Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
File: syu38vqMQUxnGIvau_t2IVaTuoc.mft (raw, json)
Hash identifier: etLifkreClhSkmqeR4NH7dZBr7AwtA/wCr6SxsLhE9o=
Subject key identifier: F4:90:3D:4D:10:96:09:44:6A:19:5A:1C:35:AE:B1:CB:E9:7E:10:8A
Authority key identifier: B3:2B:B7:F2:FA:8C:41:4C:67:18:8B:DA:BB:FB:76:21:56:93:BA:87
Certificate issuer: /CN=b32bb7f2fa8c414c67188bdabbfb76215693ba87
Certificate serial: 0198756263D4D4BCC93A95194ABD86AAF170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
Manifest number: 0413
Signing time: Mon 04 Aug 2025 14:00:38 +0000
Manifest this update: Mon 04 Aug 2025 14:00:38 +0000
Manifest next update: Tue 05 Aug 2025 14:00:38 +0000
Files and hashes: 1: dlFU-VFKr3DcjZAchl6XqyqKK5c.roa (hash: neVLf32lP2kuQND5P5wXOeNSgGn0qOcZGwTsUoY1fZs=)
2: syu38vqMQUxnGIvau_t2IVaTuoc.crl (hash: qj9W81AbSt4RqVCroVP7b9V23crXZBa6TAoi2XoJs68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:63:d4:d4:bc:c9:3a:95:19:4a:bd:86:aa:f1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32bb7f2fa8c414c67188bdabbfb76215693ba87
Validity
Not Before: Aug 4 14:00:38 2025 GMT
Not After : Aug 5 14:00:38 2025 GMT
Subject: CN=f4903d4d109609446a195a1c35aeb1cbe97e108a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6c:05:a0:ae:05:8d:c2:e0:ab:68:6b:a3:17:
f9:46:b2:bd:e2:08:78:9e:b8:6e:40:01:e0:7f:fd:
0b:03:dd:9c:7d:78:39:2e:6b:bf:bb:be:67:46:b0:
bb:b7:fd:29:38:3f:4d:d1:50:18:73:d8:45:1f:ef:
f7:61:ee:27:20:27:21:49:c8:c7:20:93:6a:0d:c3:
bd:1e:e2:ca:1d:0a:55:3d:86:f7:76:50:be:61:69:
9f:53:b1:10:f1:93:05:aa:91:b5:f0:c9:45:2e:e9:
b8:a9:fc:6d:2e:01:8d:75:3d:fa:b4:3f:58:91:ac:
78:23:f6:f2:8c:60:21:97:6f:20:b0:6f:31:4b:46:
bb:17:b8:d4:d3:8e:fb:98:ad:a5:4a:09:c4:d5:2d:
13:f0:b8:52:f0:00:76:94:51:fe:43:48:d9:e7:d5:
8d:13:31:dc:1d:7f:d1:4c:7b:90:b2:60:1e:60:94:
13:56:90:b5:71:bb:f6:92:de:57:9d:3b:88:4d:3e:
2f:93:81:ab:41:29:df:97:21:d8:93:4a:a4:67:06:
4c:c1:a6:8a:c3:04:63:a0:08:34:60:d7:66:9b:e1:
ea:0c:33:f4:ae:f4:4a:82:dc:e1:3e:2c:2e:2e:41:
4c:13:b1:03:12:08:93:e7:45:41:27:f2:d7:7b:c8:
0f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:90:3D:4D:10:96:09:44:6A:19:5A:1C:35:AE:B1:CB:E9:7E:10:8A
X509v3 Authority Key Identifier:
keyid:B3:2B:B7:F2:FA:8C:41:4C:67:18:8B:DA:BB:FB:76:21:56:93:BA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7f:42:6d:3b:ac:17:54:06:e7:de:9a:b1:86:aa:22:2e:3b:
6c:e0:31:cb:0d:f2:b0:b7:e6:79:fa:69:5a:3d:85:4f:0c:25:
10:d8:68:25:8f:82:30:ea:db:77:41:20:18:c0:f3:79:6d:fb:
31:25:1c:4a:c2:a7:cb:05:08:da:9d:81:66:55:b2:c3:2c:23:
a0:3b:0c:d1:e4:cb:36:72:7d:36:78:8d:a7:07:6b:61:db:c2:
e4:1f:94:df:72:c2:44:51:d3:a8:2a:6e:34:69:48:8c:01:52:
f9:b2:e1:e6:8b:3b:ee:d5:63:d7:be:41:3e:b4:44:1d:c9:ec:
69:21:66:6c:96:fd:b6:ae:1d:97:43:0c:87:2b:fd:00:41:e2:
06:e3:af:14:cb:8d:70:9a:d7:cd:b1:b2:3f:5c:0f:fe:d8:b1:
76:f5:ca:d8:32:a3:a6:8e:6f:c9:f6:b2:d3:59:1c:9b:e0:c7:
41:1a:ff:0f:ce:4d:73:71:62:df:96:14:73:95:ce:95:93:5c:
10:2c:4e:f8:5b:26:ef:e3:7c:1e:fd:de:5b:68:68:5c:89:65:
14:91:e0:fe:62:cb:2a:68:08:08:44:6f:32:9c:57:7d:c7:ca:
ec:d7:71:4c:90:a4:59:05:d5:bc:24:42:20:99:bf:d2:7e:aa:
b8:4a:c4:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh1YmPU1LzJOpUZSr2GqvFwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMmJiN2YyZmE4YzQxNGM2NzE4OGJkYWJiZmI3NjIxNTY5
M2JhODcwHhcNMjUwODA0MTQwMDM4WhcNMjUwODA1MTQwMDM4WjAzMTEwLwYDVQQD
EyhmNDkwM2Q0ZDEwOTYwOTQ0NmExOTVhMWMzNWFlYjFjYmU5N2UxMDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWwFoK4FjcLgq2hroxf5RrK94gh4
nrhuQAHgf/0LA92cfXg5Lmu/u75nRrC7t/0pOD9N0VAYc9hFH+/3Ye4nICchScjH
IJNqDcO9HuLKHQpVPYb3dlC+YWmfU7EQ8ZMFqpG18MlFLum4qfxtLgGNdT36tD9Y
kax4I/byjGAhl28gsG8xS0a7F7jU0477mK2lSgnE1S0T8LhS8AB2lFH+Q0jZ59WN
EzHcHX/RTHuQsmAeYJQTVpC1cbv2kt5XnTuITT4vk4GrQSnflyHYk0qkZwZMwaaK
wwRjoAg0YNdmm+HqDDP0rvRKgtzhPiwuLkFME7EDEgiT50VBJ/LXe8gPKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSQPU0QlglEahlaHDWuscvpfhCKMB8GA1UdIwQY
MBaAFLMrt/L6jEFMZxiL2rv7diFWk7qHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3l1Mzh2cU1RVXhuR0l2YXVfdDJJVmFUdW9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZjMxYWItMmUzNC00N2ZiLTk2MTEt
MjIzYTRkOTQ3MDllLzEvc3l1Mzh2cU1RVXhuR0l2YXVfdDJJVmFUdW9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZjMxYWItMmUzNC00N2ZiLTk2MTEtMjIzYTRkOTQ3MDll
LzEvc3l1Mzh2cU1RVXhuR0l2YXVfdDJJVmFUdW9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkH9CbTus
F1QG596asYaqIi47bOAxyw3ysLfmefppWj2FTwwlENhoJY+CMOrbd0EgGMDzeW37
MSUcSsKnywUI2p2BZlWywywjoDsM0eTLNnJ9NniNpwdrYdvC5B+U33LCRFHTqCpu
NGlIjAFS+bLh5os77tVj175BPrREHcnsaSFmbJb9tq4dl0MMhyv9AEHiBuOvFMuN
cJrXzbGyP1wP/tixdvXK2DKjpo5vyfay01kcm+DHQRr/D85Nc3Fi35YUc5XOlZNc
ECxO+Fsm7+N8Hv3eW2hoXIllFJHg/mLLKmgICERvMpxXfcfK7NdxTJCkWQXVvCRC
IJm/0n6quErE2w==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:30:21 2025 by rpki-client