Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft
File: SBcWctU_34slN3ZPU342Wlknva8.mft (raw, json)
Hash identifier: zf7p9bMOWM8Y4mhjZE6fsVPUKlusV8TeCj0aWCBQyo0=
Subject key identifier: 82:43:E1:72:EB:C5:2B:F1:72:F4:A2:B2:F8:D7:00:C3:99:6F:AC:80
Authority key identifier: 48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF
Certificate issuer: /CN=48171672d53fdf8b2537764f537e365a5927bdaf
Certificate serial: 01987CAE45439AFB52E8AEAA2F4765E297DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft
Manifest number: 14E7
Signing time: Wed 06 Aug 2025 00:00:52 +0000
Manifest this update: Wed 06 Aug 2025 00:00:52 +0000
Manifest next update: Thu 07 Aug 2025 00:00:52 +0000
Files and hashes: 1: SBcWctU_34slN3ZPU342Wlknva8.crl (hash: QngGicYT7cm7GJEOQrSOIhQCiDIfRIj7dizTkdONXDU=)
2: s2Lbl3UpxlmBcXTI8YXpsTqbGNc.roa (hash: WTVc9DfWoK4a3bzz5sw4kY8+A2sS9+yOsYCNmAmV+gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 00:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:45:43:9a:fb:52:e8:ae:aa:2f:47:65:e2:97:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48171672d53fdf8b2537764f537e365a5927bdaf
Validity
Not Before: Aug 6 00:00:52 2025 GMT
Not After : Aug 7 00:00:52 2025 GMT
Subject: CN=8243e172ebc52bf172f4a2b2f8d700c3996fac80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b8:ba:88:25:2e:1a:eb:13:47:83:cc:06:65:
a0:3c:35:3b:9e:2f:d2:46:8b:15:d4:fd:42:8a:50:
c1:4d:5e:4a:75:a3:4b:80:95:81:d1:fb:58:82:d5:
11:24:73:87:a2:33:7c:30:69:61:7a:1c:e5:40:0e:
c9:f8:dc:a7:83:f2:24:3a:24:a7:4e:ff:22:f4:78:
6f:ad:2c:ba:ad:d8:20:64:fa:97:94:e5:94:f4:f0:
2c:81:42:11:67:df:c3:12:3a:59:23:f5:6a:30:17:
fc:9f:fd:7c:22:dd:05:c1:70:63:cc:c8:05:b3:6c:
1a:5a:9c:70:f1:50:c2:b9:74:4e:d6:79:f0:3a:bf:
e1:12:f9:cd:c5:2d:61:5b:3f:cb:57:63:c9:0b:07:
c6:66:21:b3:18:d7:a4:b4:c4:0e:e8:bd:71:50:16:
a7:7f:2b:49:e8:bc:8b:68:77:d1:a1:c9:56:18:cc:
3b:b8:ff:b6:76:f0:9f:da:72:b9:a7:d1:3b:53:86:
10:c1:de:16:d8:e8:a9:5f:12:4b:9a:81:64:30:ee:
b6:fe:10:74:44:03:91:fa:2b:3c:1c:81:c7:8c:22:
17:84:92:36:99:f6:b1:97:08:30:2c:75:85:b1:67:
71:b3:d6:3c:b5:a6:c2:0e:c1:39:39:08:4f:fa:7a:
7d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:43:E1:72:EB:C5:2B:F1:72:F4:A2:B2:F8:D7:00:C3:99:6F:AC:80
X509v3 Authority Key Identifier:
keyid:48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:9a:52:62:df:bd:51:d2:e3:2c:75:72:d5:4b:cc:72:20:ef:
