Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
File: sx0cKJHYgEaaINi38Y5M2GVDAEY.mft (raw, json)
Hash identifier: 1cX8jR1LTqHr3U3eNMffNGkWkEPUuPPcaF9+0hg59z4=
Subject key identifier: DA:53:67:82:05:AE:CB:C6:97:A3:47:D7:C9:4D:7A:A6:B6:E3:EB:2A
Authority key identifier: B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46
Certificate issuer: /CN=b31d1c2891d880469a20d8b7f18e4cd865430046
Certificate serial: 0197B70EA58626DD6AC3D9E68866541C623E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
Manifest number: 0297
Signing time: Sat 28 Jun 2025 15:01:19 +0000
Manifest this update: Sat 28 Jun 2025 15:01:19 +0000
Manifest next update: Sun 29 Jun 2025 15:01:19 +0000
Files and hashes: 1: K12F-uP3adhB5XYkvRWOwtyWFxQ.roa (hash: 4K99rP4m/GgxDIw4+Su5OB+ocoFQK/2aIqkgeWKmoU4=)
2: sx0cKJHYgEaaINi38Y5M2GVDAEY.crl (hash: tdkzYkxjPDYGzeHVHWrVTrPnx+rkUn5T54GuuQbbeJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a5:86:26:dd:6a:c3:d9:e6:88:66:54:1c:62:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31d1c2891d880469a20d8b7f18e4cd865430046
Validity
Not Before: Jun 28 15:01:19 2025 GMT
Not After : Jun 29 15:01:19 2025 GMT
Subject: CN=da53678205aecbc697a347d7c94d7aa6b6e3eb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:27:d6:5a:4a:ef:b7:4b:84:c3:ab:2d:59:25:
66:bc:18:4e:5d:20:ac:eb:8e:eb:cc:eb:0e:e3:95:
e3:bc:b5:35:63:47:10:c5:2e:96:99:3c:db:da:2f:
fa:2e:57:58:30:5f:fa:8b:fc:2e:7b:ff:63:d0:6c:
75:ac:46:1f:5f:1f:30:e7:cd:ed:f6:46:09:67:9d:
21:4e:b8:74:f1:4d:c4:4c:0d:33:63:db:28:7c:f4:
a7:aa:d3:76:cf:ed:3c:f6:fc:07:dd:f6:2a:76:13:
3a:08:e5:1b:b0:f9:d2:ac:b6:7c:f4:1e:07:eb:7c:
12:b2:76:3e:8c:b0:ad:f0:fe:71:bd:9e:a1:49:15:
f4:d4:c6:e7:a5:e3:9c:d8:e6:3c:1d:da:ce:56:0b:
43:38:c5:cc:2e:24:55:c5:51:23:0e:6b:c3:49:58:
5d:15:c1:4f:e6:88:8b:52:38:77:34:03:30:dd:61:
66:19:5d:f6:79:e8:9d:1c:03:07:d1:47:26:33:da:
c1:e0:55:ef:f5:73:85:9a:c1:51:27:3c:15:fb:9e:
8d:a4:73:1a:69:6f:ac:72:a1:4e:7e:5e:eb:e4:ba:
c1:73:8c:4f:03:64:f4:8f:6c:6a:59:9e:af:b3:6a:
46:55:94:1f:32:ee:bf:a9:0c:3e:6a:d3:ba:6b:55:
7e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:53:67:82:05:AE:CB:C6:97:A3:47:D7:C9:4D:7A:A6:B6:E3:EB:2A
X509v3 Authority Key Identifier:
keyid:B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c6:02:aa:c7:f0:21:53:9e:89:da:55:e5:72:38:ee:b1:3e:
92:ea:3d:e2:a5:f8:3f:0b:8e:7f:6a:79:74:7d:43:f8:c7:85:
37:b8:d6:6c:f7:aa:24:89:af:a1:0c:eb:67:a6:87:fb:a0:1f:
59:f9:3d:b3:2f:8a:49:db:45:ef:b3:76:1f:a1:fe:23:f2:d9:
42:ab:a5:12:eb:18:4f:7e:c9:78:f7:87:1c:19:c3:0c:6d:2d:
25:ad:c0:35:64:6c:52:51:77:99:6e:67:35:06:0a:d8:14:c3:
95:47:e9:cf:99:dd:f4:98:c0:ee:fd:d6:9d:ca:00:97:0c:fc:
0f:90:e1:e3:8f:ca:70:f2:7f:62:b8:27:b9:1e:08:fa:96:e7:
0f:df:b2:4e:f7:fa:ee:9c:02:c6:0b:33:15:17:af:ce:76:18:
92:88:11:d8:f2:c3:28:48:b7:05:93:7c:dd:75:4f:ae:9f:db:
e7:3b:9c:d7:8b:e8:97:d2:e6:85:b2:7a:cb:bc:55:b2:8a:0d:
18:02:43:d6:34:de:50:da:51:28:79:0d:82:50:0e:55:5a:6f:
bf:e0:67:2d:43:ed:dd:09:22:ca:8d:44:f7:e5:ae:46:6d:c0:
fa:59:15:0b:43:44:18:e5:ed:46:89:f9:3b:0e:b1:f9:ec:69:
77:2b:9c:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DqWGJt1qw9nmiGZUHGI+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMWQxYzI4OTFkODgwNDY5YTIwZDhiN2YxOGU0Y2Q4NjU0
MzAwNDYwHhcNMjUwNjI4MTUwMTE5WhcNMjUwNjI5MTUwMTE5WjAzMTEwLwYDVQQD
EyhkYTUzNjc4MjA1YWVjYmM2OTdhMzQ3ZDdjOTRkN2FhNmI2ZTNlYjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwifWWkrvt0uEw6stWSVmvBhOXSCs
647rzOsO45XjvLU1Y0cQxS6WmTzb2i/6LldYMF/6i/wue/9j0Gx1rEYfXx8w583t
9kYJZ50hTrh08U3ETA0zY9sofPSnqtN2z+089vwH3fYqdhM6COUbsPnSrLZ89B4H
63wSsnY+jLCt8P5xvZ6hSRX01MbnpeOc2OY8HdrOVgtDOMXMLiRVxVEjDmvDSVhd
FcFP5oiLUjh3NAMw3WFmGV32eeidHAMH0UcmM9rB4FXv9XOFmsFRJzwV+56NpHMa
aW+scqFOfl7r5LrBc4xPA2T0j2xqWZ6vs2pGVZQfMu6/qQw+atO6a1V+mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNpTZ4IFrsvGl6NH18lNeqa24+sqMB8GA1UdIwQY
MBaAFLMdHCiR2IBGmiDYt/GOTNhlQwBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3gwY0tKSFlnRWFhSU5pMzhZNU0yR1ZEQUVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83NzUwMTctYTQ1Yi00NjM3LWEzYTAt
YWYxYTBlMDBmODIzLzEvc3gwY0tKSFlnRWFhSU5pMzhZNU0yR1ZEQUVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy83NzUwMTctYTQ1Yi00NjM3LWEzYTAtYWYxYTBlMDBmODIz
LzEvc3gwY0tKSFlnRWFhSU5pMzhZNU0yR1ZEQUVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWsYCqsfw
IVOeidpV5XI47rE+kuo94qX4PwuOf2p5dH1D+MeFN7jWbPeqJImvoQzrZ6aH+6Af
Wfk9sy+KSdtF77N2H6H+I/LZQqulEusYT37JePeHHBnDDG0tJa3ANWRsUlF3mW5n
NQYK2BTDlUfpz5nd9JjA7v3WncoAlwz8D5Dh44/KcPJ/YrgnuR4I+pbnD9+yTvf6
7pwCxgszFRevznYYkogR2PLDKEi3BZN83XVPrp/b5zuc14vol9LmhbJ6y7xVsooN
GAJD1jTeUNpRKHkNglAOVVpvv+BnLUPt3Qkiyo1E9+WuRm3A+lkVC0NEGOXtRon5
Ow6x+expdyucxA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:47 2025 by rpki-client