Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
File: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft (raw, json)
Hash identifier: wV16Bk4akBsEq7JqrZ4M63zl7Y8qOSL4y73MJUu2Uuc=
Subject key identifier: 97:05:5D:A5:A4:E2:32:E8:97:7E:16:AF:E1:47:03:84:7A:A4:27:16
Authority key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
Certificate issuer: /CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Certificate serial: 0197B6D74B3D6A3F15A9E6DD1EC51605C460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 14:00:52 +0000
Manifest this update: Sat 28 Jun 2025 14:00:52 +0000
Manifest next update: Sun 29 Jun 2025 14:00:52 +0000
Files and hashes: 1: 3y9VMN9BUcZB2fmchyviGBmGtxw.roa (hash: WvArAvEQlUAHpEjB63U5q0z8PqLe+6GgRYCWBvbd2yM=)
2: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl (hash: r4H1FXeb99TTJ9ru91MMKUi48qzxVjhympFBpTOJxGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:4b:3d:6a:3f:15:a9:e6:dd:1e:c5:16:05:c4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Validity
Not Before: Jun 28 14:00:52 2025 GMT
Not After : Jun 29 14:00:52 2025 GMT
Subject: CN=97055da5a4e232e8977e16afe14703847aa42716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:59:76:6d:b0:d6:97:e2:41:e5:d4:96:f4:9b:
d3:3f:2a:8b:07:c4:2b:ce:1b:1e:ad:fc:bb:42:fa:
20:05:9d:d5:58:03:fa:df:61:b3:8b:f4:41:96:11:
e3:da:55:2d:4a:7f:3a:77:64:99:31:46:0f:32:e4:
cc:d2:00:fa:4b:79:a4:b2:f6:42:da:bd:25:7a:7b:
cb:78:b2:46:1b:94:a5:5a:b7:1c:bf:97:87:82:89:
c9:e0:a8:cd:78:c1:4a:16:ef:fa:b0:53:84:7b:9e:
4e:06:0a:69:29:ba:b9:ff:68:4c:40:06:89:13:5f:
ff:8f:70:78:ab:13:33:a4:07:9d:59:d0:53:3b:01:
8e:89:d3:1f:a0:b9:fa:05:c0:25:b3:a5:00:c7:ee:
83:cd:4c:27:59:c0:d7:81:8e:42:6e:31:47:ac:46:
9b:3a:82:37:65:c0:71:a6:cc:b8:96:00:93:73:7c:
c8:bc:9a:38:4b:ea:17:3d:ed:1b:11:9b:cb:3d:06:
91:41:12:46:ad:ef:c1:c9:aa:54:98:ac:65:36:a9:
65:eb:5b:d7:18:fb:87:2b:87:67:2a:d0:dc:59:8e:
e2:07:4f:c6:85:ba:d4:43:02:b3:94:1b:a5:17:29:
72:97:7a:05:9c:eb:8a:f1:8f:ff:35:95:14:ff:03:
b4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:05:5D:A5:A4:E2:32:E8:97:7E:16:AF:E1:47:03:84:7A:A4:27:16
X509v3 Authority Key Identifier:
keyid:B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5d:0b:a7:f5:35:d2:f2:d1:b1:60:02:99:89:fd:5a:1d:c2:
d3:0c:ab:08:c2:a2:d1:bb:f4:b1:f2:2f:94:a4:3c:63:02:59:
10:79:d0:88:b7:cf:0c:9b:6b:66:ac:bb:28:96:04:8c:1f:0d:
7e:35:87:9c:98:2e:0c:0b:8f:a0:5a:0d:f0:a4:cd:3f:b6:2a:
24:78:96:58:3a:81:14:8c:a9:8c:50:34:b6:a0:4f:12:e5:fe:
ac:c2:b0:53:17:eb:fe:53:01:27:f6:93:46:d6:98:48:fa:6d:
14:65:63:a0:ec:fd:8f:bb:69:70:9b:9d:53:77:cf:86:e5:49:
31:72:b1:62:49:18:9f:67:4c:4d:5e:14:f2:e2:79:bf:1b:f1:
3e:d0:40:8a:2c:08:dc:fc:85:70:32:70:ee:53:ac:6e:ed:0c:
fa:90:d2:05:ef:b6:e0:82:9c:b9:ac:d4:e0:69:d3:1a:6e:4a:
c6:13:43:e6:9a:a1:0f:c3:3b:9c:4f:03:d0:ad:62:a1:94:d6:
ab:b8:19:cd:92:c0:6f:2f:8f:f7:46:63:5d:9b:aa:1d:9c:91:
ae:42:6e:94:67:fe:46:59:2c:53:37:76:9e:01:c4:35:89:99:
06:c1:51:d0:b3:28:78:47:d1:44:a7:0a:ad:a6:85:82:1e:98:
15:d7:0a:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe210s9aj8VqebdHsUWBcRgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYWZkMGNiOTc3NWZmNDc4ZjE4NWY4Zjk4MGQ1YjFkOTJk
NGJlNGYwHhcNMjUwNjI4MTQwMDUyWhcNMjUwNjI5MTQwMDUyWjAzMTEwLwYDVQQD
Eyg5NzA1NWRhNWE0ZTIzMmU4OTc3ZTE2YWZlMTQ3MDM4NDdhYTQyNzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1l2bbDWl+JB5dSW9JvTPyqLB8Qr
zhserfy7QvogBZ3VWAP632Gzi/RBlhHj2lUtSn86d2SZMUYPMuTM0gD6S3mksvZC
2r0lenvLeLJGG5SlWrccv5eHgonJ4KjNeMFKFu/6sFOEe55OBgppKbq5/2hMQAaJ
E1//j3B4qxMzpAedWdBTOwGOidMfoLn6BcAls6UAx+6DzUwnWcDXgY5CbjFHrEab
OoI3ZcBxpsy4lgCTc3zIvJo4S+oXPe0bEZvLPQaRQRJGre/ByapUmKxlNqll61vX
GPuHK4dnKtDcWY7iB0/GhbrUQwKzlBulFylyl3oFnOuK8Y//NZUU/wO0qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcFXaWk4jLol34Wr+FHA4R6pCcWMB8GA1UdIwQY
MBaAFLCv0MuXdf9Hjxhfj5gNWx2S1L5PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0tfUXk1ZDFfMGVQR0YtUG1BMWJIWkxVdms4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84MDBmZmQtYzUzYi00NjQ2LWIyNmUt
NmVmNWM0NzM1ZThhLzEvc0tfUXk1ZDFfMGVQR0YtUG1BMWJIWkxVdms4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy84MDBmZmQtYzUzYi00NjQ2LWIyNmUtNmVmNWM0NzM1ZThh
LzEvc0tfUXk1ZDFfMGVQR0YtUG1BMWJIWkxVdms4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS10Lp/U1
0vLRsWACmYn9Wh3C0wyrCMKi0bv0sfIvlKQ8YwJZEHnQiLfPDJtrZqy7KJYEjB8N
fjWHnJguDAuPoFoN8KTNP7YqJHiWWDqBFIypjFA0tqBPEuX+rMKwUxfr/lMBJ/aT
RtaYSPptFGVjoOz9j7tpcJudU3fPhuVJMXKxYkkYn2dMTV4U8uJ5vxvxPtBAiiwI
3PyFcDJw7lOsbu0M+pDSBe+24IKcuazU4GnTGm5KxhND5pqhD8M7nE8D0K1ioZTW
q7gZzZLAby+P90ZjXZuqHZyRrkJulGf+RlksUzd2ngHENYmZBsFR0LMoeEfRRKcK
raaFgh6YFdcKgA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:51:50 2025 by rpki-client