e9:82:54:b2:1e:0c:74:87:ba:d3:60:61:68:09:62:8b:33:93:
b0:f3:45:b8:48:c0:18:b5:8c:13:8b:c9:bc:ae:d2:06:62:3a:
5c:c0:3e:a8:9b:4d:95:19:b5:a1:2c:35:16:32:79:f0:47:08:
81:ed:3c:4a:47:1c:83:21:a1:86:8b:01:81:98:ae:7a:99:55:
c0:79:1e:32:22:de:09:9a:90:e7:83:48:a5:2d:2e:09:14:47:
18:eb:2e:79:a5:99:70:32:e6:7b:b6:7c:29:a4:ea:4b:38:39:
21:83:50:41:49:3b:8c:4f:75:0f:5c:5d:00:42:35:50:53:d8:
39:c7:71:f1:be:3a:bc:95:74:88:3f:f4:32:12:cd:ec:b2:bb:
14:28:16:3f:68:83:38:48:16:30:0a:8c:04:85:e3:70:42:60:
5b:16:9f:49:3d:21:04:97:09:25:12:69:de:09:f2:70:30:07:
8b:e1:dd:c6:29:dc:07:da:01:5b:24:63:7a:98:f9:c9:0f:42:
95:de:15:9f:01:09:ac:ad:34:28:aa:f5:fe:bf:99:fc:b3:8c:
b4:cf:1d:09:fc:b7:5e:a1:c6:40:63:91:73:97:84:f5:d9:c2:
4e:38:b1:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8rkVDmvtS6K6qL0dl4pfaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MTcxNjcyZDUzZmRmOGIyNTM3NzY0ZjUzN2UzNjVhNTky
N2JkYWYwHhcNMjUwODA2MDAwMDUyWhcNMjUwODA3MDAwMDUyWjAzMTEwLwYDVQQD
Eyg4MjQzZTE3MmViYzUyYmYxNzJmNGEyYjJmOGQ3MDBjMzk5NmZhYzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ri6iCUuGusTR4PMBmWgPDU7ni/S
RosV1P1CilDBTV5KdaNLgJWB0ftYgtURJHOHojN8MGlhehzlQA7J+Nyng/IkOiSn
Tv8i9HhvrSy6rdggZPqXlOWU9PAsgUIRZ9/DEjpZI/VqMBf8n/18It0FwXBjzMgF
s2waWpxw8VDCuXRO1nnwOr/hEvnNxS1hWz/LV2PJCwfGZiGzGNektMQO6L1xUBan
fytJ6LyLaHfRoclWGMw7uP+2dvCf2nK5p9E7U4YQwd4W2OipXxJLmoFkMO62/hB0
RAOR+is8HIHHjCIXhJI2mfaxlwgwLHWFsWdxs9Y8tabCDsE5OQhP+np9XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJD4XLrxSvxcvSisvjXAMOZb6yAMB8GA1UdIwQY
MBaAFEgXFnLVP9+LJTd2T1N+NlpZJ72vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0JjV2N0VV8zNHNsTjNaUFUzNDJXbGtudmE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81NWUxMzgtNTZkYS00NDkyLWExZjIt
ZGIwNGYyMTM5MGEwLzEvU0JjV2N0VV8zNHNsTjNaUFUzNDJXbGtudmE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS81NWUxMzgtNTZkYS00NDkyLWExZjItZGIwNGYyMTM5MGEw
LzEvU0JjV2N0VV8zNHNsTjNaUFUzNDJXbGtudmE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM5pSYt+9
UdLjLHVy1UvMciDv6YJUsh4MdIe602BhaAliizOTsPNFuEjAGLWME4vJvK7SBmI6
XMA+qJtNlRm1oSw1FjJ58EcIge08SkccgyGhhosBgZiueplVwHkeMiLeCZqQ54NI
pS0uCRRHGOsueaWZcDLme7Z8KaTqSzg5IYNQQUk7jE91D1xdAEI1UFPYOcdx8b46
vJV0iD/0MhLN7LK7FCgWP2iDOEgWMAqMBIXjcEJgWxafST0hBJcJJRJp3gnycDAH
i+HdxincB9oBWyRjepj5yQ9Cld4VnwEJrK00KKr1/r+Z/LOMtM8dCfy3XqHGQGOR
c5eE9dnCTjixsQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:05:06 2025 by rpki-client