Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
File: SdWTfY5gK0jLL_UXFtmV0jofPho.mft (raw, json)
Hash identifier: Dy5JyTHqNgbe8gx1FFuTASFdz+pW2PT904UDJ9BQ9Ts=
Subject key identifier: EC:2A:AD:F1:9C:28:EE:AD:C4:72:06:D8:00:7B:A1:54:7B:EF:60:E4
Authority key identifier: 49:D5:93:7D:8E:60:2B:48:CB:2F:F5:17:16:D9:95:D2:3A:1F:3E:1A
Certificate issuer: /CN=49d5937d8e602b48cb2ff51716d995d23a1f3e1a
Certificate serial: 01974E57837E1A36DACD96ADCF728E218EAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
Manifest number: 0E42
Signing time: Sun 08 Jun 2025 07:00:47 +0000
Manifest this update: Sun 08 Jun 2025 07:00:47 +0000
Manifest next update: Mon 09 Jun 2025 07:00:47 +0000
Files and hashes: 1: SdWTfY5gK0jLL_UXFtmV0jofPho.crl (hash: +x31Q5rDAhk5SkY/iLP20/thtz1/Be7KgYDE7IE4sCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:83:7e:1a:36:da:cd:96:ad:cf:72:8e:21:8e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d5937d8e602b48cb2ff51716d995d23a1f3e1a
Validity
Not Before: Jun 8 07:00:47 2025 GMT
Not After : Jun 9 07:00:47 2025 GMT
Subject: CN=ec2aadf19c28eeadc47206d8007ba1547bef60e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f1:3c:63:14:2c:92:20:58:f2:4f:d0:4e:b5:
32:08:87:5b:ff:41:92:f7:6c:28:4f:5c:ec:69:10:
25:35:4d:1b:f7:02:20:2e:14:29:e6:44:24:5f:2f:
8f:3f:69:56:df:a2:a0:af:8d:81:ec:8d:7f:d6:18:
61:1c:00:64:87:c6:ad:3f:80:f5:84:25:c4:7b:06:
b7:1b:10:0e:35:5f:6e:db:13:29:f1:c4:61:03:f9:
c1:f8:0f:f5:82:9f:b4:75:ab:87:89:6e:cd:df:fc:
e5:af:f5:86:55:96:a6:c3:9e:3f:02:74:9c:30:fc:
8c:83:97:7c:36:bf:52:54:e7:8c:9e:35:cc:31:3b:
4f:25:5d:66:18:a2:68:ef:17:0c:60:b3:85:c1:a5:
60:96:2e:56:36:64:3f:f1:d7:b3:65:af:48:f2:0e:
24:65:b0:61:96:91:a1:35:d7:19:f6:90:a0:51:cb:
3a:64:33:54:a4:d4:2d:dd:14:c1:96:88:c5:e7:c5:
0f:ba:6d:4a:ea:90:da:d8:9f:41:c0:2f:7f:74:9a:
ed:48:cd:a3:74:e8:2a:e1:c3:2a:e1:fc:0c:41:1b:
81:c2:27:6f:be:a6:ba:8c:41:0d:7a:73:7f:23:06:
13:3b:63:90:14:af:ea:6e:81:e4:42:e6:f6:e0:06:
e6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2A:AD:F1:9C:28:EE:AD:C4:72:06:D8:00:7B:A1:54:7B:EF:60:E4
X509v3 Authority Key Identifier:
keyid:49:D5:93:7D:8E:60:2B:48:CB:2F:F5:17:16:D9:95:D2:3A:1F:3E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:92:76:5a:64:ac:46:0c:f4:8e:99:4f:ed:9b:81:65:bb:8e:
27:7f:9f:26:c1:85:04:76:c5:58:fd:df:b2:76:ad:47:46:50:
d7:2e:6c:a6:a3:6b:cd:87:c5:b9:b9:06:63:66:9d:05:3e:6f:
f6:17:9a:ae:7b:0c:22:5f:53:23:c4:9f:7a:ac:30:aa:c3:35:
22:5c:86:e2:aa:77:2b:6b:48:99:fe:83:87:97:71:c0:58:61:
75:bc:7b:92:ec:3e:29:51:aa:3a:bc:15:9e:0a:f7:63:27:11:
4a:f2:c7:a7:cb:04:bc:05:f8:b8:60:2c:67:8c:e3:68:32:9f:
3e:3d:bd:3b:af:35:42:da:36:ed:84:6a:8f:59:ea:3e:37:5b:
f2:01:df:10:bf:60:1a:4c:74:00:42:91:b2:6d:4b:19:3f:8c:
f2:b0:8f:a1:f7:f3:90:36:f3:5c:3c:68:ed:e9:6d:0a:63:c9:
2c:b4:6b:56:d7:76:01:b0:e0:91:7a:2e:38:d5:f5:2c:7b:43:
82:7b:eb:c4:40:00:c7:ca:05:62:de:38:43:80:ae:f1:e7:5b:
1d:1b:fe:b1:c7:95:dd:38:9c:bc:05:d0:33:97:59:2a:22:e6:
0e:fc:1e:e2:55:1d:3d:25:3d:19:e9:5c:2f:68:87:a2:9c:5f:
ae:17:ad:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOV4N+GjbazZatz3KOIY6uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZDU5MzdkOGU2MDJiNDhjYjJmZjUxNzE2ZDk5NWQyM2Ex
ZjNlMWEwHhcNMjUwNjA4MDcwMDQ3WhcNMjUwNjA5MDcwMDQ3WjAzMTEwLwYDVQQD
EyhlYzJhYWRmMTljMjhlZWFkYzQ3MjA2ZDgwMDdiYTE1NDdiZWY2MGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/E8YxQskiBY8k/QTrUyCIdb/0GS
92woT1zsaRAlNU0b9wIgLhQp5kQkXy+PP2lW36Kgr42B7I1/1hhhHABkh8atP4D1
hCXEewa3GxAONV9u2xMp8cRhA/nB+A/1gp+0dauHiW7N3/zlr/WGVZamw54/AnSc
MPyMg5d8Nr9SVOeMnjXMMTtPJV1mGKJo7xcMYLOFwaVgli5WNmQ/8dezZa9I8g4k
ZbBhlpGhNdcZ9pCgUcs6ZDNUpNQt3RTBlojF58UPum1K6pDa2J9BwC9/dJrtSM2j
dOgq4cMq4fwMQRuBwidvvqa6jEENenN/IwYTO2OQFK/qboHkQub24AbmgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwqrfGcKO6txHIG2AB7oVR772DkMB8GA1UdIwQY
MBaAFEnVk32OYCtIyy/1FxbZldI6Hz4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2RXVGZZNWdLMGpMTF9VWEZ0bVYwam9mUGhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lZGFhMzItYzVkOS00MDEzLTg0YmIt
OWIyYWRjNzRiNTJkLzEvU2RXVGZZNWdLMGpMTF9VWEZ0bVYwam9mUGhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9lZGFhMzItYzVkOS00MDEzLTg0YmItOWIyYWRjNzRiNTJk
LzEvU2RXVGZZNWdLMGpMTF9VWEZ0bVYwam9mUGhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZJ2WmSs
Rgz0jplP7ZuBZbuOJ3+fJsGFBHbFWP3fsnatR0ZQ1y5spqNrzYfFubkGY2adBT5v
9hearnsMIl9TI8SfeqwwqsM1IlyG4qp3K2tImf6Dh5dxwFhhdbx7kuw+KVGqOrwV
ngr3YycRSvLHp8sEvAX4uGAsZ4zjaDKfPj29O681Qto27YRqj1nqPjdb8gHfEL9g
Gkx0AEKRsm1LGT+M8rCPoffzkDbzXDxo7eltCmPJLLRrVtd2AbDgkXouONX1LHtD
gnvrxEAAx8oFYt44Q4Cu8edbHRv+sceV3TicvAXQM5dZKiLmDvwe4lUdPSU9Gelc
L2iHopxfrhet5A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:35:33 2025 by rpki-client