Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
File: SKvTlzl8CmIzcipFkF6MZzEgx6w.mft (raw, json)
Hash identifier: c+ZKlRr+iSIqDcK1XTFMsgovBaWLpS6nNicomPkDxV4=
Subject key identifier: 90:C3:B8:31:D7:98:AC:97:0C:05:7A:E0:CC:EC:A5:5D:CC:84:BA:4B
Authority key identifier: 48:AB:D3:97:39:7C:0A:62:33:72:2A:45:90:5E:8C:67:31:20:C7:AC
Certificate issuer: /CN=48abd397397c0a6233722a45905e8c673120c7ac
Certificate serial: 019758A42ADCFE09EC7A1EA55428EBD67340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
Manifest number: 0309
Signing time: Tue 10 Jun 2025 07:00:43 +0000
Manifest this update: Tue 10 Jun 2025 07:00:43 +0000
Manifest next update: Wed 11 Jun 2025 07:00:43 +0000
Files and hashes: 1: SKvTlzl8CmIzcipFkF6MZzEgx6w.crl (hash: bzP280NQnf6SAzuZqz6LTElF93wToIpgRKrQIrd02vA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:a4:2a:dc:fe:09:ec:7a:1e:a5:54:28:eb:d6:73:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48abd397397c0a6233722a45905e8c673120c7ac
Validity
Not Before: Jun 10 07:00:43 2025 GMT
Not After : Jun 11 07:00:43 2025 GMT
Subject: CN=90c3b831d798ac970c057ae0cceca55dcc84ba4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:9c:83:a2:da:cb:ee:60:11:c7:52:86:10:e1:
00:83:c8:52:f3:e3:98:19:df:11:b2:52:d4:3e:6f:
51:3d:3b:d8:a2:98:8d:d0:77:67:d8:73:0e:52:b2:
6e:14:80:c9:32:09:eb:9c:bd:3e:08:bc:0d:26:08:
6e:47:6a:a0:48:bb:49:a3:d5:5c:75:6a:51:cf:dd:
a5:b8:61:04:69:2e:da:8e:ce:9c:45:96:d7:1f:19:
37:08:00:61:83:41:14:9b:a3:a5:f3:c6:8d:5d:b3:
e5:38:49:ea:b0:4b:1e:e1:eb:3c:95:93:07:09:17:
94:26:27:77:a2:2f:d7:b5:6f:9a:a7:1d:f6:eb:1b:
0d:36:42:a7:09:1b:b9:86:8e:60:a9:74:b0:da:7a:
89:36:62:76:0e:00:35:86:16:d8:49:e7:91:17:1a:
9f:d1:7b:f1:49:5c:7e:7c:0b:6f:9c:71:13:b0:aa:
02:e8:72:73:05:a6:34:ea:85:1f:5c:79:ac:66:19:
66:a2:23:e4:e0:e3:1f:60:18:79:68:12:bb:5e:56:
2b:71:40:c9:30:e0:81:c5:dd:fc:0b:25:bc:0d:2d:
ab:09:63:d3:4e:0a:d6:a9:42:41:ba:d9:1e:f6:35:
a1:2a:5b:fc:a5:bc:09:63:43:f1:bb:c2:ff:6e:cb:
24:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C3:B8:31:D7:98:AC:97:0C:05:7A:E0:CC:EC:A5:5D:CC:84:BA:4B
X509v3 Authority Key Identifier:
keyid:48:AB:D3:97:39:7C:0A:62:33:72:2A:45:90:5E:8C:67:31:20:C7:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b1:84:69:5c:20:d4:d9:59:2f:d1:d8:56:a7:ed:17:06:96:
35:48:fe:1b:8b:34:8c:da:91:0b:33:78:c7:95:df:c7:eb:e2:
a5:38:10:5e:0e:95:8f:5e:58:52:4a:24:a2:63:ad:6e:c1:24:
2f:3d:f1:35:4e:7d:ca:3f:c2:22:de:fb:c7:6e:60:5f:10:18:
b3:41:52:b2:46:4f:5e:ec:6e:ad:4b:77:72:a4:0d:66:f6:e9:
a2:c2:68:01:25:33:6c:3e:44:0a:da:17:6c:19:e1:56:3b:da:
7b:d2:1d:c2:5a:a9:50:3a:7e:ec:92:ff:c2:58:96:51:dd:36:
a7:1a:56:0b:93:9b:46:14:37:ae:b8:25:cd:93:bc:d9:b6:29:
8b:1b:98:b0:93:57:9b:08:cf:b1:31:93:f9:47:fb:87:d8:8e:
94:80:1c:82:ec:9b:4c:db:24:d0:49:46:11:5a:0b:8c:db:e6:
bd:b3:08:24:f0:77:51:3f:42:37:c4:0c:eb:d1:2a:4e:f2:2a:
d1:ce:23:71:a6:59:99:9c:8e:90:d4:0f:c7:8b:6d:68:80:f8:
3b:64:5a:35:15:d7:1c:2e:b6:cc:b3:31:ec:63:8d:c8:3b:63:
f5:03:5b:cd:d6:20:4a:ca:69:46:be:64:48:cc:25:6c:32:01:
32:10:cb:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdYpCrc/gnseh6lVCjr1nNAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4YWJkMzk3Mzk3YzBhNjIzMzcyMmE0NTkwNWU4YzY3MzEy
MGM3YWMwHhcNMjUwNjEwMDcwMDQzWhcNMjUwNjExMDcwMDQzWjAzMTEwLwYDVQQD
Eyg5MGMzYjgzMWQ3OThhYzk3MGMwNTdhZTBjY2VjYTU1ZGNjODRiYTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85yDotrL7mARx1KGEOEAg8hS8+OY
Gd8RslLUPm9RPTvYopiN0Hdn2HMOUrJuFIDJMgnrnL0+CLwNJghuR2qgSLtJo9Vc
dWpRz92luGEEaS7ajs6cRZbXHxk3CABhg0EUm6Ol88aNXbPlOEnqsEse4es8lZMH
CReUJid3oi/XtW+apx326xsNNkKnCRu5ho5gqXSw2nqJNmJ2DgA1hhbYSeeRFxqf
0XvxSVx+fAtvnHETsKoC6HJzBaY06oUfXHmsZhlmoiPk4OMfYBh5aBK7XlYrcUDJ
MOCBxd38CyW8DS2rCWPTTgrWqUJButke9jWhKlv8pbwJY0Pxu8L/bsskZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDDuDHXmKyXDAV64MzspV3MhLpLMB8GA1UdIwQY
MBaAFEir05c5fApiM3IqRZBejGcxIMesMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0t2VGx6bDhDbUl6Y2lwRmtGNk1aekVneDZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9jNjcwZTItNTQwMS00MjQzLWE5YmIt
MzczNmQ0MGNhMDdlLzEvU0t2VGx6bDhDbUl6Y2lwRmtGNk1aekVneDZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9jNjcwZTItNTQwMS00MjQzLWE5YmItMzczNmQ0MGNhMDdl
LzEvU0t2VGx6bDhDbUl6Y2lwRmtGNk1aekVneDZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7GEaVwg
1NlZL9HYVqftFwaWNUj+G4s0jNqRCzN4x5Xfx+vipTgQXg6Vj15YUkokomOtbsEk
Lz3xNU59yj/CIt77x25gXxAYs0FSskZPXuxurUt3cqQNZvbposJoASUzbD5ECtoX
bBnhVjvae9IdwlqpUDp+7JL/wliWUd02pxpWC5ObRhQ3rrglzZO82bYpixuYsJNX
mwjPsTGT+Uf7h9iOlIAcguybTNsk0ElGEVoLjNvmvbMIJPB3UT9CN8QM69EqTvIq
0c4jcaZZmZyOkNQPx4ttaID4O2RaNRXXHC62zLMx7GONyDtj9QNbzdYgSsppRr5k
SMwlbDIBMhDLGw==
-----END CERTIFICATE-----
Generated at Tue Jun 10 08:32:21 2025 by rpki-client