Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
File: sL_SyF5redRg5mDPlmTe5V3MyMw.mft (raw, json)
Hash identifier: jqRgoG7qnJoYQmBObu2lkMBIPTU7uV5Ufpn3IJIOrYY=
Subject key identifier: 37:8C:A2:02:64:D1:7D:F3:C5:99:1C:BC:46:7A:90:41:08:81:57:76
Authority key identifier: B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC
Certificate issuer: /CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
Certificate serial: 01988B458D5BD093DE38F2C54559D6BBB554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
Manifest number: 0EFA
Signing time: Fri 08 Aug 2025 20:00:47 +0000
Manifest this update: Fri 08 Aug 2025 20:00:47 +0000
Manifest next update: Sat 09 Aug 2025 20:00:47 +0000
Files and hashes: 1: eFmnxR7CyMxvye5-XXcMbfaAVOw.roa (hash: pZJwNCYo3S0mBXNLEIKEUXn/lY7t5TEifbuRPldd2yI=)
2: oJDEzXr7gr-7eZ1rexTjd4c8Ul8.roa (hash: xZTw5KYNf4Du9zIJjL5q6os9uQVggXiruo8qaJQJCvQ=)
3: pGZsGJVmFoYhAv5VAkXf67JcN-w.roa (hash: /j9DfbiG7O3qG1GtbIDXzJ4rJWqS+jSuNHHJIbaeKpc=)
4: sL_SyF5redRg5mDPlmTe5V3MyMw.crl (hash: R3Ek2Npx8SXonnuFZPWEewknPYft4rtRbKHJ9Rb1psU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:45:8d:5b:d0:93:de:38:f2:c5:45:59:d6:bb:b5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
Validity
Not Before: Aug 8 20:00:47 2025 GMT
Not After : Aug 9 20:00:47 2025 GMT
Subject: CN=378ca20264d17df3c5991cbc467a904108815776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4c:6b:39:04:d0:7c:59:3f:02:bd:b7:d3:df:
98:e3:f6:3f:a7:6a:37:8b:7a:8c:ee:34:4a:00:d7:
f4:32:95:f5:71:64:0f:7e:27:0a:43:b7:3e:4a:12:
07:25:ca:c8:db:4f:48:aa:2a:73:cc:b7:9e:a2:43:
12:c2:09:ec:6a:66:c0:e7:98:dc:8c:3e:51:8d:1b:
ff:f9:ee:64:ea:f9:7e:3a:a8:d2:a2:60:1a:b1:0e:
8d:db:b1:90:f0:d6:cf:b0:9d:57:5d:e2:07:7f:3a:
37:ab:10:ba:0f:22:fe:09:4c:d6:e6:a5:60:70:6b:
39:b8:3c:6d:a5:ab:a3:8d:23:45:34:2e:81:2d:11:
3c:81:94:46:28:08:81:d7:6d:d6:3c:6d:f8:ae:16:
1b:70:54:4a:61:91:fd:20:a7:08:01:7f:cb:91:d6:
ff:67:22:5e:36:4a:5f:b1:be:95:2c:8c:f2:90:59:
d7:30:a8:18:0a:96:53:37:b4:b7:07:56:b4:fc:dd:
a4:f3:9f:7c:76:62:1e:ba:70:86:29:1e:89:4c:5f:
1b:4c:90:2f:74:c6:9e:6a:08:e2:a7:0e:fa:8b:be:
45:48:05:d3:14:95:8e:eb:71:1d:bf:a0:76:65:b1:
7d:0e:44:c4:25:ed:08:a8:5e:c6:f4:35:d5:e4:a9:
c1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8C:A2:02:64:D1:7D:F3:C5:99:1C:BC:46:7A:90:41:08:81:57:76
X509v3 Authority Key Identifier:
keyid:B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d1:f4:75:9a:c1:c8:9b:c4:4c:2f:f9:07:cd:92:21:db:f7:
20:1d:4d:5f:aa:6e:f1:3a:3a:71:93:63:eb:d9:3e:d9:69:19:
63:58:2d:1a:d9:b7:0b:a9:07:ce:cc:28:20:bc:73:db:7a:63:
86:20:c2:c5:de:85:01:34:88:1f:27:94:e1:c4:74:64:92:34:
61:c1:82:f7:09:c5:99:28:21:90:0e:8c:a4:f9:94:9f:bc:8d:
e5:1d:cd:63:c9:b5:b2:31:23:6b:3e:1b:99:62:02:35:b8:ab:
87:09:69:b0:1f:44:18:c8:dd:9d:c2:4c:7c:32:dd:dd:c2:d6:
e0:ec:f2:44:4e:66:e1:fa:cc:41:1b:cf:ef:9d:f2:2a:9c:f3:
cc:e9:ae:4b:d2:ed:f9:bf:d8:3d:ae:a5:40:11:52:02:d9:6b:
3f:61:a9:81:5c:50:91:d5:c6:00:de:2d:6c:5d:b8:80:91:74:
de:8c:2d:0c:09:53:c6:75:ea:26:09:45:42:4d:44:ee:8b:b9:
67:ec:17:c5:8e:94:b4:61:6d:ea:44:fe:17:eb:5f:e2:f5:f3:
47:94:c4:ac:80:9e:49:fc:2a:49:ef:be:df:77:65:7a:f7:6f:
72:12:b7:30:22:d1:36:eb:4a:2a:8e:e4:e7:93:d3:85:ae:f8:
00:eb:66:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLRY1b0JPeOPLFRVnWu7VUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYmZkMmM4NWU2Yjc5ZDQ2MGU2NjBjZjk2NjRkZWU1NWRj
Y2M4Y2MwHhcNMjUwODA4MjAwMDQ3WhcNMjUwODA5MjAwMDQ3WjAzMTEwLwYDVQQD
EygzNzhjYTIwMjY0ZDE3ZGYzYzU5OTFjYmM0NjdhOTA0MTA4ODE1Nzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsExrOQTQfFk/Ar2309+Y4/Y/p2o3
i3qM7jRKANf0MpX1cWQPficKQ7c+ShIHJcrI209IqipzzLeeokMSwgnsambA55jc
jD5RjRv/+e5k6vl+OqjSomAasQ6N27GQ8NbPsJ1XXeIHfzo3qxC6DyL+CUzW5qVg
cGs5uDxtpaujjSNFNC6BLRE8gZRGKAiB123WPG34rhYbcFRKYZH9IKcIAX/Lkdb/
ZyJeNkpfsb6VLIzykFnXMKgYCpZTN7S3B1a0/N2k8598dmIeunCGKR6JTF8bTJAv
dMaeagjipw76i75FSAXTFJWO63Edv6B2ZbF9DkTEJe0IqF7G9DXV5KnBzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDeMogJk0X3zxZkcvEZ6kEEIgVd2MB8GA1UdIwQY
MBaAFLC/0shea3nUYOZgz5Zk3uVdzMjMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0xfU3lGNXJlZFJnNW1EUGxtVGU1VjNNeU13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yMDNhNTMtMDU4YS00ZDVkLWE3NjEt
ZDM3MTg1NTc1NmMzLzEvc0xfU3lGNXJlZFJnNW1EUGxtVGU1VjNNeU13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8yMDNhNTMtMDU4YS00ZDVkLWE3NjEtZDM3MTg1NTc1NmMz
LzEvc0xfU3lGNXJlZFJnNW1EUGxtVGU1VjNNeU13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPdH0dZrB
yJvETC/5B82SIdv3IB1NX6pu8To6cZNj69k+2WkZY1gtGtm3C6kHzswoILxz23pj
hiDCxd6FATSIHyeU4cR0ZJI0YcGC9wnFmSghkA6MpPmUn7yN5R3NY8m1sjEjaz4b
mWICNbirhwlpsB9EGMjdncJMfDLd3cLW4OzyRE5m4frMQRvP753yKpzzzOmuS9Lt
+b/YPa6lQBFSAtlrP2GpgVxQkdXGAN4tbF24gJF03owtDAlTxnXqJglFQk1E7ou5
Z+wXxY6UtGFt6kT+F+tf4vXzR5TErICeSfwqSe++33dlevdvchK3MCLRNutKKo7k
55PTha74AOtmAg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:39:25 2025 by rpki-client