Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
File: SvrK0nmIVvDwZaJloQlwaUGsqOo.mft (raw, json)
Hash identifier: 9elszp4uzXMKT+oJnC92wjo1gt/4y0IBlEv5Lzv3j3g=
Subject key identifier: 63:F8:A1:C6:C3:C5:A4:5C:2B:04:3C:EF:B9:FC:48:B0:13:4C:20:40
Authority key identifier: 4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
Certificate issuer: /CN=4afacad2798856f0f065a265a109706941aca8ea
Certificate serial: 01975BDC9929FCD445EC2ECDA963882BC3A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
Manifest number: 111F
Signing time: Tue 10 Jun 2025 22:01:13 +0000
Manifest this update: Tue 10 Jun 2025 22:01:13 +0000
Manifest next update: Wed 11 Jun 2025 22:01:13 +0000
Files and hashes: 1: SvrK0nmIVvDwZaJloQlwaUGsqOo.crl (hash: l7aLUlmg/D9N9P9yprb+nagoQWPDAURBLVXlmCZY04o=)
2: rKZbB3iW2mhQrV3B7dzkdgnj7Hg.roa (hash: bzWIX1UDDDSaemHwck5e4pimDCRd9S56ZPwPBB+GA2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:dc:99:29:fc:d4:45:ec:2e:cd:a9:63:88:2b:c3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4afacad2798856f0f065a265a109706941aca8ea
Validity
Not Before: Jun 10 22:01:13 2025 GMT
Not After : Jun 11 22:01:13 2025 GMT
Subject: CN=63f8a1c6c3c5a45c2b043cefb9fc48b0134c2040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ab:22:67:18:17:a9:a1:dd:dc:9d:c7:56:a2:
a4:d6:aa:cb:c2:b5:df:c5:40:f9:fe:a1:b7:ff:5c:
6d:eb:1f:c9:43:ba:57:df:50:3f:75:4b:de:d3:a9:
15:6c:f8:6a:10:08:c8:96:20:f5:df:63:64:ea:1c:
f8:5e:a2:64:a0:8f:89:b3:b2:9a:a8:70:64:be:25:
d6:c6:15:5b:90:c3:f9:bb:45:bf:4f:14:28:b6:b7:
18:00:26:fb:a2:21:e9:36:a2:cf:e3:61:8c:37:1b:
7e:89:bc:56:ca:d5:9a:59:60:e2:80:6b:6c:49:99:
44:0b:7c:ce:03:1d:8d:20:b8:52:24:c8:23:78:cf:
b2:b5:2e:bd:e6:34:cb:da:a2:8a:9c:e6:74:6c:35:
15:dc:69:1a:04:d8:a9:a5:31:9e:65:85:6a:33:65:
80:e1:a9:6a:c5:80:d4:41:f3:3f:76:d7:84:fe:c9:
f1:31:ab:99:dc:96:50:80:b2:bd:85:ef:44:76:f1:
2e:c1:c7:45:da:7a:b3:b7:16:81:58:dd:48:d4:90:
92:61:69:13:19:c2:03:6a:2c:0b:0f:68:d7:fd:0d:
00:06:c9:f0:29:4b:16:0b:73:dc:4b:08:26:a0:6f:
ea:b2:b3:f5:4a:c4:af:0b:42:34:77:06:53:b6:55:
18:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F8:A1:C6:C3:C5:A4:5C:2B:04:3C:EF:B9:FC:48:B0:13:4C:20:40
X509v3 Authority Key Identifier:
keyid:4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:73:70:db:41:93:0a:5a:e8:76:5e:f5:84:27:63:34:75:dd:
6d:2d:7a:5f:ab:61:e6:81:44:57:be:39:60:b8:82:c2:05:bd:
