Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
File: r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft (raw, json)
Hash identifier: BWMjcUXp0HNV/P2bDeVvOmPmdTmSarhfUsOwBms/1lw=
Subject key identifier: 05:A0:17:EE:05:ED:B1:78:95:82:3A:26:97:D6:01:29:AB:B7:46:2E
Authority key identifier: AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
Certificate issuer: /CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Certificate serial: 019874502DD42A129EE58BA2E5FDE83588EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 09:01:08 +0000
Manifest this update: Mon 04 Aug 2025 09:01:08 +0000
Manifest next update: Tue 05 Aug 2025 09:01:08 +0000
Files and hashes: 1: WRw_zQ2egi-s7g_XDa3-zCzmCZo.roa (hash: 02LV3UJv16rTHuq6tHPlIKsn2U/3pYjP8DRzavT1ujg=)
2: r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl (hash: xxBM7Rw0WmRlpEGA057eH5xl9Pwh6AtnyoJpnowTxmU=)
3: tMXBcGUIKGTfYRMTtfG6biesR-c.roa (hash: JWcwNHGeY4nL5R6D6KA+SUTM4UCaSarGczrFPqLJ+XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:2d:d4:2a:12:9e:e5:8b:a2:e5:fd:e8:35:88:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Validity
Not Before: Aug 4 09:01:08 2025 GMT
Not After : Aug 5 09:01:08 2025 GMT
Subject: CN=05a017ee05edb17895823a2697d60129abb7462e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:46:96:0b:0f:a9:77:4d:4d:0c:ca:8a:a0:cb:
81:f5:6c:33:4e:72:04:0b:49:7f:98:05:7f:45:e3:
39:ab:2c:78:8f:40:14:44:10:bc:be:59:39:be:fc:
ce:42:14:8f:f7:69:76:ba:b6:93:e8:c6:1e:1e:43:
76:c2:e1:ae:b3:11:01:3e:ed:43:01:98:ab:06:4c:
b4:b8:16:83:13:12:e7:da:4f:43:19:84:69:dd:77:
96:51:0d:f0:cb:dc:a6:e0:fa:f1:8a:06:63:1b:38:
80:a5:3b:d8:b3:bf:7f:71:f7:d7:57:7c:98:be:17:
cb:88:64:af:aa:6f:8f:c9:5b:1e:17:05:a8:2d:57:
a6:26:d0:97:99:6b:60:d9:82:b1:9a:c1:bb:da:e9:
95:c0:69:80:61:77:b3:0b:b7:30:d9:6e:cc:55:14:
3c:52:7b:f4:7e:35:b5:11:cd:d7:25:0d:05:80:34:
fb:cc:20:12:86:58:19:8d:8b:d6:a6:d6:a0:65:c4:
c1:f7:70:44:26:4c:71:b1:3f:d0:48:7c:14:c1:67:
a5:e5:79:32:27:b7:39:f4:9c:60:b2:da:e2:fd:06:
69:f8:5e:48:fd:ba:91:27:78:4c:2a:d6:75:cf:75:
4c:5c:3b:ec:fe:6f:e4:a1:6d:2d:75:29:c8:10:87:
7f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A0:17:EE:05:ED:B1:78:95:82:3A:26:97:D6:01:29:AB:B7:46:2E
X509v3 Authority Key Identifier:
keyid:AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:72:13:45:d7:3c:86:0d:ea:f9:1a:e6:4a:d8:c3:dd:0b:d2:
50:28:d8:aa:3d:c0:66:fa:98:bd:02:b8:03:80:43:48:f2:d5:
7c:d9:dd:6d:77:8a:37:0b:4d:e2:c4:21:e9:b1:9d:73:f3:7e:
40:9f:2e:a0:5c:2a:bf:94:7d:55:f5:a8:96:6a:bf:bb:96:b2:
a5:e2:80:06:59:ca:9b:24:bd:49:2f:cc:1d:1f:fb:54:79:fc:
51:7a:92:a3:b9:0e:75:98:1f:d4:6b:80:9b:23:e9:fe:b3:b2:
91:8a:72:59:08:a7:a1:6f:f0:ed:58:3d:04:d3:8e:30:54:29:
45:e3:f8:19:57:73:1a:e7:3f:24:c9:e5:ee:55:18:3a:65:a4:
72:9a:0c:08:95:61:68:ca:64:ce:9e:09:15:d4:5e:6c:07:be:
1e:a6:3f:65:fa:49:d7:a2:80:1d:59:ad:3e:08:11:62:8c:40:
1d:c2:b7:95:60:fb:b7:bc:34:9a:39:a6:f4:35:aa:6c:30:1e:
3b:5f:1a:ea:58:8e:5a:3a:91:63:10:ee:3b:30:df:d3:a4:c9:
55:0d:0f:3d:10:4b:df:c8:29:86:90:9f:b5:02:c9:75:5a:2f:
8a:e6:ce:ef:82:8c:30:7d:1a:67:9a:43:48:0a:4d:86:37:95:
2d:5c:61:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UC3UKhKe5Yui5f3oNYjuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZTRhMGQ1ZmRhNjAwYzVkNWI3ZjYxOGY2ODZkN2U5MzA1
MWI0ZDcwHhcNMjUwODA0MDkwMTA4WhcNMjUwODA1MDkwMTA4WjAzMTEwLwYDVQQD
EygwNWEwMTdlZTA1ZWRiMTc4OTU4MjNhMjY5N2Q2MDEyOWFiYjc0NjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEaWCw+pd01NDMqKoMuB9WwzTnIE
C0l/mAV/ReM5qyx4j0AURBC8vlk5vvzOQhSP92l2uraT6MYeHkN2wuGusxEBPu1D
AZirBky0uBaDExLn2k9DGYRp3XeWUQ3wy9ym4PrxigZjGziApTvYs79/cffXV3yY
vhfLiGSvqm+PyVseFwWoLVemJtCXmWtg2YKxmsG72umVwGmAYXezC7cw2W7MVRQ8
Unv0fjW1Ec3XJQ0FgDT7zCAShlgZjYvWptagZcTB93BEJkxxsT/QSHwUwWel5Xky
J7c59Jxgstri/QZp+F5I/bqRJ3hMKtZ1z3VMXDvs/m/koW0tdSnIEId/TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWgF+4F7bF4lYI6JpfWASmrt0YuMB8GA1UdIwQY
MBaAFK/koNX9pgDF1bf2GPaG1+kwUbTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvci1TZzFmMm1BTVhWdF9ZWTlvYlg2VEJSdE5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85NDY3YzgtMGM5MC00NmUxLTkxYzAt
ZTEwN2Q5ZjE2YzJkLzEvci1TZzFmMm1BTVhWdF9ZWTlvYlg2VEJSdE5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85NDY3YzgtMGM5MC00NmUxLTkxYzAtZTEwN2Q5ZjE2YzJk
LzEvci1TZzFmMm1BTVhWdF9ZWTlvYlg2VEJSdE5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXITRdc8
hg3q+RrmStjD3QvSUCjYqj3AZvqYvQK4A4BDSPLVfNndbXeKNwtN4sQh6bGdc/N+
QJ8uoFwqv5R9VfWolmq/u5aypeKABlnKmyS9SS/MHR/7VHn8UXqSo7kOdZgf1GuA
myPp/rOykYpyWQinoW/w7Vg9BNOOMFQpReP4GVdzGuc/JMnl7lUYOmWkcpoMCJVh
aMpkzp4JFdRebAe+HqY/ZfpJ16KAHVmtPggRYoxAHcK3lWD7t7w0mjmm9DWqbDAe
O18a6liOWjqRYxDuOzDf06TJVQ0PPRBL38gphpCftQLJdVoviubO74KMMH0aZ5pD
SApNhjeVLVxh5A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:28:06 2025 by rpki-client