Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
File: sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft (raw, json)
Hash identifier: m3slpu1bhETHPj7aKamaAEDic+RrrwAkamgFSqDthYM=
Subject key identifier: B1:64:D3:AC:5B:0C:C8:37:3A:2A:45:53:D3:9D:7C:2E:0E:80:E3:C0
Authority key identifier: B1:F0:25:2F:FA:42:08:3A:7D:FD:5C:6C:5E:72:7D:64:B9:11:CD:9F
Certificate issuer: /CN=b1f0252ffa42083a7dfd5c6c5e727d64b911cd9f
Certificate serial: 01984B5460F30E127ABB24A0F89BAE98A7D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
Manifest number: 0D11
Signing time: Sun 27 Jul 2025 10:01:17 +0000
Manifest this update: Sun 27 Jul 2025 10:01:17 +0000
Manifest next update: Mon 28 Jul 2025 10:01:17 +0000
Files and hashes: 1: sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl (hash: VXFaxEl1CEsy+PxbNHeagqTquGhwH5AfLhJCWJXuO+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:60:f3:0e:12:7a:bb:24:a0:f8:9b:ae:98:a7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f0252ffa42083a7dfd5c6c5e727d64b911cd9f
Validity
Not Before: Jul 27 10:01:17 2025 GMT
Not After : Jul 28 10:01:17 2025 GMT
Subject: CN=b164d3ac5b0cc8373a2a4553d39d7c2e0e80e3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b3:b3:cc:7c:73:43:09:e9:3a:91:c4:0c:81:
9d:a8:47:ee:50:30:17:c1:ab:4b:49:ff:bd:89:57:
92:03:5c:21:ed:13:a7:b8:27:ab:a0:37:34:5e:4d:
c8:3e:ad:07:b3:50:00:13:f5:b5:27:4a:86:70:e9:
a0:c3:b2:db:ad:db:c3:a5:aa:5d:b7:96:c5:0f:62:
46:68:bf:e6:c0:70:60:4c:bb:dc:50:c1:0e:82:b6:
54:70:75:75:4c:d1:58:cc:ab:90:39:84:cf:c1:be:
9f:a3:04:e7:6f:47:e1:db:43:64:75:3c:66:5b:55:
33:4b:ea:38:b9:46:dc:46:0c:0e:f0:41:b7:67:df:
aa:04:60:c6:e1:fa:99:a5:8a:69:bb:bc:c4:fc:cf:
46:5d:57:1d:f0:c6:98:da:e6:a0:79:1f:a4:51:c5:
64:78:e8:bd:55:42:5a:3e:c8:9b:c4:37:f9:a4:85:
97:49:62:b6:92:5d:2d:3b:8c:9e:ad:e7:2e:81:d9:
78:55:7b:71:4c:d8:ba:83:4c:df:c1:42:ef:e0:42:
e3:d4:58:76:3b:8a:72:0a:85:4d:99:e7:54:1d:a1:
3b:e3:18:ed:58:e7:25:43:20:33:80:b6:8c:bb:16:
89:32:53:b5:c0:bb:42:4f:8c:81:08:15:8f:f1:d5:
51:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:64:D3:AC:5B:0C:C8:37:3A:2A:45:53:D3:9D:7C:2E:0E:80:E3:C0
X509v3 Authority Key Identifier:
keyid:B1:F0:25:2F:FA:42:08:3A:7D:FD:5C:6C:5E:72:7D:64:B9:11:CD:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c8:d7:72:5a:28:67:7f:30:20:96:de:93:92:cd:cd:ce:8a:
1d:02:df:e6:7b:13:81:a5:7e:f1:d0:e3:be:f6:7e:be:98:e4:
