOidGZcmQ5zx
7mHh9p4EiDxnXEccRv+ksCRCR79sJTKhkrIPBi2NwHC/hLIf8+5qsd9fCM889tLa
2dnnttI38Ln/uw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:45:33 2025 by rpki-client