Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7c08f6-de48-4483-861e-309f30a63078/1/sxkSbzPdwqJ24LNRcv5c2qsaVBY.mft
File: sxkSbzPdwqJ24LNRcv5c2qsaVBY.mft (raw, json)
Hash identifier: HYjXnLtXiYl4hAfymsVRfT7xcbTTV6WvehnsqElPxF0=
Subject key identifier: 27:EF:DA:39:DC:D6:31:EF:3D:00:7A:E7:5B:CF:8D:81:7E:D4:F1:37
Authority key identifier: B3:19:12:6F:33:DD:C2:A2:76:E0:B3:51:72:FE:5C:DA:AB:1A:54:16
Certificate issuer: /CN=b319126f33ddc2a276e0b35172fe5cdaab1a5416
Certificate serial: 019753104FBEE7FAE1ECE63D21C72DDDB827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxkSbzPdwqJ24LNRcv5c2qsaVBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7c08f6-de48-4483-861e-309f30a63078/1/sxkSbzPdwqJ24LNRcv5c2qsaVBY.mft
Manifest number: 0722
Signing time: Mon 09 Jun 2025 05:01:07 +0000
Manifest this update: Mon 09 Jun 2025 05:01:07 +0000
Manifest next update: Tue 10 Jun 2025 05:01:07 +0000
Files and hashes: 1: sxkSbzPdwqJ24LNRcv5c2qsaVBY.crl (hash: pVmuDdbgA6YxKPchw4+/d/4dZfgMairbutkxflDTpQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7c08f6-de48-4483-861e-309f30a63078/1/sxkSbzPdwqJ24LNRcv5c2qsaVBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7c08f6-de48-4483-861e-309f30a63078/1/sxkSbzPdwqJ24LNRcv5c2qsaVBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxkSbzPdwqJ24LNRcv5c2qsaVBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:10:4f:be:e7:fa:e1:ec:e6:3d:21:c7:2d:dd:b8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b319126f33ddc2a276e0b35172fe5cdaab1a5416
Validity
Not Before: Jun 9 05:01:07 2025 GMT
Not After : Jun 10 05:01:07 2025 GMT
Subject: CN=27efda39dcd631ef3d007ae75bcf8d817ed4f137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7a:24:89:2e:26:7f:0b:66:96:d2:64:f9:45:
c8:39:f4:99:29:96:10:64:c5:7a:fa:2b:7c:a1:be:
99:ef:d4:74:57:6d:28:b6:a1:5e:37:2c:b7:75:08:
3b:49:a5:c3:62:d0:72:2b:0d:f4:ad:df:9c:ff:13:
95:2e:8c:70:ab:16:2d:23:54:09:85:87:3a:f3:43:
ca:d5:9d:c6:77:b1:d5:7e:88:14:09:a1:9b:de:d6:
fe:9a:14:8e:10:86:39:da:18:8e:3c:09:cf:4f:06:
6d:7b:8c:97:22:51:1d:77:eb:c0:dd:d4:4e:c1:03:
12:e0:29:bd:b0:14:eb:d1:09:b6:09:8a:fd:12:46:
3a:aa:21:df:e4:c9:0d:6d:aa:75:3e:07:ec:a0:aa:
fd:fe:45:79:5e:e9:6a:6a:ad:80:9e:08:56:a8:f9:
67:43:e4:de:1f:14:01:9d:61:6a:65:49:59:6a:d9:
c7:d9:9d:d5:d1:c3:2c:b1:7b:74:58:b2:73:92:b0:
56:b2:3a:90:22:3c:1d:23:93:5b:9e:d5:99:23:f0:
18:f3:93:80:cb:b7:c3:7e:ed:78:05:26:65:09:4c:
eb:db:72:06:52:cb:b3:12:bb:4a:d1:d3:fe:51:52:
7c:48:36:3d:80:f9:d9:0e:a5:c0:b4:c1:b7:f8:0b:
d8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:EF:DA:39:DC:D6:31:EF:3D:00:7A:E7:5B:CF:8D:81:7E:D4:F1:37
X509v3 Authority Key Identifier:
