Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
File: SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft (raw, json)
Hash identifier: 8TJFMUb58CXuqwvULxIDzfp3gAEipn0TQya9eT3v/sY=
Subject key identifier: 35:DF:C5:CB:C3:EC:C1:2C:5A:44:79:F4:FF:90:E0:1D:A8:7F:7A:FB
Authority key identifier: 48:FA:ED:67:14:F4:6A:2B:84:3F:14:E4:0E:54:E6:26:A0:C5:00:EE
Certificate issuer: /CN=48faed6714f46a2b843f14e40e54e626a0c500ee
Certificate serial: 0197B70EBF661F44778BD1B9D29E01D7C96D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
Manifest number: 130D
Signing time: Sat 28 Jun 2025 15:01:26 +0000
Manifest this update: Sat 28 Jun 2025 15:01:26 +0000
Manifest next update: Sun 29 Jun 2025 15:01:26 +0000
Files and hashes: 1: SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl (hash: 1LK0vSF3oHV/evkuFcAAG5pst3dha8cgHF601lE0JG4=)
2: YcBJMOZnarbYkNxw905RMeZes7Q.roa (hash: FciS9wueWxFbzT7TwtYBQ+UslPbKowgQrJac0SFsxR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:bf:66:1f:44:77:8b:d1:b9:d2:9e:01:d7:c9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48faed6714f46a2b843f14e40e54e626a0c500ee
Validity
Not Before: Jun 28 15:01:26 2025 GMT
Not After : Jun 29 15:01:26 2025 GMT
Subject: CN=35dfc5cbc3ecc12c5a4479f4ff90e01da87f7afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:66:10:8e:3c:02:41:d6:66:18:7c:2f:ff:8c:
73:de:f6:f3:62:2b:6f:4f:aa:3b:56:4c:c3:d6:19:
6f:40:d7:5a:28:ec:81:94:57:90:58:67:d3:d0:0e:
4f:90:52:fb:fb:26:1f:3d:8e:1f:af:38:69:39:10:
a1:ef:87:ac:62:58:11:9b:70:a7:4a:c2:fb:47:2f:
ba:a8:40:00:ef:2e:4f:3e:d2:f5:52:b3:6c:eb:7c:
0f:b6:4c:41:13:89:92:11:24:f5:29:06:3d:67:d7:
65:84:4b:46:59:03:78:b5:06:2f:a8:cb:19:a1:b4:
f3:5a:f6:99:71:2b:a0:c7:f6:81:3c:f0:26:27:e9:
7d:1d:67:59:32:ad:48:66:88:a2:af:84:78:cc:8a:
b7:a7:49:16:5b:26:d4:1c:11:e0:e6:18:fe:ea:ee:
36:77:d8:96:59:73:24:f0:b0:08:cb:5a:0b:21:e6:
5f:10:7a:90:b8:29:39:eb:bc:d0:7c:81:ce:6a:1e:
cf:ff:a7:3b:35:1f:75:de:94:44:98:e0:45:58:84:
fd:49:78:88:7d:8a:1d:26:8f:21:9a:dc:25:db:5c:
a9:3c:08:ce:0d:65:aa:b3:ee:e7:2a:a2:30:51:09:
06:ed:a5:05:e6:1f:fc:97:c1:11:89:a9:ba:b9:f3:
55:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DF:C5:CB:C3:EC:C1:2C:5A:44:79:F4:FF:90:E0:1D:A8:7F:7A:FB
X509v3 Authority Key Identifier:
keyid:48:FA:ED:67:14:F4:6A:2B:84:3F:14:E4:0E:54:E6:26:A0:C5:00:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f2:39:e9:84:c4:52:54:c2:3d:68:00:dd:1d:01:18:d3:19:
