Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
File: SvrK0nmIVvDwZaJloQlwaUGsqOo.mft (raw, json)
Hash identifier: Ay2uMZrYTJQWzKaeDDGfusX5nXRBra+g19nHsJsfCws=
Subject key identifier: F9:09:F9:3B:02:05:5F:5F:4A:46:34:C7:E7:91:32:44:1D:A6:44:87
Authority key identifier: 4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
Certificate issuer: /CN=4afacad2798856f0f065a265a109706941aca8ea
Certificate serial: 019761A808D546AD0096858D5E1A0FF3F22E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
Manifest number: 1122
Signing time: Thu 12 Jun 2025 01:01:31 +0000
Manifest this update: Thu 12 Jun 2025 01:01:31 +0000
Manifest next update: Fri 13 Jun 2025 01:01:31 +0000
Files and hashes: 1: SvrK0nmIVvDwZaJloQlwaUGsqOo.crl (hash: I2dqFULpx5umA9QHdTfFJDxVUhQ562zrAnB83kipIn0=)
2: rKZbB3iW2mhQrV3B7dzkdgnj7Hg.roa (hash: bzWIX1UDDDSaemHwck5e4pimDCRd9S56ZPwPBB+GA2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:a8:08:d5:46:ad:00:96:85:8d:5e:1a:0f:f3:f2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4afacad2798856f0f065a265a109706941aca8ea
Validity
Not Before: Jun 12 01:01:31 2025 GMT
Not After : Jun 13 01:01:31 2025 GMT
Subject: CN=f909f93b02055f5f4a4634c7e79132441da64487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:52:25:b8:94:82:cf:0c:36:0e:3b:da:b4:4d:
34:74:4f:44:7d:83:7f:50:18:d5:a1:25:6b:e5:ab:
cf:c3:64:38:01:43:4a:95:38:57:a0:ac:10:92:f1:
d1:5e:8c:81:35:49:66:3d:6c:64:5c:ef:f7:61:3f:
8c:b2:af:71:c6:6f:ad:26:be:2a:85:2b:1d:a7:e1:
36:b8:86:27:63:5e:57:9a:07:1d:c8:ef:16:97:12:
3a:3d:8c:77:34:c7:3f:46:a5:46:58:3b:e3:54:bc:
8e:87:4b:ac:0c:fa:aa:23:65:f1:45:8b:fc:06:50:
83:7d:b7:6e:db:cc:91:bf:10:f5:2b:44:5f:dc:ae:
07:79:63:46:e5:a5:04:c3:98:13:4c:55:53:a7:4b:
70:f9:6e:c2:1f:1c:d6:1e:cb:e5:18:b2:b4:4d:36:
e5:77:ef:82:da:db:93:1e:48:6e:de:ce:fb:09:56:
20:a4:05:12:6e:fc:b2:75:7e:d3:25:e9:19:4f:ab:
0a:7b:d0:7b:ab:f4:6b:7c:b1:79:31:d1:c8:77:95:
d4:3e:0d:d9:02:e1:34:7c:e0:1b:c6:aa:cc:71:66:
e1:11:e2:78:47:35:0a:5d:3b:9a:92:4e:db:e9:b6:
22:0e:44:64:7d:79:b4:78:fc:9f:83:eb:82:16:78:
7d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:09:F9:3B:02:05:5F:5F:4A:46:34:C7:E7:91:32:44:1D:A6:44:87
X509v3 Authority Key Identifier:
keyid:4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:6d:83:24:e5:c6:1a:67:b6:53:ad:15:d2:09:02:e4:4f:0d:
46:e9:a7:80:b4:6d:b3:df:ee:ab:e9:c5:1d:03:6b:a4:a3:b6:
