Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
File: SFldSlTtZEITxEYZXjb3jsGig5k.mft (raw, json)
Hash identifier: wBFAJCYOGJ7e0+ZsYrXkY18xg3HMPf1/zK/V6pNiV40=
Subject key identifier: 50:83:68:EC:48:B7:B0:46:2A:FB:8A:6A:ED:FC:88:36:41:49:01:C0
Authority key identifier: 48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99
Certificate issuer: /CN=48595d4a54ed644213c446195e36f78ec1a28399
Certificate serial: 01974968143083BD85B2693662C342440A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 08:00:47 +0000
Manifest this update: Sat 07 Jun 2025 08:00:47 +0000
Manifest next update: Sun 08 Jun 2025 08:00:47 +0000
Files and hashes: 1: 5TwfULMH-unHdDYOcT1BkwSNVj4.roa (hash: MnqaA2gAqS7okflGRdl3L2EkczyiAqyp5YnJcnh49kE=)
2: SFldSlTtZEITxEYZXjb3jsGig5k.crl (hash: IlKcTi+qohQmCrAhx7uLBKCNeXUTQPB7mmk4iQJrXYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:14:30:83:bd:85:b2:69:36:62:c3:42:44:0a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48595d4a54ed644213c446195e36f78ec1a28399
Validity
Not Before: Jun 7 08:00:47 2025 GMT
Not After : Jun 8 08:00:47 2025 GMT
Subject: CN=508368ec48b7b0462afb8a6aedfc8836414901c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:8a:53:24:49:46:62:89:d3:d7:01:bc:42:
33:f0:be:a4:5c:a9:66:71:49:bc:dd:f0:30:be:c5:
9d:43:f2:72:cd:bb:ae:8c:6e:13:4a:92:41:34:52:
f1:bd:a3:00:bf:87:c8:38:79:cb:3d:de:5f:73:eb:
97:b4:31:03:1a:18:47:47:17:f5:07:5d:bb:43:ab:
36:93:60:2b:fd:3d:38:cb:a9:b8:f5:61:c1:e9:db:
6d:d8:40:94:f9:7f:7d:78:8d:d5:de:90:28:2d:72:
7d:45:29:7a:16:e5:15:c9:f6:e3:56:a1:d9:b9:ff:
59:99:0e:bc:54:13:1d:fb:58:6c:73:df:2c:51:16:
a5:14:3b:3e:a8:3a:9d:d2:c1:e4:86:9c:48:13:2d:
91:c5:17:56:58:c4:97:75:60:8d:6a:9b:9e:1e:39:
c3:4a:a4:d5:0d:0a:a9:9e:b1:68:fe:db:0e:22:9d:
c5:e2:41:90:c0:3d:54:3c:02:b2:41:ae:35:a0:27:
55:cf:cf:81:c9:49:04:86:e7:d0:9d:45:25:b6:59:
05:cf:72:52:36:22:a6:ae:c1:4b:b7:f3:68:a1:c3:
4f:ad:6e:fd:27:3b:73:8d:14:a9:b5:97:e8:43:cf:
65:d2:30:51:d2:41:05:4c:a7:88:18:c5:5a:07:8f:
5e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:83:68:EC:48:B7:B0:46:2A:FB:8A:6A:ED:FC:88:36:41:49:01:C0
X509v3 Authority Key Identifier:
keyid:48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c0:c9:fc:85:55:b0:f0:64:77:ac:bc:a8:33:38:dd:17:7c:
01:fc:49:1b:e2:ef:ec:58:fa:f9:47:d4:15:5d:40:6f:1e:df:
