Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
File: s2DwCXvkgcIbsdUchdRPZXQViqk.mft (raw, json)
Hash identifier: 7ROTd2zaub5g5PwYIVzb2kwSDPaLL1VtbL5L2xJt/dY=
Subject key identifier: F3:71:C6:BF:F4:F9:97:51:56:05:66:61:FB:F0:93:77:1A:C7:81:69
Authority key identifier: B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
Certificate issuer: /CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Certificate serial: 0198733DDF8BF076E4A2FEE954C2FB5ABEBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
Manifest number: 0688
Signing time: Mon 04 Aug 2025 04:01:31 +0000
Manifest this update: Mon 04 Aug 2025 04:01:31 +0000
Manifest next update: Tue 05 Aug 2025 04:01:31 +0000
Files and hashes: 1: 0FvyRdwuNrCgMP49Gm05_Jf24wo.roa (hash: VrNtxHJD5r4AAcIekiYzDFEjX0OLNvQVaPqP96ejauo=)
2: XJdcwddEgs-q78gmSagWMovn85I.roa (hash: Je76MM+YNyOi1CdfvkLH4QNZ11rGS/XGNeifQiQFCLA=)
3: eRE1hc1OAUXn9B2yIqa6q1KtEng.roa (hash: 2kkOJHVByX9Ad1TRTPwMrwhabgTLNmB9YR0YC04Cis4=)
4: s2DwCXvkgcIbsdUchdRPZXQViqk.crl (hash: IiEXqARTRN74xGH5+njrINLK312hVsDsybI4EMT4Ono=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:df:8b:f0:76:e4:a2:fe:e9:54:c2:fb:5a:be:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Validity
Not Before: Aug 4 04:01:31 2025 GMT
Not After : Aug 5 04:01:31 2025 GMT
Subject: CN=f371c6bff4f9975156056661fbf093771ac78169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4c:26:a7:95:28:bc:02:c7:e8:2b:95:c6:8f:
12:f5:49:9a:8c:48:6f:7b:b9:c6:f7:a3:34:0c:f0:
89:1d:5d:08:b7:c8:82:79:2f:91:3e:09:65:51:4a:
ce:f8:ae:f3:a9:ca:d6:bd:19:8b:24:5c:e1:d4:bd:
44:b7:84:c8:0f:6a:69:9e:bb:12:b7:31:72:45:b0:
c8:17:dc:0f:5a:a1:ee:90:26:e1:5f:c9:02:71:ae:
d4:1a:18:2b:54:b2:c2:31:35:f0:67:da:7b:7a:a2:
a6:75:7d:91:02:71:35:3e:af:c4:d2:98:f1:2d:87:
78:22:13:07:2e:e5:92:1c:0f:39:0d:18:4a:c5:d9:
4a:49:b8:d9:d6:79:d1:db:c9:d3:87:5d:d4:3c:be:
36:6c:9e:5f:16:18:6f:b4:55:55:04:90:65:38:56:
b4:c9:98:27:15:85:f4:70:47:04:70:f4:3e:8c:c3:
8a:9e:0a:fc:c0:84:db:ae:5d:21:da:4c:ea:1b:8c:
2a:b0:1f:85:3e:4a:df:26:16:a1:0b:ab:6b:85:ee:
d1:05:ed:22:9d:c5:fe:fa:d9:dc:86:ce:6d:89:0d:
2b:3a:d4:37:f3:a9:2b:b0:76:13:68:61:71:97:26:
78:7a:60:08:5c:e0:b8:3d:f4:f1:b0:dc:40:fc:6c:
38:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:71:C6:BF:F4:F9:97:51:56:05:66:61:FB:F0:93:77:1A:C7:81:69
X509v3 Authority Key Identifier:
keyid:B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:7b:5d:f8:fb:1f:9b:ff:69:b3:66:88:68:35:75:44:b5:de:
