Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
File: sx9k3lYY91wZ31E5U_ZGmHngh3M.mft (raw, json)
Hash identifier: 0d9kG87FlT8kKnMAOxyFQ0qOQc5o9dlOCcmVFXW0EoU=
Subject key identifier: 1A:82:E0:DB:E9:BC:42:8E:27:AC:2B:72:9B:91:ED:08:0F:47:3C:AA
Authority key identifier: B3:1F:64:DE:56:18:F7:5C:19:DF:51:39:53:F6:46:98:79:E0:87:73
Certificate issuer: /CN=b31f64de5618f75c19df513953f6469879e08773
Certificate serial: 01987D8B1A8B7F759BFE2791B9220CD4AC23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
Manifest number: 0407
Signing time: Wed 06 Aug 2025 04:02:04 +0000
Manifest this update: Wed 06 Aug 2025 04:02:04 +0000
Manifest next update: Thu 07 Aug 2025 04:02:04 +0000
Files and hashes: 1: UakAn5yyBqPOSEIfTXfDNciKFEs.roa (hash: btkptULyCnT6MWQIHbySDipzPG0rdTy55cYQICbq99M=)
2: sx9k3lYY91wZ31E5U_ZGmHngh3M.crl (hash: 2agoqCDbtOT5j3/TzS8d2yKpBCG4x1ZDhDFx69FFj18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:1a:8b:7f:75:9b:fe:27:91:b9:22:0c:d4:ac:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31f64de5618f75c19df513953f6469879e08773
Validity
Not Before: Aug 6 04:02:04 2025 GMT
Not After : Aug 7 04:02:04 2025 GMT
Subject: CN=1a82e0dbe9bc428e27ac2b729b91ed080f473caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:58:90:6d:88:5f:52:9f:47:47:6c:b4:c4:94:
6f:46:0e:db:9c:5e:3e:7d:92:3f:da:9f:00:4f:fc:
f3:75:66:04:2d:03:38:b9:64:0a:b8:cb:b0:f7:6c:
70:52:da:6b:27:1c:5a:74:0d:3c:ef:b9:0e:1d:46:
e8:c2:31:f5:d0:2b:b1:9d:04:77:0a:db:0b:cb:92:
82:87:ba:c9:43:bc:41:ba:9d:87:1e:39:b8:ce:15:
99:81:fb:5f:de:e2:e9:b2:cf:81:45:bc:ac:54:d0:
02:82:04:52:1d:0f:49:f8:e8:26:15:85:9f:d0:1d:
5c:81:ea:4f:f7:c6:be:7a:3b:97:73:46:91:e4:66:
07:bf:ac:e7:91:2c:a0:9b:11:de:26:ab:a9:97:a4:
9d:ae:2d:d6:a7:71:ac:c1:fc:ea:ca:a3:ef:96:9e:
3d:9d:b8:c3:ab:b1:bc:05:af:dc:0a:58:65:68:8c:
02:7f:a9:aa:2a:21:72:51:49:41:e9:4f:c6:c2:48:
02:be:99:f2:31:a6:42:33:8d:3e:ac:09:61:49:15:
6d:c4:7c:ea:ac:e1:34:ee:02:d6:c4:aa:65:c9:e7:
21:2a:90:0e:39:cb:a2:4f:64:b1:fa:0e:11:c7:10:
34:89:61:2a:60:d3:6d:bc:8c:90:a0:d5:56:63:fc:
b4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:82:E0:DB:E9:BC:42:8E:27:AC:2B:72:9B:91:ED:08:0F:47:3C:AA
X509v3 Authority Key Identifier:
keyid:B3:1F:64:DE:56:18:F7:5C:19:DF:51:39:53:F6:46:98:79:E0:87:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:72:66:ba:17:35:3a:4b:48:4c:7c:2f:39:c4:4c:5d:38:e3:
70:5d:aa:4f:e8:39:80:d9:be:d1:08:fc:3e:0f:dc:0b:c4:a8:
e6:46:91:25:55:c1:d3:39:c7:8c:83:40:01:9c:6c:ce:13:f1:
e0:c2:56:a6:2a:7d:73:37:7c:c2:b2:31:20:23:18:cb:fd:a6:
56:d5:95:f3:08:de:7e:e2:f8:44:54:ee:ea:9d:3d:3d:3e:2a:
77:82:8b:dd:89:25:b6:d3:24:2f:ce:7d:19:82:ea:cd:eb:8d:
91:d5:93:c4:fe:e9:e3:39:9d:01:2e:5a:c1:ba:5a:84:86:ca:
ef:7e:96:07:0f:8b:35:8c:4d:1b:bd:e9:1e:23:44:7d:f1:b4:
77:b7:6a:92:16:ef:55:32:dc:f1:f3:09:2f:4f:00:ce:d0:4d:
a5:6f:c1:e2:cb:93:f4:07:ba:ac:b2:3a:c9:2e:1b:ca:63:94:
30:27:f6:e0:a0:73:a7:28:56:42:d0:e8:cd:4b:23:6f:fa:45:
c7:20:b8:78:87:9b:f0:2b:fa:0e:50:a0:0b:19:39:c9:a4:cc:
f6:57:0d:62:5a:f4:9d:19:8d:60:bb:e7:9e:be:c4:da:6b:68:
b5:8a:b7:98:ed:e4:fe:73:3f:17:27:40:78:e9:30:4b:0c:27:
c4:58:e3:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9ixqLf3Wb/ieRuSIM1KwjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMWY2NGRlNTYxOGY3NWMxOWRmNTEzOTUzZjY0Njk4Nzll
MDg3NzMwHhcNMjUwODA2MDQwMjA0WhcNMjUwODA3MDQwMjA0WjAzMTEwLwYDVQQD
EygxYTgyZTBkYmU5YmM0MjhlMjdhYzJiNzI5YjkxZWQwODBmNDczY2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1iQbYhfUp9HR2y0xJRvRg7bnF4+
fZI/2p8AT/zzdWYELQM4uWQKuMuw92xwUtprJxxadA0877kOHUbowjH10CuxnQR3
CtsLy5KCh7rJQ7xBup2HHjm4zhWZgftf3uLpss+BRbysVNACggRSHQ9J+OgmFYWf
0B1cgepP98a+ejuXc0aR5GYHv6znkSygmxHeJqupl6Sdri3Wp3GswfzqyqPvlp49
nbjDq7G8Ba/cClhlaIwCf6mqKiFyUUlB6U/GwkgCvpnyMaZCM40+rAlhSRVtxHzq
rOE07gLWxKplyechKpAOOcuiT2Sx+g4RxxA0iWEqYNNtvIyQoNVWY/y0mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqC4NvpvEKOJ6wrcpuR7QgPRzyqMB8GA1UdIwQY
MBaAFLMfZN5WGPdcGd9ROVP2Rph54IdzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3g5azNsWVk5MXdaMzFFNVVfWkdtSG5naDNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zZmEwMDctZjM0NC00NjdlLWI3MTIt
MWNjZTViNThmOGUzLzEvc3g5azNsWVk5MXdaMzFFNVVfWkdtSG5naDNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zZmEwMDctZjM0NC00NjdlLWI3MTItMWNjZTViNThmOGUz
LzEvc3g5azNsWVk5MXdaMzFFNVVfWkdtSG5naDNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT3Jmuhc1
OktITHwvOcRMXTjjcF2qT+g5gNm+0Qj8Pg/cC8So5kaRJVXB0znHjINAAZxszhPx
4MJWpip9czd8wrIxICMYy/2mVtWV8wjefuL4RFTu6p09PT4qd4KL3YklttMkL859
GYLqzeuNkdWTxP7p4zmdAS5awbpahIbK736WBw+LNYxNG73pHiNEffG0d7dqkhbv
VTLc8fMJL08AztBNpW/B4suT9Ae6rLI6yS4bymOUMCf24KBzpyhWQtDozUsjb/pF
xyC4eIeb8Cv6DlCgCxk5yaTM9lcNYlr0nRmNYLvnnr7E2mtotYq3mO3k/nM/FydA
eOkwSwwnxFjjLg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:08 2025 by rpki-client