keyid:B3:19:12:6F:33:DD:C2:A2:76:E0:B3:51:72:FE:5C:DA:AB:1A:54:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxkSbzPdwqJ24LNRcv5c2qsaVBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7c08f6-de48-4483-861e-309f30a63078/1/sxkSbzPdwqJ24LNRcv5c2qsaVBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7c08f6-de48-4483-861e-309f30a63078/1/sxkSbzPdwqJ24LNRcv5c2qsaVBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:c0:8f:8f:1b:8b:48:b0:5d:da:0b:fa:ab:ec:97:39:a6:aa:
67:52:45:75:11:69:59:02:97:0a:00:e7:09:64:61:4a:15:4d:
f9:b4:f6:86:07:ce:64:24:80:50:0c:d3:56:7c:03:da:82:9b:
d7:10:fa:2f:20:97:30:a2:8c:91:87:b6:f5:ef:de:54:d8:4e:
99:49:92:fb:52:ac:82:ac:7b:11:06:41:4e:8b:4f:d5:ac:29:
20:72:35:db:ce:a9:33:ea:0b:d8:d3:40:57:bf:21:33:47:a7:
8b:96:22:76:96:0c:64:a7:dd:9c:37:25:7d:16:15:7f:c2:e3:
70:c8:68:c7:2e:cf:05:6d:70:8e:2c:2c:c1:46:84:51:69:56:
06:10:26:3b:f6:bc:2e:fb:10:ca:fe:0e:cf:9c:3b:ad:40:9b:
0c:e3:c9:19:4e:a2:08:9a:01:b0:a7:d4:f7:df:cb:17:05:e2:
61:9f:50:8b:7f:e4:6b:ff:5e:5c:ba:a3:3b:41:18:cd:8b:64:
64:05:cc:44:6c:a3:8d:b7:35:35:3a:81:3e:a4:56:2f:ad:62:
47:21:6f:56:9d:c1:a6:03:22:82:3c:ce:c4:73:64:55:0c:d6:
3b:7e:cb:74:f2:1d:18:6b:f7:f9:cc:66:67:9e:fe:82:a6:86:
99:0b:c0:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdTEE++5/rh7OY9Icct3bgnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMTkxMjZmMzNkZGMyYTI3NmUwYjM1MTcyZmU1Y2RhYWIx
YTU0MTYwHhcNMjUwNjA5MDUwMTA3WhcNMjUwNjEwMDUwMTA3WjAzMTEwLwYDVQQD
EygyN2VmZGEzOWRjZDYzMWVmM2QwMDdhZTc1YmNmOGQ4MTdlZDRmMTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3okiS4mfwtmltJk+UXIOfSZKZYQ
ZMV6+it8ob6Z79R0V20otqFeNyy3dQg7SaXDYtByKw30rd+c/xOVLoxwqxYtI1QJ
hYc680PK1Z3Gd7HVfogUCaGb3tb+mhSOEIY52hiOPAnPTwZte4yXIlEdd+vA3dRO
wQMS4Cm9sBTr0Qm2CYr9EkY6qiHf5MkNbap1PgfsoKr9/kV5Xulqaq2AnghWqPln
Q+TeHxQBnWFqZUlZatnH2Z3V0cMssXt0WLJzkrBWsjqQIjwdI5NbntWZI/AY85OA
y7fDfu14BSZlCUzr23IGUsuzErtK0dP+UVJ8SDY9gPnZDqXAtMG3+AvYjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfv2jnc1jHvPQB651vPjYF+1PE3MB8GA1UdIwQY
MBaAFLMZEm8z3cKiduCzUXL+XNqrGlQWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3hrU2J6UGR3cUoyNExOUmN2NWMycXNhVkJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83YzA4ZjYtZGU0OC00NDgzLTg2MWUt
MzA5ZjMwYTYzMDc4LzEvc3hrU2J6UGR3cUoyNExOUmN2NWMycXNhVkJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83YzA4ZjYtZGU0OC00NDgzLTg2MWUtMzA5ZjMwYTYzMDc4
LzEvc3hrU2J6UGR3cUoyNExOUmN2NWMycXNhVkJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk8CPjxuL
SLBd2gv6q+yXOaaqZ1JFdRFpWQKXCgDnCWRhShVN+bT2hgfOZCSAUAzTVnwD2oKb
1xD6LyCXMKKMkYe29e/eVNhOmUmS+1Ksgqx7EQZBTotP1awpIHI1286pM+oL2NNA
V78hM0eni5YidpYMZKfdnDclfRYVf8LjcMhoxy7PBW1wjiwswUaEUWlWBhAmO/a8
LvsQyv4Oz5w7rUCbDOPJGU6iCJoBsKfU99/LFwXiYZ9Qi3/ka/9eXLqjO0EYzYtk
ZAXMRGyjjbc1NTqBPqRWL61iRyFvVp3BpgMigjzOxHNkVQzWO37LdPIdGGv3+cxm
Z57+gqaGmQvASg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 09:36:32 2025 by rpki-client