Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
File: SVbzCE2TEO-hvAfvMfk0spQfED4.mft (raw, json)
Hash identifier: dhFYF6rGanAmNS+7g0sgq7R+04Iygkf6zPO48ORnMsA=
Subject key identifier: 73:46:45:44:B8:8C:51:D1:EA:A8:CA:54:BC:84:B1:0F:85:81:E4:59
Authority key identifier: 49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E
Certificate issuer: /CN=4956f3084d9310efa1bc07ef31f934b2941f103e
Certificate serial: 0197485511616914D176A15CA10EE65C60BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 03:00:23 +0000
Manifest this update: Sat 07 Jun 2025 03:00:23 +0000
Manifest next update: Sun 08 Jun 2025 03:00:23 +0000
Files and hashes: 1: QocjuYoGfozpr0QiTXkGPfsUrcg.roa (hash: Y8oC4kwoV9mXXZSXGd1lAHQDlPdz5kxQi4KnTi7EYOM=)
2: SVbzCE2TEO-hvAfvMfk0spQfED4.crl (hash: ZEYbhmKqwcPx4PRFFGyN1bQSgeRp5dmUkB6DS1S6z+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:11:61:69:14:d1:76:a1:5c:a1:0e:e6:5c:60:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4956f3084d9310efa1bc07ef31f934b2941f103e
Validity
Not Before: Jun 7 03:00:23 2025 GMT
Not After : Jun 8 03:00:23 2025 GMT
Subject: CN=73464544b88c51d1eaa8ca54bc84b10f8581e459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c0:98:50:2d:bd:47:2c:67:1b:b8:ae:08:8f:
27:66:bf:42:c4:2d:ed:ca:80:fc:3b:3f:ec:55:e3:
c2:24:fe:d8:08:fa:b6:1b:94:37:ce:e4:34:05:22:
94:c8:16:a0:39:6a:e3:7a:83:f8:70:c4:ad:a6:c4:
76:2d:58:4e:07:98:72:1d:61:fe:9f:ca:c7:e5:11:
f7:a2:59:9e:b4:31:8e:7c:e1:96:a6:60:91:f0:44:
0a:41:4b:4b:bf:0b:3b:7c:de:99:8c:c1:32:ea:65:
cb:c9:1b:d2:34:e6:41:a2:ff:45:53:26:ce:90:55:
d7:59:2a:7a:74:63:a4:69:24:00:9f:47:48:10:98:
fb:b3:41:98:9f:c1:08:af:74:c3:93:d5:79:3d:5f:
bf:36:58:0b:55:8a:82:03:65:f2:7e:12:41:e3:ac:
bc:c3:76:db:20:8c:14:5d:a3:7a:7a:fc:b9:0f:38:
a0:eb:90:5d:60:ce:b2:df:a1:a5:aa:e0:4d:43:28:
55:ec:23:61:68:ed:ab:c0:88:10:94:e0:08:2c:88:
dd:35:14:c7:39:ec:21:2f:ce:b2:b2:2c:7b:e0:78:
f5:9e:cb:ed:e1:48:60:84:62:6f:80:fa:f2:f5:fa:
9b:c7:08:ca:27:e6:4a:09:eb:64:97:34:f5:69:2c:
e1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:46:45:44:B8:8C:51:D1:EA:A8:CA:54:BC:84:B1:0F:85:81:E4:59
X509v3 Authority Key Identifier:
keyid:49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:72:1c:d2:8c:18:c9:ef:c4:9a:29:09:ce:e9:0f:b8:a9:9e:
e5:ef:ff:e0:2c:16:1d:31:d6:74:9c:68:2e:df:c2:dd:e0:ee:
65:5a:01:f3:20:9f:a7:5b:db:43:cd:25:2e:1f:ee:d6:58:14:
19:b3:cb:d8:36:c7:43:c8:55:6d:ca:a4:04:4f:b8:ac:7c:80:
a0:37:fe:74:61:c5:d7:4e:e3:31:76:f8:90:40:33:4b:18:da:
97:2b:0c:71:25:8f:c1:cf:37:3f:09:53:b0:9a:7d:90:77:e4:
6f:47:64:3f:33:bd:9d:92:70:09:ed:89:bd:99:2c:af:93:49:
3a:e3:78:72:53:45:be:73:f8:b6:db:53:ac:23:05:cb:4c:1c:
a0:bf:91:1b:87:e5:0f:98:7b:5d:ee:0a:cf:89:79:fc:d8:48:
b3:76:18:b1:67:ce:42:b8:ae:0a:2b:12:6d:c7:4b:f2:a8:68:
79:eb:69:9b:e4:15:eb:4b:71:13:5e:cc:37:38:ba:6c:66:b1:
f0:dd:52:ac:d3:e3:7b:be:2d:ff:a4:aa:55:e3:5a:70:41:98:
d0:2f:ee:19:e3:6c:be:61:8e:db:bf:61:aa:07:0e:58:5f:49:
94:20:4e:9d:f8:26:2a:6f:4e:b0:db:9a:50:f8:e5:a5:03:27:
89:52:1d:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIVRFhaRTRdqFcoQ7mXGC9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NTZmMzA4NGQ5MzEwZWZhMWJjMDdlZjMxZjkzNGIyOTQx
ZjEwM2UwHhcNMjUwNjA3MDMwMDIzWhcNMjUwNjA4MDMwMDIzWjAzMTEwLwYDVQQD
Eyg3MzQ2NDU0NGI4OGM1MWQxZWFhOGNhNTRiYzg0YjEwZjg1ODFlNDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssCYUC29RyxnG7iuCI8nZr9CxC3t
yoD8Oz/sVePCJP7YCPq2G5Q3zuQ0BSKUyBagOWrjeoP4cMStpsR2LVhOB5hyHWH+
n8rH5RH3olmetDGOfOGWpmCR8EQKQUtLvws7fN6ZjMEy6mXLyRvSNOZBov9FUybO
kFXXWSp6dGOkaSQAn0dIEJj7s0GYn8EIr3TDk9V5PV+/NlgLVYqCA2XyfhJB46y8
w3bbIIwUXaN6evy5Dzig65BdYM6y36GlquBNQyhV7CNhaO2rwIgQlOAILIjdNRTH
OewhL86ysix74Hj1nsvt4UhghGJvgPry9fqbxwjKJ+ZKCetklzT1aSzhjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNGRUS4jFHR6qjKVLyEsQ+FgeRZMB8GA1UdIwQY
MBaAFElW8whNkxDvobwH7zH5NLKUHxA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1ZiekNFMlRFTy1odkFmdk1mazBzcFFmRUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My80YWY4OTgtMjFjYi00ZDhkLWE2M2Yt
MWRjOTY3ZDU2NDA5LzEvU1ZiekNFMlRFTy1odkFmdk1mazBzcFFmRUQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My80YWY4OTgtMjFjYi00ZDhkLWE2M2YtMWRjOTY3ZDU2NDA5
LzEvU1ZiekNFMlRFTy1odkFmdk1mazBzcFFmRUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3Ic0owY
ye/EmikJzukPuKme5e//4CwWHTHWdJxoLt/C3eDuZVoB8yCfp1vbQ80lLh/u1lgU
GbPL2DbHQ8hVbcqkBE+4rHyAoDf+dGHF107jMXb4kEAzSxjalysMcSWPwc83PwlT
sJp9kHfkb0dkPzO9nZJwCe2JvZksr5NJOuN4clNFvnP4tttTrCMFy0wcoL+RG4fl
D5h7Xe4Kz4l5/NhIs3YYsWfOQriuCisSbcdL8qhoeetpm+QV60txE17MNzi6bGax
8N1SrNPje74t/6SqVeNacEGY0C/uGeNsvmGO279hqgcOWF9JlCBOnfgmKm9OsNua
UPjlpQMniVIdJw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:04:59 2025 by rpki-client