c9:1d:28:87:95:59:59:d7:ad:45:cd:11:05:2a:8b:b3:bb:9f:
d3:de:b3:18:7f:f6:b1:a9:ad:26:b0:3d:e4:6a:f6:de:00:ad:
44:9a:52:23:59:dd:5a:9a:54:3d:eb:26:75:7c:3a:90:0b:e3:
2f:1e:55:d8:db:ac:87:9f:88:ed:89:50:23:b7:3f:3c:44:6f:
e7:7f:3c:50:37:90:b0:e1:bf:c2:58:24:11:cb:9c:b9:a0:dd:
24:8f:c6:63:96:73:01:b4:79:b0:27:44:3b:45:4a:1a:70:56:
3e:1f:bd:3a:b7:f1:b8:1e:d0:1a:47:03:96:a2:a5:90:e9:55:
fd:f1:95:85:c0:8c:19:c3:ef:ce:76:02:82:5d:73:45:24:15:
53:5e:18:1d:ae:90:8a:a7:0d:6c:55:2a:ca:32:f6:c7:ee:30:
91:99:7b:20:b6:1c:bd:e9:78:93:94:8c:ac:ec:65:58:96:6f:
f6:ba:70:c9:82:ff:a6:79:e9:cd:00:33:ae:36:21:74:62:f3:
76:c9:e8:4d:86:f9:89:af:6f:3d:33:b1:ba:9c:8f:67:4c:8e:
12:80:5d:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJaBQwg72Fsmk2YsNCRAqdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NTk1ZDRhNTRlZDY0NDIxM2M0NDYxOTVlMzZmNzhlYzFh
MjgzOTkwHhcNMjUwNjA3MDgwMDQ3WhcNMjUwNjA4MDgwMDQ3WjAzMTEwLwYDVQQD
Eyg1MDgzNjhlYzQ4YjdiMDQ2MmFmYjhhNmFlZGZjODgzNjQxNDkwMWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXeKUyRJRmKJ09cBvEIz8L6kXKlm
cUm83fAwvsWdQ/JyzbuujG4TSpJBNFLxvaMAv4fIOHnLPd5fc+uXtDEDGhhHRxf1
B127Q6s2k2Ar/T04y6m49WHB6dtt2ECU+X99eI3V3pAoLXJ9RSl6FuUVyfbjVqHZ
uf9ZmQ68VBMd+1hsc98sURalFDs+qDqd0sHkhpxIEy2RxRdWWMSXdWCNapueHjnD
SqTVDQqpnrFo/tsOIp3F4kGQwD1UPAKyQa41oCdVz8+ByUkEhufQnUUltlkFz3JS
NiKmrsFLt/NoocNPrW79JztzjRSptZfoQ89l0jBR0kEFTKeIGMVaB49efQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCDaOxIt7BGKvuKau38iDZBSQHAMB8GA1UdIwQY
MBaAFEhZXUpU7WRCE8RGGV42947BooOZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0ZsZFNsVHRaRUlUeEVZWlhqYjNqc0dpZzVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82ZTZmNTEtNGUxMy00NjVlLWI0ZDYt
MmU4ZGNkZDUxNjUxLzEvU0ZsZFNsVHRaRUlUeEVZWlhqYjNqc0dpZzVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS82ZTZmNTEtNGUxMy00NjVlLWI0ZDYtMmU4ZGNkZDUxNjUx
LzEvU0ZsZFNsVHRaRUlUeEVZWlhqYjNqc0dpZzVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkcDJ/IVV
sPBkd6y8qDM43Rd8AfxJG+Lv7Fj6+UfUFV1Abx7fyR0oh5VZWdetRc0RBSqLs7uf
096zGH/2samtJrA95Gr23gCtRJpSI1ndWppUPesmdXw6kAvjLx5V2Nush5+I7YlQ
I7c/PERv5388UDeQsOG/wlgkEcucuaDdJI/GY5ZzAbR5sCdEO0VKGnBWPh+9Orfx
uB7QGkcDlqKlkOlV/fGVhcCMGcPvznYCgl1zRSQVU14YHa6QiqcNbFUqyjL2x+4w
kZl7ILYcvel4k5SMrOxlWJZv9rpwyYL/pnnpzQAzrjYhdGLzdsnoTYb5ia9vPTOx
upyPZ0yOEoBdbA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:52:52 2025 by rpki-client