Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
File: svJ5U61GkMBo-0D581YAM3m7Y_g.mft (raw, json)
Hash identifier: KOMfjni6SzrRUxB8nxTgzKd0Yw8wC9K8HjKFbZfTs6Q=
Subject key identifier: 64:F6:5F:3B:28:16:38:B4:CC:6D:76:58:0F:45:27:40:F6:9C:5C:74
Authority key identifier: B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
Certificate issuer: /CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Certificate serial: 01974930FC7C220FF954797E40E703C872F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
Manifest number: 0F0C
Signing time: Sat 07 Jun 2025 07:00:36 +0000
Manifest this update: Sat 07 Jun 2025 07:00:36 +0000
Manifest next update: Sun 08 Jun 2025 07:00:36 +0000
Files and hashes: 1: bkaEgwUfFQuvU4deHKYEq645oxo.roa (hash: a6t899hSFrNnCxDeJsEHX7KWBkAwoAJJxMP3KbPkcsM=)
2: gM8Vs4rZduYc-FMusqbqCtswvSM.roa (hash: PdGvc2+s2b+cxeznU9E/uPp7OuLxD8n8FSf7bdTA3Io=)
3: svJ5U61GkMBo-0D581YAM3m7Y_g.crl (hash: Av4JsGtIQaDzCDitX8awiiFzgLH8q1+qLk5yb/0l5iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:30:fc:7c:22:0f:f9:54:79:7e:40:e7:03:c8:72:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Validity
Not Before: Jun 7 07:00:36 2025 GMT
Not After : Jun 8 07:00:36 2025 GMT
Subject: CN=64f65f3b281638b4cc6d76580f452740f69c5c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:59:da:f9:f2:47:b1:51:2e:42:c8:ab:d0:9f:
3d:26:3d:e5:ac:4f:8c:eb:e2:c1:08:db:05:23:cc:
2e:92:ca:87:3a:84:38:c5:be:5e:b9:5e:67:9c:03:
3d:b0:bd:b6:d6:ec:b1:b2:fb:ba:8b:37:c6:bf:5b:
45:a8:54:db:3c:9e:2e:2d:06:41:59:59:ce:a3:e8:
ad:45:97:32:5b:d9:b7:0e:f7:c9:10:cb:85:70:f8:
2d:87:e5:fa:fa:76:a6:c4:7b:1a:47:86:37:05:73:
5d:05:c4:47:43:f1:68:d1:7b:8b:37:a5:b4:99:0b:
70:8d:d5:c4:d5:9e:d5:88:88:a9:68:b6:58:d6:38:
40:b4:90:2e:b5:63:c5:f8:ae:a7:f2:f6:40:7a:a3:
94:a0:51:48:ce:af:6b:78:12:34:cd:bf:7d:d2:0c:
bd:92:f5:5d:10:69:4b:90:54:7b:2f:7b:23:29:c6:
bc:8b:43:b5:bc:46:66:30:a6:50:d8:ae:fb:6e:18:
92:ee:61:05:f7:2c:94:d6:b7:69:45:bd:9f:b7:1c:
9c:17:36:da:2f:df:45:3c:e1:8a:d9:98:d5:47:72:
a1:ce:a9:c5:79:32:50:14:ab:ca:3f:c9:2f:e4:1b:
ef:66:fa:2e:7a:04:30:d9:40:ae:e6:03:92:bf:57:
88:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F6:5F:3B:28:16:38:B4:CC:6D:76:58:0F:45:27:40:F6:9C:5C:74
X509v3 Authority Key Identifier:
keyid:B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:2a:e2:5e:7b:b5:e5:ab:9b:2a:62:1b:d3:65:81:03:df:04:
