Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
File: sfcTzyBVLWxcI_CeezdmmEb5ylA.mft (raw, json)
Hash identifier: eBocJ9Gbu260t8/bYkPYRnckzex2Z8YjoDbspdZUIbw=
Subject key identifier: BB:99:85:80:7A:5B:49:B2:22:83:3D:F8:F4:A7:C0:EF:7A:2F:1F:EA
Authority key identifier: B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
Certificate issuer: /CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Certificate serial: 01987D8A68B9396C689D6846F8A6DB475A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
Manifest number: 1620
Signing time: Wed 06 Aug 2025 04:01:19 +0000
Manifest this update: Wed 06 Aug 2025 04:01:19 +0000
Manifest next update: Thu 07 Aug 2025 04:01:19 +0000
Files and hashes: 1: RlSX_O9nuK4visZrcXhuUrMTobY.roa (hash: rJSur0He4KlKRGvS+jaXIpRrSe2/3CDqYP07r9YT8i0=)
2: _FEDHOA1DaPuw5szVg_jX1NChtc.roa (hash: NTy69zIQkKyjkxDfKJ+X67SWRMXHN0I5/tJxmftqgVU=)
3: sfcTzyBVLWxcI_CeezdmmEb5ylA.crl (hash: vImTOJjmAw50qCQASpyf390esPPxYi9TMefJCqv4P4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:68:b9:39:6c:68:9d:68:46:f8:a6:db:47:5a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Validity
Not Before: Aug 6 04:01:19 2025 GMT
Not After : Aug 7 04:01:19 2025 GMT
Subject: CN=bb9985807a5b49b222833df8f4a7c0ef7a2f1fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b2:29:5a:e3:f0:04:df:18:d8:d3:08:47:1c:
77:6e:4f:2f:42:a3:0c:ca:f6:22:45:d7:06:a2:84:
0a:ff:55:af:84:81:07:ba:c2:cd:a4:c2:f6:3c:1a:
c0:38:24:64:7a:aa:b3:c2:e3:39:31:99:6f:6d:2c:
bc:e9:30:1c:ba:6f:f8:b7:30:40:25:c9:50:59:cf:
18:5f:35:f2:b1:5e:6a:4e:93:fe:57:b1:ed:fa:e0:
83:70:28:5f:79:c3:c3:6c:ce:74:61:7e:18:4c:f7:
bf:ef:c3:8f:f6:92:a1:c2:93:7f:78:d6:d9:a6:ae:
87:5a:4a:8a:a3:25:d0:2c:52:14:5e:38:87:f4:5a:
59:fd:0d:1a:37:6a:24:98:b2:4a:d2:f3:e4:6a:ee:
da:ff:70:a4:32:29:2a:e0:c3:3e:0f:72:19:5c:df:
3a:57:06:37:ed:83:94:a4:76:be:55:f3:7e:fe:64:
86:7c:e9:37:e7:79:9c:cf:91:10:8b:f6:6e:61:be:
4e:96:8c:1f:28:64:b3:af:4c:31:61:1f:c9:64:e6:
7f:a0:83:6a:e1:41:e5:3b:fa:4a:10:93:40:23:d0:
c0:1c:18:bf:75:a2:c7:cf:1b:d1:9b:46:f1:bb:aa:
a2:d5:1a:13:68:46:da:a2:07:d1:27:a8:61:47:58:
d6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:99:85:80:7A:5B:49:B2:22:83:3D:F8:F4:A7:C0:EF:7A:2F:1F:EA
X509v3 Authority Key Identifier:
keyid:B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f9:6f:ff:8a:27:5a:74:8f:d6:dd:9d:c3:39:0c:f0:78:25:
cb:b7:35:90:e9:ad:c7:64:30:a5:2f:5a:40:bf:06:33:0f:72:
93:1a:d1:53:1e:35:c3:6f:d5:a0:d5:76:71:ae:2d:ec:d8:b7:
44:81:d2:fc:e7:70:93:22:a4:5d:ca:57:60:ef:0c:e0:92:5d:
c9:76:e8:3f:87:8f:97:79:00:2f:cf:4a:d9:b1:a2:f5:b1:22:
eb:45:0f:5f:13:85:90:31:63:e3:91:9f:c6:48:96:9b:9f:e6:
6e:3d:f0:a8:41:2e:db:d7:42:b5:aa:12:28:7f:87:2a:9f:82:
f2:3a:f5:09:98:cc:69:b4:f7:a8:ce:ef:07:79:c0:98:57:2b:
af:9e:af:75:8d:f0:4d:44:f0:b2:3a:a6:4e:54:07:6d:0c:17:
6b:95:ed:76:76:93:be:5c:1f:25:7d:13:5a:51:4c:15:49:40:
7d:9e:b0:bf:62:d9:4a:4f:b7:07:70:ad:f1:a4:2d:4a:93:59:
f7:38:62:c2:75:6b:bb:9d:95:67:79:b5:71:3f:a7:39:9c:14:
58:b8:aa:87:43:3f:cc:c5:eb:a1:aa:c1:3f:cd:47:b2:8b:7e:
9f:a6:9a:73:e7:07:e0:28:03:71:ff:48:dc:0f:30:66:cf:ab:
58:a9:ba:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9imi5OWxonWhG+KbbR1o/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZjcxM2NmMjA1NTJkNmM1YzIzZjA5ZTdiMzc2Njk4NDZm
OWNhNTAwHhcNMjUwODA2MDQwMTE5WhcNMjUwODA3MDQwMTE5WjAzMTEwLwYDVQQD
EyhiYjk5ODU4MDdhNWI0OWIyMjI4MzNkZjhmNGE3YzBlZjdhMmYxZmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrIpWuPwBN8Y2NMIRxx3bk8vQqMM
yvYiRdcGooQK/1WvhIEHusLNpML2PBrAOCRkeqqzwuM5MZlvbSy86TAcum/4tzBA
JclQWc8YXzXysV5qTpP+V7Ht+uCDcChfecPDbM50YX4YTPe/78OP9pKhwpN/eNbZ
pq6HWkqKoyXQLFIUXjiH9FpZ/Q0aN2okmLJK0vPkau7a/3CkMikq4MM+D3IZXN86
VwY37YOUpHa+VfN+/mSGfOk353mcz5EQi/ZuYb5OlowfKGSzr0wxYR/JZOZ/oINq
4UHlO/pKEJNAI9DAHBi/daLHzxvRm0bxu6qi1RoTaEbaogfRJ6hhR1jWwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLuZhYB6W0myIoM9+PSnwO96Lx/qMB8GA1UdIwQY
MBaAFLH3E88gVS1sXCPwnns3ZphG+cpQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2ZjVHp5QlZMV3hjSV9DZWV6ZG1tRWI1eWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mMWFmMjktN2YwOS00ZjljLWFjZDYt
Njk0ZDc4YjMyZDIwLzEvc2ZjVHp5QlZMV3hjSV9DZWV6ZG1tRWI1eWxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mMWFmMjktN2YwOS00ZjljLWFjZDYtNjk0ZDc4YjMyZDIw
LzEvc2ZjVHp5QlZMV3hjSV9DZWV6ZG1tRWI1eWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHvlv/4on
WnSP1t2dwzkM8Hgly7c1kOmtx2QwpS9aQL8GMw9ykxrRUx41w2/VoNV2ca4t7Ni3
RIHS/OdwkyKkXcpXYO8M4JJdyXboP4ePl3kAL89K2bGi9bEi60UPXxOFkDFj45Gf
xkiWm5/mbj3wqEEu29dCtaoSKH+HKp+C8jr1CZjMabT3qM7vB3nAmFcrr56vdY3w
TUTwsjqmTlQHbQwXa5XtdnaTvlwfJX0TWlFMFUlAfZ6wv2LZSk+3B3Ct8aQtSpNZ
9zhiwnVru52VZ3m1cT+nOZwUWLiqh0M/zMXroarBP81Hsot+n6aac+cH4CgDcf9I
3A8wZs+rWKm6PA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 12:25:06 2025 by rpki-client