Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
File: sKT8KvOK9bT1hh4n_QB-YktfmwI.mft (raw, json)
Hash identifier: Sv6TpYPGdgWSSYN2xSiNkBlWaR9xfU9s0NYQ6hYM/5k=
Subject key identifier: 4B:6E:C7:32:C1:77:6C:30:C3:B0:A9:F4:87:A8:71:DE:72:D7:84:FE
Authority key identifier: B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
Certificate issuer: /CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Certificate serial: 019758367C8766851F750C4DD84CBEB00B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
Manifest number: 1454
Signing time: Tue 10 Jun 2025 05:00:55 +0000
Manifest this update: Tue 10 Jun 2025 05:00:55 +0000
Manifest next update: Wed 11 Jun 2025 05:00:55 +0000
Files and hashes: 1: EhMQv2Hd3Y0AB-EaVNPw9A1el2Y.roa (hash: bVKsgWkrvgH7jweX9NZzvJ58rjQAc648XkG11nW0Xqk=)
2: sKT8KvOK9bT1hh4n_QB-YktfmwI.crl (hash: u3axuv7RlMK1tGQssZFHX17as8seU5CbBZCxjVSEX50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:36:7c:87:66:85:1f:75:0c:4d:d8:4c:be:b0:0b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Validity
Not Before: Jun 10 05:00:55 2025 GMT
Not After : Jun 11 05:00:55 2025 GMT
Subject: CN=4b6ec732c1776c30c3b0a9f487a871de72d784fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:18:fd:b8:15:29:0e:7f:b8:13:68:3b:66:20:
d4:34:36:0c:b1:76:49:1c:be:69:f3:24:72:e3:dc:
6d:7a:5c:12:65:6d:83:cf:47:dd:bc:7a:76:44:8b:
4b:f3:91:42:38:dd:c0:5b:94:0d:2f:a2:8b:46:2b:
25:e3:79:ab:af:32:cb:26:c6:5c:78:70:9d:23:dc:
59:f1:36:ad:64:7f:ce:24:8f:ab:9f:49:fd:42:93:
f6:a6:53:60:62:72:9e:f7:88:45:de:d2:df:12:4c:
b2:84:b7:b6:f9:f0:45:38:92:3b:e9:af:83:5c:70:
22:fb:6d:45:2f:f0:b7:79:26:fb:9a:65:7e:e6:ce:
87:74:fe:86:64:bd:79:a3:c0:5a:86:a9:24:c3:98:
0b:d7:45:28:db:9c:36:46:8d:24:0d:d6:3e:e5:b2:
e3:1f:15:05:68:40:c6:53:d3:9e:ed:ed:09:98:b7:
5d:ba:83:40:75:01:b8:6c:92:93:d2:4a:87:67:8d:
83:b4:59:1d:1c:bc:91:41:dc:68:58:95:22:c8:13:
71:c3:c9:b0:3b:43:2d:98:b5:05:7e:11:8b:91:d3:
56:8a:f6:a3:c5:94:79:15:b1:25:e6:b6:db:95:ad:
7e:e4:f3:41:58:0d:a2:38:50:6d:cf:53:56:32:1a:
99:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6E:C7:32:C1:77:6C:30:C3:B0:A9:F4:87:A8:71:DE:72:D7:84:FE
X509v3 Authority Key Identifier:
keyid:B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7a:6f:f2:bc:33:04:ad:57:dc:e7:24:45:37:11:47:c8:52:
aa:f6:42:a1:ee:b3:6f:8e:3a:a5:fb:32:8e:d3:5a:52:41:09:
