
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
File: Sv7PZkKkULU7B21EZILZwaid7XQ.mft (raw, json)
Hash identifier: AsFXIaT9v8Xmt4TKENf7vWK9PTegCeMbBUpIB+HU79o=
Subject key identifier: 68:7C:11:64:AF:C5:35:98:96:11:DF:EC:D2:9C:53:2B:11:0A:7E:05
Authority key identifier: 4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74
Certificate issuer: /CN=4afecf6642a450b53b076d446482d9c1a89ded74
Certificate serial: 0197518FCADD00C3E8C09E1D48CE4210FE63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
Manifest number: 1513
Signing time: Sun 08 Jun 2025 22:01:07 +0000
Manifest this update: Sun 08 Jun 2025 22:01:07 +0000
Manifest next update: Mon 09 Jun 2025 22:01:07 +0000
Files and hashes: 1: Sv7PZkKkULU7B21EZILZwaid7XQ.crl (hash: iwq7X9z76daHovqQBy3X8kasBzxwskMwsjw7xm6ml0w=)
2: p61VML8uLf1Dr4htLC12P2Sv8GU.roa (hash: RPd5GMtMlOZE/03iU2ovXiDZPGo3A/MLaIBoa6BmxD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:8f:ca:dd:00:c3:e8:c0:9e:1d:48:ce:42:10:fe:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4afecf6642a450b53b076d446482d9c1a89ded74
Validity
Not Before: Jun 8 22:01:07 2025 GMT
Not After : Jun 9 22:01:07 2025 GMT
Subject: CN=687c1164afc535989611dfecd29c532b110a7e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6c:09:34:0a:20:b9:30:b5:c5:6c:cf:05:54:
f5:b9:1a:da:07:28:51:6b:46:43:14:d8:c4:7c:68:
13:1e:f2:f3:e2:5c:ca:75:19:81:be:fb:35:6a:38:
fc:a4:b7:9e:b0:f9:16:ed:49:8f:40:23:62:9d:70:
60:e4:35:32:dd:29:a7:69:18:a9:a1:54:74:11:4a:
8f:b1:2d:27:e1:af:2e:dd:23:05:80:9e:93:ac:ab:
21:cf:a4:e5:26:5d:ce:9d:74:8c:a1:02:cd:27:30:
30:0d:8b:f0:67:b1:94:3f:fd:eb:45:b1:7f:f3:b5:
80:e6:49:ed:41:e5:f2:05:3a:c5:37:b3:d0:05:57:
55:49:d8:08:31:75:cf:a4:f8:a5:98:f3:ed:81:8b:
19:fe:30:c6:3e:4d:91:3a:84:f5:79:a1:62:18:b1:
3f:b1:d3:a4:88:cd:01:6f:8b:2a:44:e7:3b:42:44:
2e:7c:23:c9:23:fa:7c:b4:19:04:c9:5e:13:c4:ac:
ae:c7:c2:33:0e:3e:1a:89:73:6e:63:1f:31:8e:f6:
e3:ba:80:a3:b9:4a:d7:1e:81:3c:25:e8:f7:0e:22:
d2:0e:02:2a:4a:2f:5c:04:1f:44:b1:92:d4:d2:fa:
61:6b:bb:ef:f2:9f:5d:a2:7c:2d:5a:86:03:d5:5e:
07:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7C:11:64:AF:C5:35:98:96:11:DF:EC:D2:9C:53:2B:11:0A:7E:05
X509v3 Authority Key Identifier:
keyid:4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:89:dc:e2:8c:e5:2c:22:ef:0a:2f:b3:87:41:08:a0:d1:7f:
c5:be:5e:f7:21:b3:56:87:ab:4d:7b:46:ba:3d:fd:09:fb:24:
56:8f:71:55:a6:c0:0c:14:5c:f8:f2:13:15:9c:16:5a:05:a6:
5b:84:92:cb:b1:e9:3c:e7:1f:06:b3:51:7b:61:a8:4e:07:73:
07:c9:da:88:33:f5:5e:69:b2:ee:e1:ac:ae:6c:92:a6:03:3e:
91:69:c0:bd:93:82:1d:85:47:06:3b:b5:17:f6:3d:c3:f1:a3:
20:41:b2:4c:a1:00:c9:d8:0d:91:39:0c:03:88:b9:bf:5f:90:
ba:0c:0e:cf:ef:79:e9:b7:da:40:ea:e6:ce:fc:4a:dc:5d:f5:
3e:c3:e5:80:6c:10:c3:be:e5:3d:71:0b:34:49:fa:b9:04:18:
90:4d:94:99:b5:e5:bd:a0:2c:1b:7f:05:ba:cc:bf:72:62:29:
84:b2:29:77:ea:05:ac:7d:4f:ac:e1:e6:51:79:ad:a9:42:3f:
72:59:91:8c:a0:0b:99:24:ef:31:63:ac:8c:db:7e:d8:31:cc:
28:a1:60:ed:e4:00:cf:77:7b:fb:4c:43:34:82:15:40:ea:11:
07:e2:8d:9f:93:88:92:c7:a2:25:49:cc:ea:3e:c8:b3:c2:80:
6c:c0:41:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdRj8rdAMPowJ4dSM5CEP5jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhZmVjZjY2NDJhNDUwYjUzYjA3NmQ0NDY0ODJkOWMxYTg5
ZGVkNzQwHhcNMjUwNjA4MjIwMTA3WhcNMjUwNjA5MjIwMTA3WjAzMTEwLwYDVQQD
Eyg2ODdjMTE2NGFmYzUzNTk4OTYxMWRmZWNkMjljNTMyYjExMGE3ZTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGwJNAoguTC1xWzPBVT1uRraByhR
a0ZDFNjEfGgTHvLz4lzKdRmBvvs1ajj8pLeesPkW7UmPQCNinXBg5DUy3SmnaRip
oVR0EUqPsS0n4a8u3SMFgJ6TrKshz6TlJl3OnXSMoQLNJzAwDYvwZ7GUP/3rRbF/
87WA5kntQeXyBTrFN7PQBVdVSdgIMXXPpPilmPPtgYsZ/jDGPk2ROoT1eaFiGLE/
sdOkiM0Bb4sqROc7QkQufCPJI/p8tBkEyV4TxKyux8IzDj4aiXNuYx8xjvbjuoCj
uUrXHoE8Jej3DiLSDgIqSi9cBB9EsZLU0vpha7vv8p9donwtWoYD1V4H5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGh8EWSvxTWYlhHf7NKcUysRCn4FMB8GA1UdIwQY
MBaAFEr+z2ZCpFC1OwdtRGSC2cGone10MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3Y3UFprS2tVTFU3QjIxRVpJTFp3YWlkN1hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81ZDZmNmMtYjAwNi00NTYzLTkxYWQt
NDI4YTExMWFjNWUwLzEvU3Y3UFprS2tVTFU3QjIxRVpJTFp3YWlkN1hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS81ZDZmNmMtYjAwNi00NTYzLTkxYWQtNDI4YTExMWFjNWUw
LzEvU3Y3UFprS2tVTFU3QjIxRVpJTFp3YWlkN1hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEYnc4ozl
LCLvCi+zh0EIoNF/xb5e9yGzVoerTXtGuj39CfskVo9xVabADBRc+PITFZwWWgWm
W4SSy7HpPOcfBrNRe2GoTgdzB8naiDP1Xmmy7uGsrmySpgM+kWnAvZOCHYVHBju1
F/Y9w/GjIEGyTKEAydgNkTkMA4i5v1+QugwOz+956bfaQOrmzvxK3F31PsPlgGwQ
w77lPXELNEn6uQQYkE2UmbXlvaAsG38Fusy/cmIphLIpd+oFrH1PrOHmUXmtqUI/
clmRjKALmSTvMWOsjNt+2DHMKKFg7eQAz3d7+0xDNIIVQOoRB+KNn5OIkseiJUnM
6j7Is8KAbMBB5w==
-----END CERTIFICATE-----
Generated at Mon Jun 9 09:09:36 2025 by rpki-client