77:33:21:91:b1:c5:b5:36:d2:68:66:c8:0f:17:4b:24:e8:a5:
e5:19:14:b0:5a:63:a8:70:7b:e8:e6:2e:ab:93:5f:18:44:27:
86:27:e0:3e:b1:fb:a3:e2:bd:69:d2:1c:0b:8a:5f:ba:ae:e8:
16:61:f3:be:68:b9:06:0c:1a:99:d5:bf:03:71:99:67:9d:35:
d2:76:0e:68:b3:7f:eb:25:71:3c:2b:62:d7:9b:8e:4e:de:4d:
3c:c7:e4:f3:e2:f9:91:4f:97:15:47:b2:f1:b4:be:22:3e:18:
5d:95:5a:f1:e0:6d:54:16:0a:9d:11:ef:e6:0a:a5:d7:4a:ef:
c2:de:39:75:ae:ef:3b:10:50:8c:2c:79:a2:eb:9c:f6:ae:34:
0b:d5:c0:52:68:f7:9d:f9:29:6c:cf:eb:a8:a3:96:48:a6:86:
c5:1e:63:55:f2:ff:5b:5d:ee:d2:66:3d:3a:fc:2e:3d:1d:03:
b7:74:61:b2:c6:5c:1b:77:12:64:fc:dd:e1:66:c0:6e:25:0f:
45:71:eb:42:58:c1:f3:e8:c0:0c:84:7a:a4:8e:21:ef:0c:1b:
05:a2:73:36:05:66:95:58:08:da:68:2a:76:e8:42:76:b7:33:
56:0d:e5:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dr9mH0R3i9G50p4B18ltMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZmFlZDY3MTRmNDZhMmI4NDNmMTRlNDBlNTRlNjI2YTBj
NTAwZWUwHhcNMjUwNjI4MTUwMTI2WhcNMjUwNjI5MTUwMTI2WjAzMTEwLwYDVQQD
EygzNWRmYzVjYmMzZWNjMTJjNWE0NDc5ZjRmZjkwZTAxZGE4N2Y3YWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGYQjjwCQdZmGHwv/4xz3vbzYitv
T6o7VkzD1hlvQNdaKOyBlFeQWGfT0A5PkFL7+yYfPY4frzhpORCh74esYlgRm3Cn
SsL7Ry+6qEAA7y5PPtL1UrNs63wPtkxBE4mSEST1KQY9Z9dlhEtGWQN4tQYvqMsZ
obTzWvaZcSugx/aBPPAmJ+l9HWdZMq1IZoiir4R4zIq3p0kWWybUHBHg5hj+6u42
d9iWWXMk8LAIy1oLIeZfEHqQuCk567zQfIHOah7P/6c7NR913pREmOBFWIT9SXiI
fYodJo8hmtwl21ypPAjODWWqs+7nKqIwUQkG7aUF5h/8l8ERiam6ufNViwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXfxcvD7MEsWkR59P+Q4B2of3r7MB8GA1UdIwQY
MBaAFEj67WcU9GorhD8U5A5U5iagxQDuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1BydFp4VDBhaXVFUHhUa0RsVG1KcURGQU80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80ZmYzZDEtY2MyZC00ZWJhLTkxM2Ut
Mjc4MjQ3N2I5ZDFlLzEvU1BydFp4VDBhaXVFUHhUa0RsVG1KcURGQU80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC80ZmYzZDEtY2MyZC00ZWJhLTkxM2UtMjc4MjQ3N2I5ZDFl
LzEvU1BydFp4VDBhaXVFUHhUa0RsVG1KcURGQU80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/I56YTE
UlTCPWgA3R0BGNMZdzMhkbHFtTbSaGbIDxdLJOil5RkUsFpjqHB76OYuq5NfGEQn
hifgPrH7o+K9adIcC4pfuq7oFmHzvmi5BgwamdW/A3GZZ5010nYOaLN/6yVxPCti
15uOTt5NPMfk8+L5kU+XFUey8bS+Ij4YXZVa8eBtVBYKnRHv5gql10rvwt45da7v
OxBQjCx5ouuc9q40C9XAUmj3nfkpbM/rqKOWSKaGxR5jVfL/W13u0mY9OvwuPR0D
t3RhssZcG3cSZPzd4WbAbiUPRXHrQljB8+jADIR6pI4h7wwbBaJzNgVmlVgI2mgq
duhCdrczVg3lBQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:38 2025 by rpki-client