ba:2d:78:51:24:ec:c2:e4:44:04:98:69:df:55:c8:9d:16:4c:
81:e9:e7:ad:28:6b:2e:42:a9:f8:00:3b:42:bb:5b:10:63:c9:
f0:f9:10:53:79:13:e2:36:dc:6b:8f:e8:aa:7f:0b:b7:45:ef:
aa:3d:c0:b2:66:5d:c5:1b:e3:3a:82:48:f6:dc:d2:45:84:14:
e6:5b:be:47:42:6c:c3:e6:bb:97:b5:9b:fc:6b:56:55:40:c2:
13:27:05:4c:95:21:d7:e4:25:13:86:3e:4f:b2:fd:0a:fa:1e:
d6:71:5f:8e:3c:a5:6a:6b:d6:00:47:7b:9f:58:7d:ce:f4:83:
99:0b:25:d1:d3:50:a8:ca:72:52:93:7c:3b:94:b6:05:55:c7:
60:e2:bc:b3:2d:58:8e:a5:59:86:9f:e6:33:4c:0c:01:0f:7e:
3c:af:92:ef:dc:2f:58:a7:bc:23:42:8d:ef:44:91:ec:de:23:
71:fd:bf:f3:dc:6e:c7:58:ca:19:a8:09:3d:dc:97:8b:d5:d6:
ef:97:46:c3:cb:d1:df:7b:d2:ac:6e:4d:e2:51:ee:b1:da:a0:
78:76:33:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdhqAjVRq0AloWNXhoP8/IuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhZmFjYWQyNzk4ODU2ZjBmMDY1YTI2NWExMDk3MDY5NDFh
Y2E4ZWEwHhcNMjUwNjEyMDEwMTMxWhcNMjUwNjEzMDEwMTMxWjAzMTEwLwYDVQQD
EyhmOTA5ZjkzYjAyMDU1ZjVmNGE0NjM0YzdlNzkxMzI0NDFkYTY0NDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01IluJSCzww2DjvatE00dE9EfYN/
UBjVoSVr5avPw2Q4AUNKlThXoKwQkvHRXoyBNUlmPWxkXO/3YT+Msq9xxm+tJr4q
hSsdp+E2uIYnY15XmgcdyO8WlxI6PYx3NMc/RqVGWDvjVLyOh0usDPqqI2XxRYv8
BlCDfbdu28yRvxD1K0Rf3K4HeWNG5aUEw5gTTFVTp0tw+W7CHxzWHsvlGLK0TTbl
d++C2tuTHkhu3s77CVYgpAUSbvyydX7TJekZT6sKe9B7q/RrfLF5MdHId5XUPg3Z
AuE0fOAbxqrMcWbhEeJ4RzUKXTuakk7b6bYiDkRkfXm0ePyfg+uCFnh9dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkJ+TsCBV9fSkY0x+eRMkQdpkSHMB8GA1UdIwQY
MBaAFEr6ytJ5iFbw8GWiZaEJcGlBrKjqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3ZySzBubUlWdkR3WmFKbG9RbHdhVUdzcU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9lODJkMmEtNDA0MS00ODExLTg3YTUt
NzgzNDY5MjY5YjM1LzEvU3ZySzBubUlWdkR3WmFKbG9RbHdhVUdzcU9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9lODJkMmEtNDA0MS00ODExLTg3YTUtNzgzNDY5MjY5YjM1
LzEvU3ZySzBubUlWdkR3WmFKbG9RbHdhVUdzcU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALm2DJOXG
Gme2U60V0gkC5E8NRumngLRts9/uq+nFHQNrpKO2ui14USTswuREBJhp31XInRZM
gennrShrLkKp+AA7QrtbEGPJ8PkQU3kT4jbca4/oqn8Lt0Xvqj3AsmZdxRvjOoJI
9tzSRYQU5lu+R0Jsw+a7l7Wb/GtWVUDCEycFTJUh1+QlE4Y+T7L9Cvoe1nFfjjyl
amvWAEd7n1h9zvSDmQsl0dNQqMpyUpN8O5S2BVXHYOK8sy1YjqVZhp/mM0wMAQ9+
PK+S79wvWKe8I0KN70SR7N4jcf2/89xux1jKGagJPdyXi9XW75dGw8vR33vSrG5N
4lHusdqgeHYznQ==
-----END CERTIFICATE-----
Generated at Thu Jun 12 04:13:05 2025 by rpki-client