5b:0b:82:32:66:58:3d:44:c4:ad:69:6f:9c:3e:ab:b6:af:90:
2d:9d:86:f4:e0:da:cc:dc:ff:71:5a:90:e2:09:4e:56:73:3f:
a4:69:4c:de:40:9d:40:d6:db:ca:5b:b5:29:23:9f:ee:f7:b3:
81:fa:3e:fe:21:25:29:41:b6:ca:92:a8:25:b1:7a:79:39:25:
91:44:43:76:b1:4c:cd:f4:8d:1e:74:49:78:bd:2e:e8:71:08:
2b:66:58:c9:95:b5:69:b7:35:cd:4f:a7:26:59:65:5f:49:f6:
ea:eb:3d:b1:a4:7f:8c:24:d4:90:98:3f:73:0c:97:ad:67:2e:
e8:3d:9f:ed:59:93:e2:be:12:9a:ad:6a:4b:7e:6e:0d:70:83:
a8:8c:04:70:12:d3:fb:c6:52:bd:39:fb:a6:8b:7e:60:83:de:
3b:e3:f8:26:b2:52:20:df:2a:a3:16:bb:9c:36:cf:d8:c8:29:
a5:f5:01:db:84:ba:5e:4c:1c:05:2f:e5:11:0f:e7:1a:4f:74:
be:d8:de:60:a6:b2:a8:33:ba:85:fe:8f:ba:42:ce:72:35:43:
c5:3f:2c:87:d5:5f:74:2a:ea:4d:03:02:73:b6:67:39:a7:5f:
f3:60:58:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMPx8Ig/5VHl+QOcDyHL1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZjI3OTUzYWQ0NjkwYzA2OGZiNDBmOWYzNTYwMDMzNzli
YjYzZjgwHhcNMjUwNjA3MDcwMDM2WhcNMjUwNjA4MDcwMDM2WjAzMTEwLwYDVQQD
Eyg2NGY2NWYzYjI4MTYzOGI0Y2M2ZDc2NTgwZjQ1Mjc0MGY2OWM1Yzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVna+fJHsVEuQsir0J89Jj3lrE+M
6+LBCNsFI8wuksqHOoQ4xb5euV5nnAM9sL221uyxsvu6izfGv1tFqFTbPJ4uLQZB
WVnOo+itRZcyW9m3DvfJEMuFcPgth+X6+namxHsaR4Y3BXNdBcRHQ/Fo0XuLN6W0
mQtwjdXE1Z7ViIipaLZY1jhAtJAutWPF+K6n8vZAeqOUoFFIzq9reBI0zb990gy9
kvVdEGlLkFR7L3sjKca8i0O1vEZmMKZQ2K77bhiS7mEF9yyU1rdpRb2ftxycFzba
L99FPOGK2ZjVR3KhzqnFeTJQFKvKP8kv5BvvZvouegQw2UCu5gOSv1eIEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGT2XzsoFji0zG12WA9FJ0D2nFx0MB8GA1UdIwQY
MBaAFLLyeVOtRpDAaPtA+fNWADN5u2P4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3ZKNVU2MUdrTUJvLTBENTgxWUFNM203WV9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wODk3M2YtZmI2YS00MWU1LTg3MjAt
ZmI0Y2YxMzdjMWU5LzEvc3ZKNVU2MUdrTUJvLTBENTgxWUFNM203WV9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8wODk3M2YtZmI2YS00MWU1LTg3MjAtZmI0Y2YxMzdjMWU5
LzEvc3ZKNVU2MUdrTUJvLTBENTgxWUFNM203WV9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjyriXnu1
5aubKmIb02WBA98EWwuCMmZYPUTErWlvnD6rtq+QLZ2G9ODazNz/cVqQ4glOVnM/
pGlM3kCdQNbbylu1KSOf7vezgfo+/iElKUG2ypKoJbF6eTklkURDdrFMzfSNHnRJ
eL0u6HEIK2ZYyZW1abc1zU+nJlllX0n26us9saR/jCTUkJg/cwyXrWcu6D2f7VmT
4r4Smq1qS35uDXCDqIwEcBLT+8ZSvTn7pot+YIPeO+P4JrJSIN8qoxa7nDbP2Mgp
pfUB24S6XkwcBS/lEQ/nGk90vtjeYKayqDO6hf6PukLOcjVDxT8sh9VfdCrqTQMC
c7ZnOadf82BYZg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:33:45 2025 by rpki-client