ce:a5:30:87:da:78:67:02:38:6a:20:00:0d:42:0d:e8:e7:ab:
d0:e4:fd:4d:d9:9d:f2:1d:52:b7:86:cb:a8:c8:8f:dc:f9:f3:
a6:a7:5e:e8:1c:51:63:d7:f3:3b:79:ff:75:ff:d2:96:3a:2d:
ee:b3:b7:11:dc:81:74:0c:9e:2f:4e:f6:8a:95:72:f5:18:9b:
58:cd:83:18:42:c7:c2:a8:9c:22:a3:75:f2:ae:54:a9:5e:7f:
b0:88:02:50:d6:e6:57:80:40:e7:ae:a0:28:21:51:f5:7a:ca:
33:3b:38:2f:4c:63:04:25:56:24:ca:90:9a:1d:ce:fd:0e:33:
f6:0e:fa:26:cd:8b:c5:34:b3:d7:3c:72:b5:2c:f3:5e:9a:7c:
87:c5:56:90:a4:87:ff:85:b5:90:97:ae:c4:99:d8:a3:79:42:
0a:40:46:f5:ef:a8:5a:28:e0:13:ec:b9:e4:ac:61:51:70:9b:
a6:cf:17:86:17:a5:95:8b:04:86:4b:09:49:6e:b1:94:69:f6:
40:8a:2f:2f:ce:3e:b2:5d:03:6a:0d:6d:fe:c0:b6:10:b0:e5:
c3:fc:d0:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdb3Jkp/NRF7C7NqWOIK8OkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhZmFjYWQyNzk4ODU2ZjBmMDY1YTI2NWExMDk3MDY5NDFh
Y2E4ZWEwHhcNMjUwNjEwMjIwMTEzWhcNMjUwNjExMjIwMTEzWjAzMTEwLwYDVQQD
Eyg2M2Y4YTFjNmMzYzVhNDVjMmIwNDNjZWZiOWZjNDhiMDEzNGMyMDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqsiZxgXqaHd3J3HVqKk1qrLwrXf
xUD5/qG3/1xt6x/JQ7pX31A/dUve06kVbPhqEAjIliD132Nk6hz4XqJkoI+Js7Ka
qHBkviXWxhVbkMP5u0W/TxQotrcYACb7oiHpNqLP42GMNxt+ibxWytWaWWDigGts
SZlEC3zOAx2NILhSJMgjeM+ytS695jTL2qKKnOZ0bDUV3GkaBNippTGeZYVqM2WA
4alqxYDUQfM/dteE/snxMauZ3JZQgLK9he9EdvEuwcdF2nqztxaBWN1I1JCSYWkT
GcIDaiwLD2jX/Q0ABsnwKUsWC3PcSwgmoG/qsrP1SsSvC0I0dwZTtlUYuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGP4ocbDxaRcKwQ877n8SLATTCBAMB8GA1UdIwQY
MBaAFEr6ytJ5iFbw8GWiZaEJcGlBrKjqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3ZySzBubUlWdkR3WmFKbG9RbHdhVUdzcU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9lODJkMmEtNDA0MS00ODExLTg3YTUt
NzgzNDY5MjY5YjM1LzEvU3ZySzBubUlWdkR3WmFKbG9RbHdhVUdzcU9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9lODJkMmEtNDA0MS00ODExLTg3YTUtNzgzNDY5MjY5YjM1
LzEvU3ZySzBubUlWdkR3WmFKbG9RbHdhVUdzcU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPHNw20GT
Clrodl71hCdjNHXdbS16X6th5oFEV745YLiCwgW9zqUwh9p4ZwI4aiAADUIN6Oer
0OT9Tdmd8h1St4bLqMiP3Pnzpqde6BxRY9fzO3n/df/Sljot7rO3EdyBdAyeL072
ipVy9RibWM2DGELHwqicIqN18q5UqV5/sIgCUNbmV4BA566gKCFR9XrKMzs4L0xj
BCVWJMqQmh3O/Q4z9g76Js2LxTSz1zxytSzzXpp8h8VWkKSH/4W1kJeuxJnYo3lC
CkBG9e+oWijgE+y55KxhUXCbps8XhhellYsEhksJSW6xlGn2QIovL84+sl0Dag1t
/sC2ELDlw/zQPA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 03:36:59 2025 by rpki-client