Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
File: SFldSlTtZEITxEYZXjb3jsGig5k.mft (raw, json)
Hash identifier: U/r93QLbZ0NmACFt7qb1CUnp96xYbxDwqezHJIeUvx0=
Subject key identifier: 89:7C:08:4B:8B:41:3D:86:91:53:A6:4C:0B:18:5C:C2:7F:0A:01:A5
Authority key identifier: 48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99
Certificate issuer: /CN=48595d4a54ed644213c446195e36f78ec1a28399
Certificate serial: 0197B96B18E6F03ABE2058E0CA583E9BE1A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
Manifest number: 15B6
Signing time: Sun 29 Jun 2025 02:01:32 +0000
Manifest this update: Sun 29 Jun 2025 02:01:32 +0000
Manifest next update: Mon 30 Jun 2025 02:01:32 +0000
Files and hashes: 1: 5TwfULMH-unHdDYOcT1BkwSNVj4.roa (hash: MnqaA2gAqS7okflGRdl3L2EkczyiAqyp5YnJcnh49kE=)
2: SFldSlTtZEITxEYZXjb3jsGig5k.crl (hash: JHfyAxWqss6HoJqPU185Dd4qUS8ejGAgdwD4fexMaWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:18:e6:f0:3a:be:20:58:e0:ca:58:3e:9b:e1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48595d4a54ed644213c446195e36f78ec1a28399
Validity
Not Before: Jun 29 02:01:32 2025 GMT
Not After : Jun 30 02:01:32 2025 GMT
Subject: CN=897c084b8b413d869153a64c0b185cc27f0a01a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:40:5b:d9:8f:5b:74:77:93:e1:35:c9:de:34:
a5:4c:74:88:14:ae:e9:bb:e9:60:5d:ab:6e:b5:fa:
86:c8:8e:a9:8f:0e:cb:54:ee:98:c7:66:5e:c6:b0:
ca:dd:b9:d3:ce:8f:01:1a:36:f8:49:b0:24:b4:b5:
37:bf:a1:a3:cb:3c:e3:a4:48:64:8e:7c:61:00:c6:
42:ec:9d:69:20:b7:47:36:5b:ed:3a:cd:8b:8c:ba:
f9:be:00:49:d2:30:77:f2:29:4c:65:dd:75:19:83:
c6:e2:0a:83:e5:a5:f3:2e:df:3c:3e:69:10:eb:62:
1a:5a:af:37:3a:7e:be:a8:79:0e:07:61:00:ab:90:
29:07:24:4a:c7:39:8d:2c:e4:44:3d:e6:af:7c:46:
a8:a3:80:ed:cd:7c:e9:c7:8d:a0:d6:6e:58:ac:eb:
36:f1:b2:ba:f9:73:62:54:1b:bd:85:aa:0a:7c:2c:
cd:a0:5c:a5:ea:2e:35:29:ef:4b:a4:e8:c8:5a:5e:
5f:6d:2c:c5:60:79:a5:8d:52:df:16:fd:77:48:c2:
15:41:67:ff:5a:e6:f5:fb:19:d0:fb:07:d3:8f:0b:
0c:71:8e:a8:49:de:7c:e7:6a:ab:2f:fb:e4:23:19:
9c:b0:76:28:53:ce:0d:b8:03:61:91:ea:69:bc:71:
87:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7C:08:4B:8B:41:3D:86:91:53:A6:4C:0B:18:5C:C2:7F:0A:01:A5
X509v3 Authority Key Identifier:
keyid:48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:6a:ad:bd:ae:6a:19:81:01:4b:20:b5:6b:80:8e:f8:65:c3:
74:6b:72:ce:1d:e7:82:1f:8c:d0:81:4f:45:6a:62:2c:33:54:
12:c7:a7:08:ab:79:8c:50:6b:d6:11:f8:fc:26:c6:7d:fd:53:
1a:0b:fd:9f:59:33:b2:0d:7e:7b:55:81:f2:e7:74:65:35:fc:
10:28:e7:0b:85:82:10:f9:26:d7:7c:e2:bc:0f:84:e1:0a:5d:
78:a8:df:45:ea:16:3d:b0:dc:aa:28:19:d2:bc:f3:56:3a:32:
a6:e5:e6:b9:df:40:24:a5:90:2e:b3:42:eb:4c:55:7e:ed:36:
3d:f7:42:14:d2:96:2c:24:05:6a:3d:17:a2:55:ab:4c:a9:57:
0b:f3:6c:68:03:7b:03:1d:56:1a:40:f1:98:3b:18:e2:b5:57:
ed:cb:59:08:ae:58:68:0f:45:5e:73:51:39:e3:1c:04:7f:cd:
3d:c4:03:06:7a:16:a4:0f:c4:b8:3c:da:4e:84:f1:63:48:35:
f0:e1:15:6c:ae:14:58:ca:a4:a9:c6:f8:a9:3c:8e:29:d9:43:
f4:1a:0b:f7:08:63:22:19:b6:5a:2d:44:b7:28:e3:44:9b:24:
d0:74:47:d3:15:a4:e8:4e:de:85:d4:e1:66:03:83:9d:28:c8:
41:78:de:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5axjm8Dq+IFjgylg+m+GhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NTk1ZDRhNTRlZDY0NDIxM2M0NDYxOTVlMzZmNzhlYzFh
MjgzOTkwHhcNMjUwNjI5MDIwMTMyWhcNMjUwNjMwMDIwMTMyWjAzMTEwLwYDVQQD
Eyg4OTdjMDg0YjhiNDEzZDg2OTE1M2E2NGMwYjE4NWNjMjdmMGEwMWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUBb2Y9bdHeT4TXJ3jSlTHSIFK7p
u+lgXatutfqGyI6pjw7LVO6Yx2ZexrDK3bnTzo8BGjb4SbAktLU3v6GjyzzjpEhk
jnxhAMZC7J1pILdHNlvtOs2LjLr5vgBJ0jB38ilMZd11GYPG4gqD5aXzLt88PmkQ
62IaWq83On6+qHkOB2EAq5ApByRKxzmNLOREPeavfEaoo4DtzXzpx42g1m5YrOs2
8bK6+XNiVBu9haoKfCzNoFyl6i41Ke9LpOjIWl5fbSzFYHmljVLfFv13SMIVQWf/
Wub1+xnQ+wfTjwsMcY6oSd5852qrL/vkIxmcsHYoU84NuANhkeppvHGHIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIl8CEuLQT2GkVOmTAsYXMJ/CgGlMB8GA1UdIwQY
MBaAFEhZXUpU7WRCE8RGGV42947BooOZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0ZsZFNsVHRaRUlUeEVZWlhqYjNqc0dpZzVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82ZTZmNTEtNGUxMy00NjVlLWI0ZDYt
MmU4ZGNkZDUxNjUxLzEvU0ZsZFNsVHRaRUlUeEVZWlhqYjNqc0dpZzVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS82ZTZmNTEtNGUxMy00NjVlLWI0ZDYtMmU4ZGNkZDUxNjUx
LzEvU0ZsZFNsVHRaRUlUeEVZWlhqYjNqc0dpZzVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmqtva5q
GYEBSyC1a4CO+GXDdGtyzh3ngh+M0IFPRWpiLDNUEsenCKt5jFBr1hH4/CbGff1T
Ggv9n1kzsg1+e1WB8ud0ZTX8ECjnC4WCEPkm13zivA+E4QpdeKjfReoWPbDcqigZ
0rzzVjoypuXmud9AJKWQLrNC60xVfu02PfdCFNKWLCQFaj0XolWrTKlXC/NsaAN7
Ax1WGkDxmDsY4rVX7ctZCK5YaA9FXnNROeMcBH/NPcQDBnoWpA/EuDzaToTxY0g1
8OEVbK4UWMqkqcb4qTyOKdlD9BoL9whjIhm2Wi1EtyjjRJsk0HRH0xWk6E7ehdTh
ZgODnSjIQXjeeg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 10:34:14 2025 by rpki-client