Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
File: cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft (raw, json)
Hash identifier: fsNwhkfcX3qg0949ZZvE5wL5YO5KBon++nIsoYe9TmM=
Subject key identifier: 57:95:41:3D:F6:44:DE:36:CD:43:5B:52:E9:52:5E:FB:12:0F:7D:D6
Authority key identifier: 71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
Certificate issuer: /CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Certificate serial: 01974B8DC7E42397DEB28FE792E88357A7F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
Manifest number: 0998
Signing time: Sat 07 Jun 2025 18:01:12 +0000
Manifest this update: Sat 07 Jun 2025 18:01:12 +0000
Manifest next update: Sun 08 Jun 2025 18:01:12 +0000
Files and hashes: 1: cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl (hash: pRLTMtBXf+nf/7SkBmCGK8nAQF5dX7r1JGMW9Tn+mEg=)
2: rs9tHLr8zyXOfjLVtvASmrQRyII.roa (hash: TPmV5eCt75VU6HkVEIxwqSqz2UP53y06YcldQPwtkco=)
3: yrE5IOAO5wezku-a_RJR7TB3CkA.roa (hash: 7HAAXilZN5MLFA2Yt1+6x9clHUzDWGtePYkFTFw0/Hk=)
4: zX3z-Ivq7H5_KU4k1lIkOCnGhd0.roa (hash: 0LyNXWO0Wf/6GO5a+bSTGSO0K4OEPsxkW9pcYGNMQq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:c7:e4:23:97:de:b2:8f:e7:92:e8:83:57:a7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Validity
Not Before: Jun 7 18:01:12 2025 GMT
Not After : Jun 8 18:01:12 2025 GMT
Subject: CN=5795413df644de36cd435b52e9525efb120f7dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c4:78:90:23:1c:c0:67:f4:06:19:4b:5b:0d:
07:a4:63:4f:01:f7:05:6c:84:e7:36:89:f2:c3:91:
f2:ba:62:9c:34:4b:be:97:08:86:d2:ad:00:0f:c0:
29:9c:ee:97:70:48:e6:3a:46:16:6e:2f:10:c5:e8:
ca:a8:04:26:30:86:ea:11:63:18:cb:47:2e:f0:ec:
af:0d:d8:f9:53:2a:d1:b7:10:7e:6a:ad:92:c5:4e:
47:4f:2d:00:c3:f7:fc:40:3e:29:b6:15:9c:39:50:
db:a0:26:17:5e:53:ab:4f:a3:a2:0f:3a:e9:c8:50:
31:2a:56:50:cb:51:fa:d1:d1:ad:16:ee:02:65:92:
ad:c9:8b:6f:aa:ec:63:df:ae:d3:fc:e4:09:5f:06:
3d:f3:76:2a:f1:16:a7:ba:d0:d3:14:4d:4b:26:4d:
2d:86:e0:b6:83:2c:fa:ec:1b:9e:6b:0b:28:9f:76:
50:11:a5:15:86:ad:5a:c7:40:5a:f6:15:37:67:28:
66:db:21:64:41:36:91:ab:85:37:43:3d:c0:b1:28:
a9:bc:62:08:d4:70:6e:39:62:b5:a1:a5:6b:5f:78:
b2:2a:c2:27:96:f5:78:23:5a:ad:6b:32:b3:27:78:
c5:9b:c6:75:23:8e:7d:ff:5f:a6:ec:6c:40:4c:29:
42:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:95:41:3D:F6:44:DE:36:CD:43:5B:52:E9:52:5E:FB:12:0F:7D:D6
X509v3 Authority Key Identifier:
keyid:71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:86:7f:7c:41:a5:96:3a:23:3f:f9:cb:8f:d3:c7:40:cc:fa:
7c:fe:ea:d3:af:db:72:80:28:9f:9a:f2:c9:74:76:a0:a9:e2:
19:fe:2e:01:00:f5:7e:e7:bc:73:41:7f:a1:91:b2:fc:8f:86:
fe:7e:ff:93:db:d9:80:47:be:40:b9:00:98:34:fa:44:b9:7e:
d1:67:f9:1e:d1:a7:02:bf:47:6e:73:42:be:ff:99:d4:a7:56:
29:7f:60:a5:94:66:70:94:97:44:e3:37:c5:2c:75:97:8b:e9:
81:1f:3f:44:ee:02:0a:8f:cc:3e:cb:ee:7d:6c:25:0c:9b:fe:
39:f1:28:55:f8:db:ce:a5:0d:17:5f:c2:1b:e1:81:6e:c8:d4:
05:e5:a0:cb:49:0e:81:07:dc:c1:5f:2f:5c:4a:1c:70:cd:73:
24:d4:7b:1e:84:1a:b1:ed:03:58:97:fc:5f:72:73:54:8c:09:
e0:6c:bf:15:4f:ce:ea:46:29:d5:63:e0:44:0f:f5:07:ff:fb:
8c:17:67:0a:e5:33:cc:ce:80:a5:00:5b:56:79:f1:99:1b:5d:
ae:2d:e7:93:ff:b0:8c:95:cc:55:11:b6:e7:df:f6:ef:00:29:
57:48:18:92:7c:63:90:f4:09:c3:34:66:7b:51:63:3f:f7:3c:
e9:81:1e:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjcfkI5feso/nkuiDV6f5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMmZmMTFkZDBjNjZjZTY3ZmUwZjFkNzQ5YzA5MDllZjM0
MThkMjkwHhcNMjUwNjA3MTgwMTEyWhcNMjUwNjA4MTgwMTEyWjAzMTEwLwYDVQQD
Eyg1Nzk1NDEzZGY2NDRkZTM2Y2Q0MzViNTJlOTUyNWVmYjEyMGY3ZGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcR4kCMcwGf0BhlLWw0HpGNPAfcF
bITnNonyw5HyumKcNEu+lwiG0q0AD8ApnO6XcEjmOkYWbi8QxejKqAQmMIbqEWMY
y0cu8OyvDdj5UyrRtxB+aq2SxU5HTy0Aw/f8QD4pthWcOVDboCYXXlOrT6OiDzrp
yFAxKlZQy1H60dGtFu4CZZKtyYtvquxj367T/OQJXwY983Yq8RanutDTFE1LJk0t
huC2gyz67Bueawson3ZQEaUVhq1ax0Ba9hU3Zyhm2yFkQTaRq4U3Qz3AsSipvGII
1HBuOWK1oaVrX3iyKsInlvV4I1qtazKzJ3jFm8Z1I459/1+m7GxATClCYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFeVQT32RN42zUNbUulSXvsSD33WMB8GA1UdIwQY
MBaAFHEv8R3Qxmzmf+Dx10nAkJ7zQY0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1NfeEhkREdiT1pfNFBIWFNjQ1Fudk5CalNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9kOWNjOGQtOTVhYy00ODQ4LWIwOTct
OWQ2M2IwNDc2ZTI0LzEvY1NfeEhkREdiT1pfNFBIWFNjQ1Fudk5CalNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9kOWNjOGQtOTVhYy00ODQ4LWIwOTctOWQ2M2IwNDc2ZTI0
LzEvY1NfeEhkREdiT1pfNFBIWFNjQ1Fudk5CalNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADYZ/fEGl
ljojP/nLj9PHQMz6fP7q06/bcoAon5ryyXR2oKniGf4uAQD1fue8c0F/oZGy/I+G
/n7/k9vZgEe+QLkAmDT6RLl+0Wf5HtGnAr9HbnNCvv+Z1KdWKX9gpZRmcJSXROM3
xSx1l4vpgR8/RO4CCo/MPsvufWwlDJv+OfEoVfjbzqUNF1/CG+GBbsjUBeWgy0kO
gQfcwV8vXEoccM1zJNR7HoQase0DWJf8X3JzVIwJ4Gy/FU/O6kYp1WPgRA/1B//7
jBdnCuUzzM6ApQBbVnnxmRtdri3nk/+wjJXMVRG259/27wApV0gYknxjkPQJwzRm
e1FjP/c86YEeFA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:43:49 2025 by rpki-client