3f:9f:6b:d3:90:b4:b3:c0:9d:46:56:14:7f:aa:66:4d:f4:49:
32:e9:64:07:14:41:9e:f1:2e:0f:9b:5e:06:79:3b:2f:d6:ac:
e9:82:79:17:e6:6a:39:6c:f5:76:16:3a:9b:28:0c:aa:ac:74:
73:e2:13:26:2e:73:9c:7e:60:37:20:30:f6:ae:47:1d:aa:d0:
92:d8:6d:4f:81:bf:74:b5:c6:25:02:25:ac:fa:cd:9d:0c:cd:
c4:47:ce:ea:40:f4:b7:26:e9:43:d4:af:6c:54:0f:2e:22:9b:
ad:98:dd:9b:57:c3:22:82:97:06:5a:f0:d4:10:21:71:a1:f8:
36:e6:d7:2a:59:eb:56:17:a1:64:dd:d4:ae:32:2c:39:3c:b8:
9f:83:3c:7a:b2:fa:fa:f9:7a:a5:67:50:1f:c1:70:fd:45:7c:
28:6a:de:a0:c4:99:d6:bf:ae:d9:af:17:f1:ef:12:c9:e8:4a:
23:4e:ea:b1:fa:1f:2b:9f:22:53:fc:19:58:0e:60:5d:1e:50:
4f:60:54:46:6f:1a:4a:bb:3f:96:ad:a2:60:97:cb:c0:e9:46:
36:3f:7d:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdYNnyHZoUfdQxN2Ey+sAs2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYTRmYzJhZjM4YWY1YjRmNTg2MWUyN2ZkMDA3ZTYyNGI1
ZjliMDIwHhcNMjUwNjEwMDUwMDU1WhcNMjUwNjExMDUwMDU1WjAzMTEwLwYDVQQD
Eyg0YjZlYzczMmMxNzc2YzMwYzNiMGE5ZjQ4N2E4NzFkZTcyZDc4NGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Rj9uBUpDn+4E2g7ZiDUNDYMsXZJ
HL5p8yRy49xtelwSZW2Dz0fdvHp2RItL85FCON3AW5QNL6KLRisl43mrrzLLJsZc
eHCdI9xZ8TatZH/OJI+rn0n9QpP2plNgYnKe94hF3tLfEkyyhLe2+fBFOJI76a+D
XHAi+21FL/C3eSb7mmV+5s6HdP6GZL15o8Bahqkkw5gL10Uo25w2Ro0kDdY+5bLj
HxUFaEDGU9Oe7e0JmLdduoNAdQG4bJKT0kqHZ42DtFkdHLyRQdxoWJUiyBNxw8mw
O0MtmLUFfhGLkdNWivajxZR5FbEl5rbbla1+5PNBWA2iOFBtz1NWMhqZ7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtuxzLBd2www7Cp9Ieocd5y14T+MB8GA1UdIwQY
MBaAFLCk/CrzivW09YYeJ/0AfmJLX5sCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0tUOEt2T0s5YlQxaGg0bl9RQi1Za3RmbXdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hODBkYmYtNWNiNC00ZTI2LWFkYWYt
NjhmZTA4NjIyNjE0LzEvc0tUOEt2T0s5YlQxaGg0bl9RQi1Za3RmbXdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9hODBkYmYtNWNiNC00ZTI2LWFkYWYtNjhmZTA4NjIyNjE0
LzEvc0tUOEt2T0s5YlQxaGg0bl9RQi1Za3RmbXdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXpv8rwz
BK1X3OckRTcRR8hSqvZCoe6zb446pfsyjtNaUkEJP59r05C0s8CdRlYUf6pmTfRJ
MulkBxRBnvEuD5teBnk7L9as6YJ5F+ZqOWz1dhY6mygMqqx0c+ITJi5znH5gNyAw
9q5HHarQkthtT4G/dLXGJQIlrPrNnQzNxEfO6kD0tybpQ9SvbFQPLiKbrZjdm1fD
IoKXBlrw1BAhcaH4NubXKlnrVhehZN3UrjIsOTy4n4M8erL6+vl6pWdQH8Fw/UV8
KGreoMSZ1r+u2a8X8e8SyehKI07qsfofK58iU/wZWA5gXR5QT2BURm8aSrs/lq2i
YJfLwOlGNj99SQ==
-----END CERTIFICATE-----
Generated at Tue Jun 10 12:58:59 2025 by rpki-client