4f:88:63:77:d6:f0:79:95:05:fb:9b:dc:6f:fb:bc:f2:e6:3b:
94:7f:05:80:de:ff:96:36:30:d6:28:13:6e:bb:6e:c9:19:a6:
98:95:83:18:0c:4a:1f:61:15:3f:32:64:3f:82:33:70:41:88:
62:b4:35:6f:4f:56:64:a9:88:18:d2:83:c8:5f:65:97:48:27:
69:de:b8:2d:e5:45:bb:e9:d8:a9:a2:19:44:cc:0e:73:74:09:
50:a7:f3:61:76:d2:a1:6c:47:99:7a:c7:8c:da:d4:81:59:1a:
51:d5:ad:87:7e:94:67:1f:24:19:b6:a2:1e:a8:29:d7:bc:87:
f1:fd:d3:f8:fc:a6:54:05:07:56:1a:11:13:37:b1:23:b0:dd:
a8:cd:3a:0c:bf:0c:b4:2a:07:09:ba:2c:d7:99:72:9d:5e:f9:
ea:03:e6:8d:cd:fc:d7:eb:c7:90:7e:5f:43:93:fd:ac:a9:b2:
54:96:d0:3b:f2:a5:77:73:02:8a:7e:f4:18:4c:4b:b0:7c:cd:
d0:aa:08:7e:d4:6f:92:1b:97:8e:cf:1c:7a:1e:de:78:2b:2e:
dd:5d:79:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVGDzDhJ6uySg+JuumKfTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZjAyNTJmZmE0MjA4M2E3ZGZkNWM2YzVlNzI3ZDY0Yjkx
MWNkOWYwHhcNMjUwNzI3MTAwMTE3WhcNMjUwNzI4MTAwMTE3WjAzMTEwLwYDVQQD
EyhiMTY0ZDNhYzViMGNjODM3M2EyYTQ1NTNkMzlkN2MyZTBlODBlM2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLOzzHxzQwnpOpHEDIGdqEfuUDAX
watLSf+9iVeSA1wh7ROnuCeroDc0Xk3IPq0Hs1AAE/W1J0qGcOmgw7LbrdvDpapd
t5bFD2JGaL/mwHBgTLvcUMEOgrZUcHV1TNFYzKuQOYTPwb6fowTnb0fh20NkdTxm
W1UzS+o4uUbcRgwO8EG3Z9+qBGDG4fqZpYppu7zE/M9GXVcd8MaY2uageR+kUcVk
eOi9VUJaPsibxDf5pIWXSWK2kl0tO4yerecugdl4VXtxTNi6g0zfwULv4ELj1Fh2
O4pyCoVNmedUHaE74xjtWOclQyAzgLaMuxaJMlO1wLtCT4yBCBWP8dVRqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFk06xbDMg3OipFU9OdfC4OgOPAMB8GA1UdIwQY
MBaAFLHwJS/6Qgg6ff1cbF5yfWS5Ec2fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2ZBbExfcENDRHA5X1Z4c1huSjlaTGtSelo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9jYmE0OTAtMTBmZi00MzdmLWI3Yjkt
ZGU4MWExMzMzOTcyLzEvc2ZBbExfcENDRHA5X1Z4c1huSjlaTGtSelo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9jYmE0OTAtMTBmZi00MzdmLWI3YjktZGU4MWExMzMzOTcy
LzEvc2ZBbExfcENDRHA5X1Z4c1huSjlaTGtSelo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUcjXcloo
Z38wIJbek5LNzc6KHQLf5nsTgaV+8dDjvvZ+vpjkT4hjd9bweZUF+5vcb/u88uY7
lH8FgN7/ljYw1igTbrtuyRmmmJWDGAxKH2EVPzJkP4IzcEGIYrQ1b09WZKmIGNKD
yF9ll0gnad64LeVFu+nYqaIZRMwOc3QJUKfzYXbSoWxHmXrHjNrUgVkaUdWth36U
Zx8kGbaiHqgp17yH8f3T+PymVAUHVhoREzexI7DdqM06DL8MtCoHCbos15lynV75
6gPmjc381+vHkH5fQ5P9rKmyVJbQO/Kld3MCin70GExLsHzN0KoIftRvkhuXjs8c
eh7eeCsu3V15OA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:07:23 2025 by rpki-client