Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
File: sUgIa40dx_EOND_RZXGSOadVvTQ.mft (raw, json)
Hash identifier: QTZbo0JriNYHPR5MOSjwSfi5pzpoIH+fEUGr+RG1jyw=
Subject key identifier: 6A:93:DC:78:C8:54:41:46:89:16:6A:98:E7:6F:5E:44:0E:D6:46:78
Authority key identifier: B1:48:08:6B:8D:1D:C7:F1:0E:34:3F:D1:65:71:92:39:A7:55:BD:34
Certificate issuer: /CN=b148086b8d1dc7f10e343fd165719239a755bd34
Certificate serial: 019748F9C75F074A34489C9704196F611D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUgIa40dx_EOND_RZXGSOadVvTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
Manifest number: 0EF8
Signing time: Sat 07 Jun 2025 06:00:18 +0000
Manifest this update: Sat 07 Jun 2025 06:00:18 +0000
Manifest next update: Sun 08 Jun 2025 06:00:18 +0000
Files and hashes: 1: sUgIa40dx_EOND_RZXGSOadVvTQ.crl (hash: 4/42CASvzWb59fpYj1eTs+VxJyor/YvQxdi8hoFl6kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUgIa40dx_EOND_RZXGSOadVvTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:c7:5f:07:4a:34:48:9c:97:04:19:6f:61:1d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b148086b8d1dc7f10e343fd165719239a755bd34
Validity
Not Before: Jun 7 06:00:18 2025 GMT
Not After : Jun 8 06:00:18 2025 GMT
Subject: CN=6a93dc78c854414689166a98e76f5e440ed64678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d9:d1:bd:e5:8a:c0:2a:5e:fc:7d:8d:6f:d1:
ca:ad:21:90:81:5b:21:23:71:e4:fc:b5:bc:ab:f7:
92:c3:6b:77:1c:ae:93:d8:5b:02:f3:35:79:77:50:
8d:1a:df:ea:b5:27:d7:0e:a6:24:d5:f0:a4:c0:47:
cf:cd:ff:77:21:03:f9:1e:24:69:00:dc:a8:5e:c7:
41:64:2e:e5:2f:ba:99:2d:1c:3d:bc:f2:13:7f:93:
08:0c:ba:a6:0c:db:27:15:b0:98:a0:94:d9:d0:ab:
a2:74:f3:6a:24:6a:68:21:25:56:e4:27:e9:02:f3:
d0:52:a1:8c:6b:fc:11:4d:53:cb:c7:c7:56:83:77:
ec:a7:72:a5:2e:be:42:87:ed:1b:fe:00:3f:6a:7a:
ae:0a:7f:9d:a7:a0:cb:9c:c0:1c:14:7c:cf:5b:5a:
48:7d:36:96:04:64:36:14:ab:af:d6:d3:c3:a9:45:
6f:16:2a:56:c6:5b:bb:42:00:8c:e2:5a:03:3e:b8:
5b:2b:ba:0f:d5:4e:cf:22:ae:56:79:64:d6:8a:02:
03:f8:89:68:62:f5:f9:3c:c1:ab:eb:e6:0a:6d:da:
4d:40:11:1b:38:2c:3e:dc:70:bf:79:f6:cc:4d:c5:
90:ff:3a:c9:94:04:04:36:f7:d1:4f:24:1c:00:22:
45:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:93:DC:78:C8:54:41:46:89:16:6A:98:E7:6F:5E:44:0E:D6:46:78
X509v3 Authority Key Identifier:
keyid:B1:48:08:6B:8D:1D:C7:F1:0E:34:3F:D1:65:71:92:39:A7:55:BD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUgIa40dx_EOND_RZXGSOadVvTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:3f:ab:fe:58:00:d0:58:eb:5e:98:30:b7:15:7e:70:bb:77:
b7:b9:6c:40:f0:5c:45:bc:0d:da:4c:8a:fe:21:03:de:83:9d:
11:0a:a7:8a:9f:46:f0:1f:66:fc:83:8d:ca:0b:d3:3b:1b:57:
2f:72:d9:63:30:bd:33:85:d1:1a:fb:05:76:24:54:d9:22:3d:
96:db:1d:02:65:e9:ee:04:0c:df:22:24:47:67:0a:d5:b5:47:
b1:0c:98:03:cf:c3:48:d2:cd:2c:d7:d4:41:5a:37:b8:7b:f2:
8e:75:d7:c7:ad:34:5f:8f:69:96:99:8b:4e:41:1b:db:1f:e2:
47:17:a6:da:92:fd:6a:5a:93:fc:f5:54:97:b4:87:20:50:31:
55:aa:c6:7d:e1:22:3d:32:34:80:36:b3:f9:b6:96:16:09:0f:
12:bf:5c:76:56:e0:c6:d8:0e:55:fc:cb:6f:33:4e:1c:0d:ce:
8f:53:a8:b4:4d:72:d1:5c:23:08:2e:f2:19:5f:19:15:a6:94:
8c:07:a7:d2:38:32:ff:dc:fd:65:38:fa:65:f5:5c:08:4d:f9:
07:c4:ce:3a:fd:aa:3c:6d:ba:17:f3:43:8f:7d:8e:25:10:57:
b1:4b:db:31:3b:89:ec:8f:42:53:ff:7c:a6:5a:03:04:1c:1f:
0c:0e:2a:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+cdfB0o0SJyXBBlvYR1uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNDgwODZiOGQxZGM3ZjEwZTM0M2ZkMTY1NzE5MjM5YTc1
NWJkMzQwHhcNMjUwNjA3MDYwMDE4WhcNMjUwNjA4MDYwMDE4WjAzMTEwLwYDVQQD
Eyg2YTkzZGM3OGM4NTQ0MTQ2ODkxNjZhOThlNzZmNWU0NDBlZDY0Njc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdnRveWKwCpe/H2Nb9HKrSGQgVsh
I3Hk/LW8q/eSw2t3HK6T2FsC8zV5d1CNGt/qtSfXDqYk1fCkwEfPzf93IQP5HiRp
ANyoXsdBZC7lL7qZLRw9vPITf5MIDLqmDNsnFbCYoJTZ0KuidPNqJGpoISVW5Cfp
AvPQUqGMa/wRTVPLx8dWg3fsp3KlLr5Ch+0b/gA/anquCn+dp6DLnMAcFHzPW1pI
fTaWBGQ2FKuv1tPDqUVvFipWxlu7QgCM4loDPrhbK7oP1U7PIq5WeWTWigID+Ilo
YvX5PMGr6+YKbdpNQBEbOCw+3HC/efbMTcWQ/zrJlAQENvfRTyQcACJF3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqT3HjIVEFGiRZqmOdvXkQO1kZ4MB8GA1UdIwQY
MBaAFLFICGuNHcfxDjQ/0WVxkjmnVb00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1VnSWE0MGR4X0VPTkRfUlpYR1NPYWRWdlRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kYWRmMzQtMWYzZi00Y2VhLTgwMDEt
ZTNkNWQ3ZWY0MjMyLzEvc1VnSWE0MGR4X0VPTkRfUlpYR1NPYWRWdlRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9kYWRmMzQtMWYzZi00Y2VhLTgwMDEtZTNkNWQ3ZWY0MjMy
LzEvc1VnSWE0MGR4X0VPTkRfUlpYR1NPYWRWdlRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAD+r/lgA
0FjrXpgwtxV+cLt3t7lsQPBcRbwN2kyK/iED3oOdEQqnip9G8B9m/IONygvTOxtX
L3LZYzC9M4XRGvsFdiRU2SI9ltsdAmXp7gQM3yIkR2cK1bVHsQyYA8/DSNLNLNfU
QVo3uHvyjnXXx600X49plpmLTkEb2x/iRxem2pL9alqT/PVUl7SHIFAxVarGfeEi
PTI0gDaz+baWFgkPEr9cdlbgxtgOVfzLbzNOHA3Oj1OotE1y0VwjCC7yGV8ZFaaU
jAen0jgy/9z9ZTj6ZfVcCE35B8TOOv2qPG26F/NDj32OJRBXsUvbMTuJ7I9CU/98
ploDBBwfDA4qRA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:29:33 2025 by rpki-client