Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
File: _SxsGlV_WItkfheRGmMA40LGYes.mft (raw, json)
Hash identifier: wZ6EDiPGMg96pZpxq7PZNPvnhokmX1riYP2v7XvKRO8=
Subject key identifier: BC:E1:4E:1A:D6:FF:0B:B4:C2:50:33:34:1E:13:D8:2A:37:C8:76:1E
Authority key identifier: FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
Certificate issuer: /CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Certificate serial: 0197470C37A76724D88F63DDACDD87A2EB3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
Manifest number: 0CAF
Signing time: Fri 06 Jun 2025 21:01:12 +0000
Manifest this update: Fri 06 Jun 2025 21:01:12 +0000
Manifest next update: Sat 07 Jun 2025 21:01:12 +0000
Files and hashes: 1: 9mLiZaXlrMh-SLMVWKWdzKIZreg.roa (hash: JOVJ8r+m2mKwk5/18fVmvxGEIuiFVBEZYaB5XFvwZO8=)
2: _SxsGlV_WItkfheRGmMA40LGYes.crl (hash: 99tHEmOh5GmxMSikVAxBy2rhcgoLHybPueV/ETX5Qjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:37:a7:67:24:d8:8f:63:dd:ac:dd:87:a2:eb:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Validity
Not Before: Jun 6 21:01:12 2025 GMT
Not After : Jun 7 21:01:12 2025 GMT
Subject: CN=bce14e1ad6ff0bb4c25033341e13d82a37c8761e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:88:61:96:5a:37:4b:17:08:44:8d:6f:13:11:
de:88:76:7f:51:8c:10:df:7c:7d:94:a9:65:60:93:
40:34:2c:cb:9b:f6:66:71:65:88:36:88:8d:12:92:
2d:d5:bc:34:e9:24:f2:28:fe:14:a0:c7:b4:ad:16:
c2:3c:3f:61:37:45:48:ef:7b:11:bf:00:4b:0a:ec:
0e:6a:a9:a7:ad:db:d4:15:f7:e3:90:73:c9:18:f1:
f5:ac:cc:3f:a3:9b:5a:ea:25:49:0e:01:bc:2f:34:
bf:85:32:e8:04:30:5b:36:78:98:2b:f3:c3:8d:9f:
be:b8:45:00:77:92:77:2f:63:07:40:37:57:6e:53:
ac:eb:80:8b:ac:4d:3e:25:4d:de:89:e3:4c:c0:86:
66:90:5e:89:81:45:67:4c:c8:54:4d:4d:c9:30:0c:
89:85:0c:44:19:0b:d1:15:8b:5e:53:b8:b4:87:7e:
bf:47:48:83:d4:95:f9:1e:6a:90:10:87:83:9e:5f:
69:85:7f:22:9d:6d:28:28:54:25:00:f1:88:b3:10:
4a:1b:0f:64:9f:f3:02:2d:be:f5:74:8e:30:9e:d4:
2b:e8:9a:35:e5:04:d8:8b:82:57:2c:b5:eb:a5:28:
a1:a2:52:f6:2c:2e:3e:66:63:6e:1c:be:eb:85:17:
cd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E1:4E:1A:D6:FF:0B:B4:C2:50:33:34:1E:13:D8:2A:37:C8:76:1E
X509v3 Authority Key Identifier:
keyid:FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:43:3d:4e:6f:d5:79:81:0f:3b:b9:15:94:82:45:f5:2b:15:
94:a2:78:c0:98:7f:c3:77:24:a6:7c:4a:a9:ec:ad:e9:2b:26:
e9:87:7e:6b:6b:17:f0:47:17:a6:b9:f6:3c:8f:79:d7:d9:32:
e1:8b:45:0f:ba:9e:8c:02:42:45:40:42:2a:b7:ca:2c:f7:66:
1a:5d:a5:41:40:ea:1b:07:7a:2d:b1:e4:b1:9f:d8:3e:d9:88:
11:6d:8f:cb:31:cf:f4:d0:1d:19:e8:74:f6:80:91:2c:4c:e7:
57:9a:38:07:d3:33:c8:d2:82:dc:34:30:d6:80:28:4e:20:97:
4c:6c:04:c4:72:68:74:ed:b1:36:37:46:65:3e:b7:56:7a:29:
36:4f:ae:0c:4e:5e:22:08:f6:e3:e7:df:af:51:dd:a8:7d:62:
f1:77:30:1f:48:4e:3c:a9:1d:8a:c1:f1:c8:16:f6:7f:0c:61:
e5:f5:a0:2e:4b:cb:8d:62:da:2f:08:22:b5:e0:d8:2d:a9:00:
ea:92:cb:b2:d3:c2:d9:5d:1b:8f:58:4b:03:68:e7:af:a1:13:
15:ff:81:4f:cf:df:94:e5:d7:c5:00:12:2b:d8:52:1f:f3:2b:
99:9b:59:59:e3:05:1a:20:fc:9e:52:28:0a:5a:e5:3b:10:c3:
a2:48:33:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHDDenZyTYj2PdrN2Hous9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMmM2YzFhNTU3ZjU4OGI2NDdlMTc5MTFhNjMwMGUzNDJj
NjYxZWIwHhcNMjUwNjA2MjEwMTEyWhcNMjUwNjA3MjEwMTEyWjAzMTEwLwYDVQQD
EyhiY2UxNGUxYWQ2ZmYwYmI0YzI1MDMzMzQxZTEzZDgyYTM3Yzg3NjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24hhllo3SxcIRI1vExHeiHZ/UYwQ
33x9lKllYJNANCzLm/ZmcWWINoiNEpIt1bw06STyKP4UoMe0rRbCPD9hN0VI73sR
vwBLCuwOaqmnrdvUFffjkHPJGPH1rMw/o5ta6iVJDgG8LzS/hTLoBDBbNniYK/PD
jZ++uEUAd5J3L2MHQDdXblOs64CLrE0+JU3eieNMwIZmkF6JgUVnTMhUTU3JMAyJ
hQxEGQvRFYteU7i0h36/R0iD1JX5HmqQEIeDnl9phX8inW0oKFQlAPGIsxBKGw9k
n/MCLb71dI4wntQr6Jo15QTYi4JXLLXrpSiholL2LC4+ZmNuHL7rhRfNOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzhThrW/wu0wlAzNB4T2Co3yHYeMB8GA1UdIwQY
MBaAFP0sbBpVf1iLZH4XkRpjAONCxmHrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1N4c0dsVl9XSXRrZmhlUkdtTUE0MExHWWVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82YTNmNmUtMmQ0My00ZWM2LWE3ZWMt
ZTEzZGViNGFjN2I3LzEvX1N4c0dsVl9XSXRrZmhlUkdtTUE0MExHWWVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS82YTNmNmUtMmQ0My00ZWM2LWE3ZWMtZTEzZGViNGFjN2I3
LzEvX1N4c0dsVl9XSXRrZmhlUkdtTUE0MExHWWVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe0M9Tm/V
eYEPO7kVlIJF9SsVlKJ4wJh/w3ckpnxKqeyt6Ssm6Yd+a2sX8EcXprn2PI9519ky
4YtFD7qejAJCRUBCKrfKLPdmGl2lQUDqGwd6LbHksZ/YPtmIEW2PyzHP9NAdGeh0
9oCRLEznV5o4B9MzyNKC3DQw1oAoTiCXTGwExHJodO2xNjdGZT63VnopNk+uDE5e
Igj24+ffr1HdqH1i8XcwH0hOPKkdisHxyBb2fwxh5fWgLkvLjWLaLwgiteDYLakA
6pLLstPC2V0bj1hLA2jnr6ETFf+BT8/flOXXxQASK9hSH/MrmZtZWeMFGiD8nlIo
ClrlOxDDokgzLw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 02:37:26 2025 by rpki-client