Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
File: sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft (raw, json)
Hash identifier: WAW+PYUULHw8OQR7OVvSIYrps5cYaHooVYOi6aYFPDc=
Subject key identifier: B4:6B:9F:33:A4:A1:86:0E:39:3B:56:30:7C:0D:E5:E9:85:36:A8:33
Authority key identifier: B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09
Certificate issuer: /CN=b1f5bbaa051980bd4811b6655a0f95db36127809
Certificate serial: 0197488BED862AB033F0D7EB4F7B7F9E7068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
Manifest number: 0F0B
Signing time: Sat 07 Jun 2025 04:00:19 +0000
Manifest this update: Sat 07 Jun 2025 04:00:19 +0000
Manifest next update: Sun 08 Jun 2025 04:00:19 +0000
Files and hashes: 1: sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl (hash: hlwJiBKa+nAQ4nSGVJ0QQdVVWPl+8KUuU/d3Nuwz3iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8b:ed:86:2a:b0:33:f0:d7:eb:4f:7b:7f:9e:70:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f5bbaa051980bd4811b6655a0f95db36127809
Validity
Not Before: Jun 7 04:00:19 2025 GMT
Not After : Jun 8 04:00:19 2025 GMT
Subject: CN=b46b9f33a4a1860e393b56307c0de5e98536a833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:2c:a4:bf:23:2c:5f:e3:ff:2c:bd:89:74:
8e:4c:f6:6a:de:6c:dd:68:f3:09:ee:69:61:99:ca:
fc:25:62:42:14:d8:08:93:2a:af:0e:0e:02:8d:3f:
f8:b3:98:9b:1d:58:f4:e6:4c:5b:3c:fd:d1:c0:b1:
d0:bf:4d:81:fc:da:f1:07:7a:6f:79:63:f1:bb:3e:
ba:74:68:1b:4f:fc:85:7c:e2:84:65:65:23:d9:5c:
f7:89:ee:f8:31:8a:9e:9c:a2:51:9e:ee:81:16:0c:
48:0a:ff:57:df:a2:77:89:0a:b5:43:e7:24:bd:74:
3d:92:a7:06:7d:e4:55:a8:1c:28:74:4c:08:1d:c4:
2a:c7:1b:95:3b:26:27:7d:07:ed:0f:f9:84:f7:b4:
47:cd:be:29:a4:05:f3:d1:fd:24:4a:6f:a2:51:dd:
77:1b:a4:a2:8c:f3:b2:d9:c1:c3:35:fa:19:2c:ff:
6b:e6:f0:03:ec:22:9f:9e:dd:cc:e5:fa:4b:c4:c1:
4d:b8:93:43:c5:91:91:f1:10:c1:2a:a3:8e:96:81:
f0:ca:0c:68:32:51:e6:06:83:5f:8e:98:19:f6:c2:
cb:78:c7:ff:54:dd:a5:65:c5:a2:af:39:ef:cb:b6:
59:22:59:c7:ad:b0:59:bd:43:7c:18:9d:d7:fc:c4:
b3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6B:9F:33:A4:A1:86:0E:39:3B:56:30:7C:0D:E5:E9:85:36:A8:33
X509v3 Authority Key Identifier:
keyid:B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:02:46:80:7b:1d:5b:2b:a8:8e:97:eb:cf:dd:f8:e4:48:f2:
29:fb:4e:51:53:63:fc:7d:68:81:9e:14:db:7b:78:d2:98:86:
