Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
File: SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft (raw, json)
Hash identifier: ph8xkz8+7ssvgU/7B2JbB9WneoDYLzVBObaDGzIATsw=
Subject key identifier: 7B:C3:49:D0:B0:DC:6B:E0:CE:30:78:17:D4:A5:B8:40:7C:D6:8C:34
Authority key identifier: 4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8
Certificate issuer: /CN=4b1cdcb90b9832016748a7e268cc1eff239262f8
Certificate serial: 0198530D12DC545F611EE6808EC69BFDA827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
Manifest number: 1342
Signing time: Mon 28 Jul 2025 22:00:22 +0000
Manifest this update: Mon 28 Jul 2025 22:00:22 +0000
Manifest next update: Tue 29 Jul 2025 22:00:22 +0000
Files and hashes: 1: SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl (hash: fVdoL1oR9rOoY1ChWwVqqQ1mHRF+GjusKsYa2ewmwzc=)
2: eiFnEmDTPMfL3dAfRXolzkxp_i4.roa (hash: 4dzfRJYq125S/BqKfHbwTEsWNU4YgfgsuuliSEpx9eU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:12:dc:54:5f:61:1e:e6:80:8e:c6:9b:fd:a8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b1cdcb90b9832016748a7e268cc1eff239262f8
Validity
Not Before: Jul 28 22:00:22 2025 GMT
Not After : Jul 29 22:00:22 2025 GMT
Subject: CN=7bc349d0b0dc6be0ce307817d4a5b8407cd68c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:49:c7:88:f5:f9:fd:dc:b8:e4:5f:ae:39:a9:
8c:a3:e0:a6:5b:13:25:6d:24:3d:49:a4:3b:52:6c:
b3:24:dd:d1:9e:d9:c3:14:d4:c7:b6:d0:4e:b0:cb:
6c:0b:77:87:f6:d2:b1:28:b2:a6:85:96:72:c6:fb:
18:f1:40:45:24:2f:e1:f6:2c:aa:b1:dc:74:11:03:
d9:eb:ad:7b:8d:d4:bd:d5:32:f6:d9:11:6c:70:c3:
39:db:3e:f8:76:44:40:26:98:65:42:78:2c:c7:6a:
c7:2f:4a:4e:1a:79:75:c5:08:f6:e7:94:95:4b:28:
9e:2b:40:03:1a:25:95:c4:8c:85:25:8d:7c:1a:fa:
9e:ae:e5:5c:2b:e9:8d:aa:a4:bb:09:d8:4d:0e:9d:
83:78:77:28:41:20:62:01:13:c9:d6:0c:3a:c4:ca:
fb:de:07:28:6a:c2:1f:2a:b1:2e:4f:4d:a6:58:11:
91:56:cb:a0:96:dc:5c:c9:db:f2:ea:8a:4e:f0:84:
de:ba:0d:8c:a0:1d:e2:0e:15:fb:c9:bd:79:eb:4a:
ab:4a:65:3d:c4:82:0a:e6:c4:c4:28:63:03:49:88:
01:7f:13:64:8a:5b:24:f6:fe:18:a5:93:67:d7:12:
ee:d3:53:3f:dc:70:df:b1:05:03:29:5f:35:ea:8c:
97:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C3:49:D0:B0:DC:6B:E0:CE:30:78:17:D4:A5:B8:40:7C:D6:8C:34
X509v3 Authority Key Identifier:
keyid:4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b4:6c:cf:63:6d:f7:49:3f:d2:57:ec:00:99:b3:03:68:a0:
66:0a:98:86:64:21:74:3e:d6:da:a5:8d:63:ed:52:fe:77:47:
5b:0f:04:37:02:97:31:12:20:90:1e:08:ef:6b:29:a5:20:8d:
5a:f6:88:26:68:fb:9a:99:09:61:3e:bc:f7:f8:54:89:7e:0c:
8a:2f:2f:c6:25:fd:45:dd:4f:1f:b1:fe:26:5a:a7:08:d6:79:
ac:14:a1:0b:9c:5e:f4:4c:a6:e4:22:85:f9:f4:f4:d7:de:01:
9b:95:56:91:07:f6:64:ee:e1:2c:8c:c7:69:16:01:49:82:46:
06:4b:88:b5:e6:4e:47:f1:2f:6c:9b:9e:c5:c5:cb:81:a3:b5:
f9:4a:86:b5:cb:6f:16:04:59:24:92:3c:4a:1b:b4:f0:f3:9a:
bf:65:02:fd:ca:f6:e0:f6:ec:94:dd:72:ed:38:e4:a0:7b:26:
54:71:48:29:72:96:5b:90:29:70:a3:79:10:0d:b0:ad:1c:c4:
5a:29:17:59:cd:f3:0f:be:1f:33:da:ca:f6:a2:92:2d:5f:62:
8c:38:46:e3:e1:a3:aa:6b:19:1c:16:a9:c0:6f:85:7a:f7:eb:
a2:63:71:dc:34:0e:0d:5c:d0:8d:02:b3:3b:33:ea:5b:6a:9c:
a0:41:9e:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTDRLcVF9hHuaAjsab/agnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMWNkY2I5MGI5ODMyMDE2NzQ4YTdlMjY4Y2MxZWZmMjM5
MjYyZjgwHhcNMjUwNzI4MjIwMDIyWhcNMjUwNzI5MjIwMDIyWjAzMTEwLwYDVQQD
Eyg3YmMzNDlkMGIwZGM2YmUwY2UzMDc4MTdkNGE1Yjg0MDdjZDY4YzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5knHiPX5/dy45F+uOamMo+CmWxMl
bSQ9SaQ7UmyzJN3RntnDFNTHttBOsMtsC3eH9tKxKLKmhZZyxvsY8UBFJC/h9iyq
sdx0EQPZ6617jdS91TL22RFscMM52z74dkRAJphlQngsx2rHL0pOGnl1xQj255SV
SyieK0ADGiWVxIyFJY18GvqeruVcK+mNqqS7CdhNDp2DeHcoQSBiARPJ1gw6xMr7
3gcoasIfKrEuT02mWBGRVsugltxcydvy6opO8ITeug2MoB3iDhX7yb1560qrSmU9
xIIK5sTEKGMDSYgBfxNkilsk9v4YpZNn1xLu01M/3HDfsQUDKV816oyXZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvDSdCw3GvgzjB4F9SluEB81ow0MB8GA1UdIwQY
MBaAFEsc3LkLmDIBZ0in4mjMHv8jkmL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3h6Y3VRdVlNZ0ZuU0tmaWFNd2VfeU9TWXZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kNWRhZjgtNDkyNC00YmVjLTg1MTgt
YWVmYzE4OWZkODUxLzEvU3h6Y3VRdVlNZ0ZuU0tmaWFNd2VfeU9TWXZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9kNWRhZjgtNDkyNC00YmVjLTg1MTgtYWVmYzE4OWZkODUx
LzEvU3h6Y3VRdVlNZ0ZuU0tmaWFNd2VfeU9TWXZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErRsz2Nt
90k/0lfsAJmzA2igZgqYhmQhdD7W2qWNY+1S/ndHWw8ENwKXMRIgkB4I72sppSCN
WvaIJmj7mpkJYT689/hUiX4Mii8vxiX9Rd1PH7H+JlqnCNZ5rBShC5xe9Eym5CKF
+fT0194Bm5VWkQf2ZO7hLIzHaRYBSYJGBkuIteZOR/EvbJuexcXLgaO1+UqGtctv
FgRZJJI8Shu08POav2UC/cr24PbslN1y7TjkoHsmVHFIKXKWW5ApcKN5EA2wrRzE
WikXWc3zD74fM9rK9qKSLV9ijDhG4+GjqmsZHBapwG+FevfromNx3DQODVzQjQKz
OzPqW2qcoEGe7A==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:22:13 2025 by rpki-client