56:57:58:79:5e:0c:a3:2b:0b:a1:3f:f4:64:c3:da:a0:26:ed:
6b:32:96:f2:bb:24:20:0e:4a:94:78:28:b6:2c:a6:12:b7:f5:
ad:bc:61:f7:75:f0:e1:2c:3c:c3:c7:6e:dc:43:ff:6f:04:83:
f3:3e:1e:7e:8f:01:df:c5:5f:7c:d0:e5:4c:d7:64:6f:f3:e7:
de:c2:1f:33:1e:90:90:42:80:e2:49:7d:39:65:9c:fd:4b:aa:
ad:ad:1a:5f:39:b5:47:9a:8a:b8:b3:2f:68:5e:31:a4:ab:e3:
c7:d4:8a:e8:65:98:c7:58:03:6a:78:8a:09:d9:e1:b2:a6:88:
7b:ea:77:d5:d3:83:83:e2:5a:21:b8:19:13:eb:50:82:bf:69:
6a:33:21:9d:d9:ed:35:2c:ef:df:bc:3d:06:6c:f0:c8:2d:84:
f8:f3:28:ec:3f:db:74:78:65:bd:ca:90:f7:64:5b:1f:07:7d:
c5:76:2d:a1:07:f2:ab:e8:a2:19:61:b4:e1:59:f7:0d:f6:40:
5d:ac:68:80:3d:16:f4:ad:e6:5a:e7:54:09:6b:bb:96:3c:e7:
b8:e6:57:09:1b:e4:9e:e0:03:1d:5a:a3:a9:36:af:24:c0:c1:
9b:e0:0e:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPd+L8Hbkov7pVML7Wr69MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNjBmMDA5N2JlNDgxYzIxYmIxZDUxYzg1ZDQ0ZjY1NzQx
NThhYTkwHhcNMjUwODA0MDQwMTMxWhcNMjUwODA1MDQwMTMxWjAzMTEwLwYDVQQD
EyhmMzcxYzZiZmY0Zjk5NzUxNTYwNTY2NjFmYmYwOTM3NzFhYzc4MTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEwmp5UovALH6CuVxo8S9UmajEhv
e7nG96M0DPCJHV0It8iCeS+RPgllUUrO+K7zqcrWvRmLJFzh1L1Et4TID2ppnrsS
tzFyRbDIF9wPWqHukCbhX8kCca7UGhgrVLLCMTXwZ9p7eqKmdX2RAnE1Pq/E0pjx
LYd4IhMHLuWSHA85DRhKxdlKSbjZ1nnR28nTh13UPL42bJ5fFhhvtFVVBJBlOFa0
yZgnFYX0cEcEcPQ+jMOKngr8wITbrl0h2kzqG4wqsB+FPkrfJhahC6trhe7RBe0i
ncX++tnchs5tiQ0rOtQ386krsHYTaGFxlyZ4emAIXOC4PfTxsNxA/Gw4NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNxxr/0+ZdRVgVmYfvwk3cax4FpMB8GA1UdIwQY
MBaAFLNg8Al75IHCG7HVHIXUT2V0FYqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczJEd0NYdmtnY0lic2RVY2hkUlBaWFFWaXFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi80YWE1YTctOGJlYy00MjQ3LWExNWYt
NWEzNjEyMzUyYjM3LzEvczJEd0NYdmtnY0lic2RVY2hkUlBaWFFWaXFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi80YWE1YTctOGJlYy00MjQ3LWExNWYtNWEzNjEyMzUyYjM3
LzEvczJEd0NYdmtnY0lic2RVY2hkUlBaWFFWaXFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbHtd+Psf
m/9ps2aIaDV1RLXeVldYeV4MoysLoT/0ZMPaoCbtazKW8rskIA5KlHgotiymErf1
rbxh93Xw4Sw8w8du3EP/bwSD8z4efo8B38VffNDlTNdkb/Pn3sIfMx6QkEKA4kl9
OWWc/Uuqra0aXzm1R5qKuLMvaF4xpKvjx9SK6GWYx1gDaniKCdnhsqaIe+p31dOD
g+JaIbgZE+tQgr9pajMhndntNSzv37w9BmzwyC2E+PMo7D/bdHhlvcqQ92RbHwd9
xXYtoQfyq+iiGWG04Vn3DfZAXaxogD0W9K3mWudUCWu7ljznuOZXCRvknuADHVqj
qTavJMDBm+AOKQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:15 2025 by rpki-client