Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
File: sDQCUfGCY0f06WRfaCTTuT9H5d4.mft (raw, json)
Hash identifier: KvbsNhBA00P09kSnW9ZmW0rDD5IXeEhOgyKNsB+MwlM=
Subject key identifier: C7:00:A3:4E:A4:C7:5F:10:03:53:E8:0B:6D:5F:C7:A3:9F:19:AA:C6
Authority key identifier: B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE
Certificate issuer: /CN=b0340251f1826347f4e9645f6824d3b93f47e5de
Certificate serial: 01987298C4C5830F0E6C207CB09B03B58F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
Manifest number: 0C1A
Signing time: Mon 04 Aug 2025 01:01:10 +0000
Manifest this update: Mon 04 Aug 2025 01:01:10 +0000
Manifest next update: Tue 05 Aug 2025 01:01:10 +0000
Files and hashes: 1: qrqtK-ZhNnqsmvUdjEvFxU-EYdM.roa (hash: w1CKR1mGTdMnfdWKUqyIUV2nyHBupF+j5wpw/8wUJ44=)
2: sDQCUfGCY0f06WRfaCTTuT9H5d4.crl (hash: EHZpBaiFQw0kN8OtCOtvPxt918BeH06tKLxTsTBhDc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:c4:c5:83:0f:0e:6c:20:7c:b0:9b:03:b5:8f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0340251f1826347f4e9645f6824d3b93f47e5de
Validity
Not Before: Aug 4 01:01:10 2025 GMT
Not After : Aug 5 01:01:10 2025 GMT
Subject: CN=c700a34ea4c75f100353e80b6d5fc7a39f19aac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8e:a3:37:5d:35:d7:d0:00:f7:65:0a:d2:7e:
91:eb:01:82:b2:2f:4c:55:37:e1:33:b3:0e:04:76:
e1:c5:a9:94:3e:47:72:51:28:21:65:11:db:98:c1:
b4:00:a7:27:b1:a0:9e:81:43:e7:36:34:f2:5e:57:
e2:19:0d:be:a0:0f:f4:e6:88:9c:6e:64:77:24:95:
6e:69:9c:20:d2:3b:20:37:0f:b7:ec:eb:6d:26:e2:
f7:a8:16:57:ab:f1:df:02:53:a7:e9:7c:70:08:28:
90:77:70:8a:fd:dd:fe:f5:4d:26:ae:0c:f9:d1:83:
74:c5:b1:5e:ca:7f:d5:de:5d:12:5b:9a:70:b1:5b:
20:f6:7d:60:23:ca:0f:31:84:b9:60:d9:c4:29:c5:
c5:02:92:67:fe:89:55:9c:77:67:0d:a6:19:ce:42:
0b:64:9b:a2:6e:38:e4:86:c6:96:43:0d:36:68:17:
7c:eb:a3:ce:e1:da:6a:c7:07:07:72:5a:9f:05:c9:
8e:87:4c:31:27:a4:29:4c:29:25:7c:b2:d2:b4:67:
62:99:38:50:e6:08:cc:b3:6f:a2:8a:c2:17:cf:a0:
35:38:98:d7:8e:05:20:ef:7b:46:b0:87:25:d6:a9:
f2:81:0d:29:9b:a9:48:ce:88:94:fa:91:df:c4:77:
9f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:00:A3:4E:A4:C7:5F:10:03:53:E8:0B:6D:5F:C7:A3:9F:19:AA:C6
X509v3 Authority Key Identifier:
keyid:B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b8:cd:96:b7:df:63:d3:24:54:f5:05:06:f8:10:f0:69:8e:
1e:8a:6d:10:8b:41:d0:bb:6e:7d:dd:b7:39:df:1e:dd:f8:ee:
d6:75:b2:43:2a:74:66:c7:b6:1b:23:dd:5e:7f:10:f0:ca:a6:
0d:7b:15:a8:90:d1:30:72:6c:32:96:e5:fc:2a:73:5e:11:e5:
b3:1d:00:1e:c8:3c:35:da:fa:0b:e3:89:6b:26:92:1f:cb:da:
1d:30:9a:91:3a:06:3e:a8:ff:a6:fa:9a:8d:1e:f1:5d:87:ef:
b3:e1:a0:26:02:11:78:49:e4:26:8a:6c:b5:86:2b:1c:f0:3e:
71:2f:5b:e8:5a:81:50:78:03:ed:f7:b2:44:95:26:5d:b4:99:
3a:34:cd:ff:e3:4d:59:8c:05:50:14:c2:c7:f6:14:0e:94:34:
65:39:35:02:db:d0:7c:b9:e0:01:32:c4:c8:e0:f6:70:b0:11:
bb:49:6e:4b:61:5b:58:4b:cc:0b:1a:67:4b:cc:e5:33:1a:23:
b2:76:17:84:6c:0b:af:70:a6:09:3e:4a:95:a1:ab:7e:b7:da:
ea:f1:81:ba:07:00:0d:d2:cd:29:b4:bd:3b:59:4e:9a:1e:c4:
7c:45:38:86:f7:d8:89:4a:c8:f3:79:5b:40:9f:81:72:d4:aa:
5b:56:04:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymMTFgw8ObCB8sJsDtY96MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMzQwMjUxZjE4MjYzNDdmNGU5NjQ1ZjY4MjRkM2I5M2Y0
N2U1ZGUwHhcNMjUwODA0MDEwMTEwWhcNMjUwODA1MDEwMTEwWjAzMTEwLwYDVQQD
EyhjNzAwYTM0ZWE0Yzc1ZjEwMDM1M2U4MGI2ZDVmYzdhMzlmMTlhYWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY6jN10119AA92UK0n6R6wGCsi9M
VTfhM7MOBHbhxamUPkdyUSghZRHbmMG0AKcnsaCegUPnNjTyXlfiGQ2+oA/05oic
bmR3JJVuaZwg0jsgNw+37OttJuL3qBZXq/HfAlOn6XxwCCiQd3CK/d3+9U0mrgz5
0YN0xbFeyn/V3l0SW5pwsVsg9n1gI8oPMYS5YNnEKcXFApJn/olVnHdnDaYZzkIL
ZJuibjjkhsaWQw02aBd866PO4dpqxwcHclqfBcmOh0wxJ6QpTCklfLLStGdimThQ
5gjMs2+iisIXz6A1OJjXjgUg73tGsIcl1qnygQ0pm6lIzoiU+pHfxHefHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcAo06kx18QA1PoC21fx6OfGarGMB8GA1UdIwQY
MBaAFLA0AlHxgmNH9OlkX2gk07k/R+XeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0RRQ1VmR0NZMGYwNldSZmFDVFR1VDlINWQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mNTIxMGQtMDU5MC00M2EzLTllZWQt
NmE4MzU2M2I2NTViLzEvc0RRQ1VmR0NZMGYwNldSZmFDVFR1VDlINWQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9mNTIxMGQtMDU5MC00M2EzLTllZWQtNmE4MzU2M2I2NTVi
LzEvc0RRQ1VmR0NZMGYwNldSZmFDVFR1VDlINWQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAirjNlrff
Y9MkVPUFBvgQ8GmOHoptEItB0Ltufd23Od8e3fju1nWyQyp0Zse2GyPdXn8Q8Mqm
DXsVqJDRMHJsMpbl/CpzXhHlsx0AHsg8Ndr6C+OJayaSH8vaHTCakToGPqj/pvqa
jR7xXYfvs+GgJgIReEnkJopstYYrHPA+cS9b6FqBUHgD7feyRJUmXbSZOjTN/+NN
WYwFUBTCx/YUDpQ0ZTk1AtvQfLngATLEyOD2cLARu0luS2FbWEvMCxpnS8zlMxoj
snYXhGwLr3CmCT5KlaGrfrfa6vGBugcADdLNKbS9O1lOmh7EfEU4hvfYiUrI83lb
QJ+BctSqW1YE+Q==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:23:28 2025 by rpki-client