Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
File: SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft (raw, json)
Hash identifier: vULk81cEShsRQMfa//mbC+dD+qPD4YSGkj43N1iKfQc=
Subject key identifier: 10:F2:E3:40:C1:AC:03:F8:32:68:6A:BB:CF:00:C4:6B:F6:71:EF:22
Authority key identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
Certificate issuer: /CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Certificate serial: 01974AE8D0EDC8258E4C6AF5D81DF713F0CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
Manifest number: 055C
Signing time: Sat 07 Jun 2025 15:01:01 +0000
Manifest this update: Sat 07 Jun 2025 15:01:01 +0000
Manifest next update: Sun 08 Jun 2025 15:01:01 +0000
Files and hashes: 1: 3klZTNM9YhJqZUNp3PJkFRczFX8.roa (hash: OyXgZ5l4rO5Wt2TcoTvX9gJZ0hgPAdu2wTU0n6/gZoU=)
2: SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl (hash: s1NLAa0cytBODJIB70eMTistNNxPKk17OIwMXQS4TwQ=)
3: W0AAJRLr6gi2r74kS95DxTYGfTw.roa (hash: MH+HQqYFMBeGJJqR0jYHA1u1MAdvWa+AHHutk6W2MvA=)
4: r0aCHKZqLV95OV5gwTfYdhHbA6Q.roa (hash: xjRrpFDO8g9sZNIp8GQ1hogAG1em04ZcPXgm2d8N7a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:d0:ed:c8:25:8e:4c:6a:f5:d8:1d:f7:13:f0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Validity
Not Before: Jun 7 15:01:01 2025 GMT
Not After : Jun 8 15:01:01 2025 GMT
Subject: CN=10f2e340c1ac03f832686abbcf00c46bf671ef22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b4:62:ec:0e:0e:af:be:a3:b2:f1:14:02:a2:
d9:4e:35:ff:94:1a:58:7a:e7:4d:74:12:64:97:ab:
2b:87:34:83:4c:c9:df:ea:cd:ff:56:bf:ca:b1:d5:
31:bc:42:b5:40:74:cd:c3:0e:96:43:20:cb:6c:16:
bd:bc:dd:f3:5b:29:2d:06:5d:75:34:92:c7:04:c8:
54:9d:55:2e:04:c8:5a:59:4f:26:ae:85:8b:9d:69:
81:de:33:30:75:a3:47:7b:91:3a:1d:e8:fe:f4:5c:
d8:34:15:57:09:fd:44:14:73:27:93:07:86:f0:86:
97:16:f2:e4:94:5c:4a:b5:ee:1e:6c:34:68:f4:4b:
7a:b4:bc:0e:7e:ec:07:1f:d5:c3:d2:40:40:55:12:
01:39:ed:ae:6d:ac:2d:6b:4b:21:7a:9b:8b:dc:86:
a0:41:57:0b:00:44:de:60:7e:f3:e2:7d:74:db:6c:
66:c6:bf:eb:b7:8a:51:22:62:22:bb:15:fe:bd:a1:
25:70:25:79:ea:2f:98:1c:69:79:e8:1a:eb:a3:1f:
fa:d4:03:66:54:93:a7:c9:df:9d:87:be:f0:d9:9e:
3b:d7:44:e7:87:2a:d3:36:d1:c6:10:53:00:94:6b:
e2:61:57:c9:ce:b4:64:69:f5:2b:99:dd:ce:c0:87:
65:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F2:E3:40:C1:AC:03:F8:32:68:6A:BB:CF:00:C4:6B:F6:71:EF:22
X509v3 Authority Key Identifier:
keyid:48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c0:1b:61:d9:7c:e1:6a:55:ad:a2:1b:2b:a4:3f:ae:1c:dc:
87:e9:0c:11:d1:41:5b:fc:3b:5b:18:04:20:64:43:cc:2f:b0:
50:51:83:96:19:5d:02:23:30:b9:55:7c:8e:92:d8:a3:29:55:
8a:34:1b:be:b6:3a:3c:f1:ed:8e:e7:40:8d:7f:31:3f:f5:0e:
fb:a8:6c:25:9d:ac:fc:57:db:14:a0:80:e8:75:4b:00:d4:70:
76:de:3e:c3:61:a4:72:b1:a8:2e:0f:85:9d:ee:3a:3d:29:61:
fd:d1:7a:e0:07:58:c1:3e:3f:6d:2f:b8:ca:58:b8:c4:11:1b:
47:2e:18:d4:9c:e3:19:fe:61:00:18:b5:18:30:85:aa:b3:9c:
28:a1:3b:3f:36:64:72:55:0c:82:c6:63:66:7b:0c:e8:76:33:
69:3b:8c:30:7f:30:5e:b4:cf:26:d7:4d:f2:0d:d3:5a:2c:14:
64:97:2c:58:2b:8a:cd:ce:6b:12:11:36:c9:b3:2a:3c:dc:49:
a3:12:08:a4:64:69:21:69:45:b1:a8:68:3e:06:64:2f:ba:ed:
17:12:7c:51:72:d8:8a:b8:ca:15:5f:3a:90:de:5e:dd:9b:a7:
d6:c1:83:57:e4:f4:6b:a1:a5:24:a7:3a:a7:78:0b:ff:fe:c4:
62:62:a8:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6NDtyCWOTGr12B33E/DKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NWRkYjY3OGM0YzBkMGM0ODhlZmQzYjgzNjcxNDIxODlm
MzM1OGEwHhcNMjUwNjA3MTUwMTAxWhcNMjUwNjA4MTUwMTAxWjAzMTEwLwYDVQQD
EygxMGYyZTM0MGMxYWMwM2Y4MzI2ODZhYmJjZjAwYzQ2YmY2NzFlZjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobRi7A4Or76jsvEUAqLZTjX/lBpY
eudNdBJkl6srhzSDTMnf6s3/Vr/KsdUxvEK1QHTNww6WQyDLbBa9vN3zWyktBl11
NJLHBMhUnVUuBMhaWU8mroWLnWmB3jMwdaNHe5E6Hej+9FzYNBVXCf1EFHMnkweG
8IaXFvLklFxKte4ebDRo9Et6tLwOfuwHH9XD0kBAVRIBOe2ubawta0shepuL3Iag
QVcLAETeYH7z4n1022xmxr/rt4pRImIiuxX+vaElcCV56i+YHGl56Brrox/61ANm
VJOnyd+dh77w2Z4710TnhyrTNtHGEFMAlGviYVfJzrRkafUrmd3OwIdlJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDy40DBrAP4Mmhqu88AxGv2ce8iMB8GA1UdIwQY
MBaAFEhd22eMTA0MSI79O4NnFCGJ8zWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iZWIyMDAtZTVkNi00Njk2LWFlMjUt
ZGViZmNkOWViMjBlLzEvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iZWIyMDAtZTVkNi00Njk2LWFlMjUtZGViZmNkOWViMjBl
LzEvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlcAbYdl8
4WpVraIbK6Q/rhzch+kMEdFBW/w7WxgEIGRDzC+wUFGDlhldAiMwuVV8jpLYoylV
ijQbvrY6PPHtjudAjX8xP/UO+6hsJZ2s/FfbFKCA6HVLANRwdt4+w2GkcrGoLg+F
ne46PSlh/dF64AdYwT4/bS+4yli4xBEbRy4Y1JzjGf5hABi1GDCFqrOcKKE7PzZk
clUMgsZjZnsM6HYzaTuMMH8wXrTPJtdN8g3TWiwUZJcsWCuKzc5rEhE2ybMqPNxJ
oxIIpGRpIWlFsahoPgZkL7rtFxJ8UXLYirjKFV86kN5e3Zun1sGDV+T0a6GlJKc6
p3gL//7EYmKoSw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:51:47 2025 by rpki-client