b4:f1:f3:21:56:0d:e5:76:7c:9c:e0:d5:66:27:61:65:17:70:
08:c7:45:8a:4a:fc:c9:02:df:ce:78:73:3b:d9:8a:7c:3a:c7:
19:c2:28:25:f4:c6:7c:3e:38:58:b3:f7:d9:20:f9:f3:9f:ca:
df:38:34:41:92:c6:4c:68:13:0a:cd:1b:59:72:77:b8:25:57:
f7:ca:21:22:03:36:2d:7c:5d:3b:45:ec:71:59:82:65:48:f8:
e5:62:91:ca:e7:b6:62:71:c9:82:b5:fd:8b:df:22:d0:ad:43:
84:6f:b3:db:12:23:76:3f:4f:c6:33:bc:37:82:e5:e9:47:af:
88:4d:3a:b4:94:73:5e:96:d8:6a:ef:ec:b5:29:74:97:13:aa:
a1:0e:d4:90:fc:ed:77:7b:5d:17:3f:bc:21:cc:2e:b6:56:f1:
b7:83:4e:99:10:20:1a:de:0d:2f:06:bd:5d:55:69:08:0e:06:
ed:40:15:1e:50:6a:86:ec:7d:83:15:57:d3:ff:bd:97:81:57:
1c:66:37:67:a7:7c:e2:fa:81:07:aa:87:89:a1:44:99:43:a2:
7b:4e:4e:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIi+2GKrAz8NfrT3t/nnBoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZjViYmFhMDUxOTgwYmQ0ODExYjY2NTVhMGY5NWRiMzYx
Mjc4MDkwHhcNMjUwNjA3MDQwMDE5WhcNMjUwNjA4MDQwMDE5WjAzMTEwLwYDVQQD
EyhiNDZiOWYzM2E0YTE4NjBlMzkzYjU2MzA3YzBkZTVlOTg1MzZhODMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc0spL8jLF/j/yy9iXSOTPZq3mzd
aPMJ7mlhmcr8JWJCFNgIkyqvDg4CjT/4s5ibHVj05kxbPP3RwLHQv02B/NrxB3pv
eWPxuz66dGgbT/yFfOKEZWUj2Vz3ie74MYqenKJRnu6BFgxICv9X36J3iQq1Q+ck
vXQ9kqcGfeRVqBwodEwIHcQqxxuVOyYnfQftD/mE97RHzb4ppAXz0f0kSm+iUd13
G6SijPOy2cHDNfoZLP9r5vAD7CKfnt3M5fpLxMFNuJNDxZGR8RDBKqOOloHwygxo
MlHmBoNfjpgZ9sLLeMf/VN2lZcWirznvy7ZZIlnHrbBZvUN8GJ3X/MSzGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLRrnzOkoYYOOTtWMHwN5emFNqgzMB8GA1UdIwQY
MBaAFLH1u6oFGYC9SBG2ZVoPlds2EngJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2ZXN3FnVVpnTDFJRWJabFdnLVYyellTZUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9hMDcxYWEtNTUwYi00ZTE4LTk5ZWQt
MDUwOGEyYmI0N2FjLzEvc2ZXN3FnVVpnTDFJRWJabFdnLVYyellTZUFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9hMDcxYWEtNTUwYi00ZTE4LTk5ZWQtMDUwOGEyYmI0N2Fj
LzEvc2ZXN3FnVVpnTDFJRWJabFdnLVYyellTZUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQJGgHsd
Wyuojpfrz9345EjyKftOUVNj/H1ogZ4U23t40piGtPHzIVYN5XZ8nODVZidhZRdw
CMdFikr8yQLfznhzO9mKfDrHGcIoJfTGfD44WLP32SD585/K3zg0QZLGTGgTCs0b
WXJ3uCVX98ohIgM2LXxdO0XscVmCZUj45WKRyue2YnHJgrX9i98i0K1DhG+z2xIj
dj9PxjO8N4Ll6UeviE06tJRzXpbYau/stSl0lxOqoQ7UkPztd3tdFz+8Icwutlbx
t4NOmRAgGt4NLwa9XVVpCA4G7UAVHlBqhux9gxVX0/+9l4FXHGY3Z6d84vqBB6qH
iaFEmUOie05OFA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:31:57 2025 by rpki-client