Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
File: sffQCUrcmNmwMnIOgePbWqdYHHQ.mft (raw, json)
Hash identifier: gm9h/JcZFjs4lnpREg0ny2zNKjDm30B/AcSD8v7Bzh8=
Subject key identifier: 53:05:DB:27:8D:03:01:5A:5D:76:42:36:D2:B2:24:10:40:3D:F9:6D
Authority key identifier: B1:F7:D0:09:4A:DC:98:D9:B0:32:72:0E:81:E3:DB:5A:A7:58:1C:74
Certificate issuer: /CN=b1f7d0094adc98d9b032720e81e3db5aa7581c74
Certificate serial: 019747E7D1756C35DF8ED4AFC8831279D739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
Manifest number: 0B03
Signing time: Sat 07 Jun 2025 01:01:04 +0000
Manifest this update: Sat 07 Jun 2025 01:01:04 +0000
Manifest next update: Sun 08 Jun 2025 01:01:04 +0000
Files and hashes: 1: sffQCUrcmNmwMnIOgePbWqdYHHQ.crl (hash: U3Yr61LVIDTqCsWcJCzwOaOsehLqSX1xMgW4W7VrF4I=)
2: tkngR5wwQ6qh3iGid8LqkeZO0Sg.roa (hash: XAoboSbFoG6N+OZ4mfDqaXa/N9sFsWbZUGbRzqL5oH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:d1:75:6c:35:df:8e:d4:af:c8:83:12:79:d7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f7d0094adc98d9b032720e81e3db5aa7581c74
Validity
Not Before: Jun 7 01:01:04 2025 GMT
Not After : Jun 8 01:01:04 2025 GMT
Subject: CN=5305db278d03015a5d764236d2b22410403df96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8a:1e:c7:b2:3c:cc:03:e1:23:67:f1:34:30:
b0:39:0e:ea:cb:3f:f8:ce:eb:67:4f:70:a3:da:bb:
a7:92:0b:f1:fa:16:ec:59:ed:53:21:ed:98:99:38:
a7:28:24:ba:97:8c:f5:36:cb:47:f5:63:ca:4a:00:
58:da:66:5b:6b:48:7a:3a:47:e7:8d:2b:0c:5b:89:
f2:ba:b2:49:b0:df:2b:df:6a:24:f8:33:54:08:d9:
8e:4e:e6:14:87:4f:05:1b:44:f7:af:6c:2c:66:0d:
3e:43:ad:92:a6:ee:74:bc:d9:54:05:a3:4a:c8:8e:
ac:23:cd:a9:d3:44:6a:0b:b2:1b:75:65:fa:55:57:
72:a6:9e:ed:ae:47:f8:26:2e:59:19:19:69:a5:f9:
fc:38:f7:a0:fa:cc:b7:9e:64:6c:dc:f9:82:d8:f1:
8f:c3:39:f4:80:3d:10:02:d9:00:85:d0:21:29:59:
95:55:4f:d2:0e:92:44:57:82:09:20:69:c2:d8:63:
8d:35:aa:11:ef:a4:ee:f2:3a:89:9a:be:6d:88:c0:
24:01:bd:18:92:13:25:18:af:61:bb:90:4c:e9:24:
6a:96:ca:ff:5d:25:cd:90:18:b7:84:c7:0f:61:06:
28:15:df:11:6b:36:29:d5:51:6d:ba:86:83:e8:24:
85:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:05:DB:27:8D:03:01:5A:5D:76:42:36:D2:B2:24:10:40:3D:F9:6D
X509v3 Authority Key Identifier:
keyid:B1:F7:D0:09:4A:DC:98:D9:B0:32:72:0E:81:E3:DB:5A:A7:58:1C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b4:9d:c4:c5:a2:96:92:bc:ae:46:4f:52:c5:fc:5f:a9:05:
10:85:4d:7a:b0:a4:bd:1f:3d:ea:40:3c:40:cc:e8:fa:84:f3:
76:48:84:5a:b3:ce:5c:f4:af:c0:b3:8d:c5:26:b5:a9:f7:48:
de:a5:84:63:53:a3:6c:d6:f5:0f:26:35:71:77:f5:de:c7:8b:
25:0e:a7:4d:0e:f5:81:bb:20:e4:32:a9:2a:bc:81:b9:b4:b0:
06:3e:e0:68:66:90:eb:ab:60:53:dd:b7:c2:13:3a:ed:5c:20:
fa:a3:5b:81:98:ab:ac:d0:89:3c:7f:c7:c9:5d:bc:a2:63:ec:
37:1c:de:a3:c6:a4:27:32:07:24:a7:1c:ed:d9:00:6e:e6:c2:
6f:4d:ce:00:00:07:c7:50:29:e8:4d:a9:d9:9e:0a:2c:38:1c:
13:c6:57:35:a8:62:88:6c:e1:12:d2:b7:de:90:32:e8:45:78:
18:e3:cc:77:bf:3d:bc:7d:c2:a9:96:a7:5c:7d:c0:95:de:49:
9e:b2:df:c5:b4:5d:ab:d1:ce:ca:fc:58:67:9d:37:1a:ee:1f:
20:b7:5f:66:ca:24:fa:b8:db:17:03:b6:61:49:38:72:fd:63:
c4:cb:4e:5e:b7:25:5f:6e:d2:c2:70:16:34:ce:88:78:a5:f3:
28:b5:05:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdH59F1bDXfjtSvyIMSedc5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZjdkMDA5NGFkYzk4ZDliMDMyNzIwZTgxZTNkYjVhYTc1
ODFjNzQwHhcNMjUwNjA3MDEwMTA0WhcNMjUwNjA4MDEwMTA0WjAzMTEwLwYDVQQD
Eyg1MzA1ZGIyNzhkMDMwMTVhNWQ3NjQyMzZkMmIyMjQxMDQwM2RmOTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYoex7I8zAPhI2fxNDCwOQ7qyz/4
zutnT3Cj2runkgvx+hbsWe1TIe2YmTinKCS6l4z1NstH9WPKSgBY2mZba0h6Okfn
jSsMW4nyurJJsN8r32ok+DNUCNmOTuYUh08FG0T3r2wsZg0+Q62Spu50vNlUBaNK
yI6sI82p00RqC7IbdWX6VVdypp7trkf4Ji5ZGRlppfn8OPeg+sy3nmRs3PmC2PGP
wzn0gD0QAtkAhdAhKVmVVU/SDpJEV4IJIGnC2GONNaoR76Tu8jqJmr5tiMAkAb0Y
khMlGK9hu5BM6SRqlsr/XSXNkBi3hMcPYQYoFd8RazYp1VFtuoaD6CSFAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMF2yeNAwFaXXZCNtKyJBBAPfltMB8GA1UdIwQY
MBaAFLH30AlK3JjZsDJyDoHj21qnWBx0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2ZmUUNVcmNtTm13TW5JT2dlUGJXcWRZSEhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9lOGRkNmItNDYyNy00YTNjLWJhNzMt
YTU0Yjg2OWRjZDI3LzEvc2ZmUUNVcmNtTm13TW5JT2dlUGJXcWRZSEhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9lOGRkNmItNDYyNy00YTNjLWJhNzMtYTU0Yjg2OWRjZDI3
LzEvc2ZmUUNVcmNtTm13TW5JT2dlUGJXcWRZSEhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm7SdxMWi
lpK8rkZPUsX8X6kFEIVNerCkvR896kA8QMzo+oTzdkiEWrPOXPSvwLONxSa1qfdI
3qWEY1OjbNb1DyY1cXf13seLJQ6nTQ71gbsg5DKpKryBubSwBj7gaGaQ66tgU923
whM67Vwg+qNbgZirrNCJPH/HyV28omPsNxzeo8akJzIHJKcc7dkAbubCb03OAAAH
x1Ap6E2p2Z4KLDgcE8ZXNahiiGzhEtK33pAy6EV4GOPMd789vH3CqZanXH3Ald5J
nrLfxbRdq9HOyvxYZ503Gu4fILdfZsok+rjbFwO2YUk4cv1jxMtOXrclX27SwnAW
NM6IeKXzKLUF9Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:16:38 2025 by rpki-client