
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
File: sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft (raw, json)
Hash identifier: NtW18d/awPFN4TweF3/4Sih8IpcAHfzxZHfYUyr0gW4=
Subject key identifier: C1:4D:DC:07:2C:D7:51:91:4A:27:C6:BA:AE:EE:25:FF:F9:14:D9:8E
Authority key identifier: B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
Certificate issuer: /CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Certificate serial: 0197B7B31DC794F848B1C2348396CDD5A81C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
Manifest number: 08D5
Signing time: Sat 28 Jun 2025 18:00:58 +0000
Manifest this update: Sat 28 Jun 2025 18:00:58 +0000
Manifest next update: Sun 29 Jun 2025 18:00:58 +0000
Files and hashes: 1: sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl (hash: pIgiDbIvS6bJ2hlbt/s2rj8xUtHkeO6Mbpe9BO3LqbM=)
2: zGycLxq7YqbVlBvuNEd47CRzT-U.roa (hash: o72/nsIKF1YG4XUjUYVm0HFMSGLne+bRa8vjHOf30pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:1d:c7:94:f8:48:b1:c2:34:83:96:cd:d5:a8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Validity
Not Before: Jun 28 18:00:58 2025 GMT
Not After : Jun 29 18:00:58 2025 GMT
Subject: CN=c14ddc072cd751914a27c6baaeee25fff914d98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:59:59:e9:0b:0b:8a:2a:65:46:3c:e1:07:9c:
40:f2:02:7c:3e:fb:79:6d:ed:a6:5e:7d:4f:dc:18:
e7:d4:bc:4f:92:0d:e0:73:d9:5a:c8:0a:0a:e0:a3:
48:a6:38:c0:3b:22:99:b4:fc:ae:6f:36:b3:ec:b9:
77:51:11:ae:e2:68:27:6a:15:c4:94:16:f3:71:01:
e4:20:10:6d:27:22:a3:4c:93:24:5a:22:75:50:22:
0b:08:b3:59:64:ea:5d:9c:8b:8a:16:89:57:13:79:
e8:44:b6:11:20:a6:6f:2b:19:ac:e1:e8:0f:4b:2d:
d6:cf:01:12:8c:2d:17:1e:a1:7e:36:00:2e:d0:ba:
de:aa:20:96:2e:96:3b:e8:79:4c:19:82:59:90:f5:
11:23:27:ad:00:50:65:f1:80:35:89:18:c8:9d:8c:
82:db:67:3c:c7:cd:1c:13:76:d7:73:ea:41:ae:be:
89:9d:64:59:ec:6b:97:f2:c0:c5:2e:a7:12:c1:c0:
71:e8:b2:fc:9a:95:16:f7:ee:67:15:fa:2b:49:9d:
6c:cd:99:d0:7c:7e:91:56:12:e1:20:12:bb:20:56:
92:b5:01:7b:b4:38:59:6d:23:0b:89:7d:e6:1d:23:
f0:20:5e:6f:bf:32:81:fb:0b:ff:61:34:8b:74:ec:
0d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4D:DC:07:2C:D7:51:91:4A:27:C6:BA:AE:EE:25:FF:F9:14:D9:8E
X509v3 Authority Key Identifier:
keyid:B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f2:e6:66:ec:7f:1d:5f:80:9e:04:8e:f9:66:53:5a:01:6f:
50:35:cf:db:d2:aa:55:30:4d:a6:e5:d4:00:c6:e4:ec:a1:2d:
ea:40:66:ef:75:2e:5e:5b:d7:23:23:91:e5:61:03:c2:5f:32:
80:31:35:9f:59:08:26:59:9d:0e:ee:c1:d7:89:ce:1d:33:5c:
bf:ef:dd:fd:87:b7:01:a0:6f:a2:87:cd:7e:3a:db:27:bf:15:
87:fa:f2:99:e8:0b:42:fb:59:42:3e:1c:a0:01:0a:1a:17:af:
6d:83:b2:db:7d:02:dd:17:c1:90:32:f5:f9:21:b1:1e:81:d5:
bd:09:a2:47:40:d5:29:64:e6:b5:dd:e4:06:9f:cf:bf:21:21:
94:33:be:dd:91:7c:65:7d:2e:f3:a7:6a:42:cf:52:c4:78:e7:
d9:71:e6:1b:8b:c3:d6:a3:5b:8c:13:c0:02:8f:6f:bf:49:f9:
26:f7:39:98:52:06:13:7c:43:53:60:2f:79:ce:df:fd:f7:b2:
e9:33:20:2a:07:ca:0a:c0:40:36:b1:32:a5:82:5a:3f:a9:c7:
84:9c:5d:75:69:92:60:31:0c:1e:87:4d:eb:e0:aa:77:fb:f3:
07:98:3c:bc:04:67:9b:f5:dc:3f:f7:31:b4:b0:b4:e6:ac:0d:
48:21:cb:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3sx3HlPhIscI0g5bN1agcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxODU5ZjNkMmNkMjgzZTdkYjkwZjAyZmUxYjBkNGY2MTU2
MDU5NDcwHhcNMjUwNjI4MTgwMDU4WhcNMjUwNjI5MTgwMDU4WjAzMTEwLwYDVQQD
EyhjMTRkZGMwNzJjZDc1MTkxNGEyN2M2YmFhZWVlMjVmZmY5MTRkOThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqllZ6QsLiiplRjzhB5xA8gJ8Pvt5
be2mXn1P3Bjn1LxPkg3gc9layAoK4KNIpjjAOyKZtPyubzaz7Ll3URGu4mgnahXE
lBbzcQHkIBBtJyKjTJMkWiJ1UCILCLNZZOpdnIuKFolXE3noRLYRIKZvKxms4egP
Sy3WzwESjC0XHqF+NgAu0LreqiCWLpY76HlMGYJZkPURIyetAFBl8YA1iRjInYyC
22c8x80cE3bXc+pBrr6JnWRZ7GuX8sDFLqcSwcBx6LL8mpUW9+5nFforSZ1szZnQ
fH6RVhLhIBK7IFaStQF7tDhZbSMLiX3mHSPwIF5vvzKB+wv/YTSLdOwN5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFN3Acs11GRSifGuq7uJf/5FNmOMB8GA1UdIwQY
MBaAFLGFnz0s0oPn25DwL+Gw1PYVYFlHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1lXZlBTelNnLWZia1BBdjRiRFU5aFZnV1VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9mN2E1NjAtODg3My00MGVlLWE3YzUt
MmFhZGM1YzNjNTdkLzEvc1lXZlBTelNnLWZia1BBdjRiRFU5aFZnV1VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9mN2E1NjAtODg3My00MGVlLWE3YzUtMmFhZGM1YzNjNTdk
LzEvc1lXZlBTelNnLWZia1BBdjRiRFU5aFZnV1VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdvLmZux/
HV+AngSO+WZTWgFvUDXP29KqVTBNpuXUAMbk7KEt6kBm73UuXlvXIyOR5WEDwl8y
gDE1n1kIJlmdDu7B14nOHTNcv+/d/Ye3AaBvoofNfjrbJ78Vh/rymegLQvtZQj4c
oAEKGhevbYOy230C3RfBkDL1+SGxHoHVvQmiR0DVKWTmtd3kBp/PvyEhlDO+3ZF8
ZX0u86dqQs9SxHjn2XHmG4vD1qNbjBPAAo9vv0n5Jvc5mFIGE3xDU2Avec7f/fey
6TMgKgfKCsBANrEypYJaP6nHhJxddWmSYDEMHodN6+Cqd/vzB5g8vARnm/XcP/cx
tLC05qwNSCHL6w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:00 2025 by rpki-client