Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
File: sKclKqZD0NvELaQQ6cIPVwM2jNg.mft (raw, json)
Hash identifier: NCNqEVlJSkOunl2WGz71dPnpewyI5TJ5nF/r26aTrrM=
Subject key identifier: 8D:AD:6B:32:38:A5:92:79:40:E8:93:9D:F5:75:1E:42:E3:57:2F:0A
Authority key identifier: B0:A7:25:2A:A6:43:D0:DB:C4:2D:A4:10:E9:C2:0F:57:03:36:8C:D8
Certificate issuer: /CN=b0a7252aa643d0dbc42da410e9c20f5703368cd8
Certificate serial: 0197B7452D96DABAF7364B88995325F2CF96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 16:00:53 +0000
Manifest this update: Sat 28 Jun 2025 16:00:53 +0000
Manifest next update: Sun 29 Jun 2025 16:00:53 +0000
Files and hashes: 1: n60UwFRR1GBkJeWW6TyEPviSqRg.roa (hash: 1Igyo5YmuM6qjLho9mnJYZI0b/XVpfl/12bJjKoYl+o=)
2: sKclKqZD0NvELaQQ6cIPVwM2jNg.crl (hash: f6l5TcatYonPhZcVg1nkCelTEHumGbzNfqQsFurl+ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:2d:96:da:ba:f7:36:4b:88:99:53:25:f2:cf:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a7252aa643d0dbc42da410e9c20f5703368cd8
Validity
Not Before: Jun 28 16:00:53 2025 GMT
Not After : Jun 29 16:00:53 2025 GMT
Subject: CN=8dad6b3238a5927940e8939df5751e42e3572f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:39:ee:c7:58:0c:ec:7a:3e:1b:59:d2:3c:72:
a4:fc:da:02:53:e6:b8:25:fd:63:82:29:09:b0:ef:
51:3a:1e:6b:c4:4e:d7:c3:ec:35:e6:72:82:48:2e:
fa:09:06:23:db:2e:76:21:5a:a9:21:7e:10:a9:2b:
cb:ec:49:33:0a:20:c2:e9:db:54:78:5d:4e:d6:55:
bc:fd:c7:94:e9:55:0f:6b:79:a6:31:f6:00:b9:88:
b0:21:4e:cb:f2:a4:26:37:6c:a5:20:16:93:c4:28:
c9:35:c2:9b:a8:ea:2d:3e:3c:d9:e6:be:4a:03:b5:
45:ce:11:86:db:a9:33:df:19:63:37:ac:48:b4:84:
d3:86:cc:0c:a7:1e:f8:1d:a7:c8:ad:db:2e:67:a1:
81:86:be:a9:d1:14:88:9a:17:f9:70:c9:47:d0:44:
78:fc:f2:c2:b5:7c:8c:d2:2b:2c:8d:16:e7:e0:55:
c9:7e:24:b1:43:5b:b6:99:f6:c7:5f:99:1b:d4:fd:
1d:12:ef:c3:f0:85:1a:b0:95:4b:3b:32:ab:d3:27:
b4:01:c5:42:e8:8f:09:88:a0:7a:a3:3b:e5:1c:97:
f4:fd:68:62:aa:d3:35:9a:8d:78:a8:a8:c9:bf:9c:
b5:10:48:96:00:f5:7c:bf:96:cf:e6:42:de:bd:db:
bb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AD:6B:32:38:A5:92:79:40:E8:93:9D:F5:75:1E:42:E3:57:2F:0A
X509v3 Authority Key Identifier:
keyid:B0:A7:25:2A:A6:43:D0:DB:C4:2D:A4:10:E9:C2:0F:57:03:36:8C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d6:b4:15:77:f0:13:2d:ff:06:96:b3:67:05:b8:cf:b3:12:
c7:a1:c6:f7:8f:df:ac:4d:ba:e9:16:8c:c5:a7:e1:1a:91:b4:
74:ee:5e:88:e1:5e:db:2f:c3:c1:3e:b1:5e:6e:4d:bb:4b:1c:
70:77:97:d0:fc:4b:2d:f0:ea:dc:fe:6b:a6:4f:1c:ec:32:1e:
e2:48:30:70:c8:88:c9:31:10:e6:8c:d3:a6:81:3c:bc:9e:61:
35:8d:18:a9:11:90:60:f1:11:55:c1:53:28:fe:7a:55:d4:2c:
4b:b3:05:e2:fd:26:bc:c8:e9:68:5b:91:1b:ee:1c:5c:5d:f2:
f1:f3:99:dd:64:6e:80:88:3a:f7:c9:bb:12:1c:7e:ab:75:d8:
21:40:b9:d8:1b:f0:45:3d:37:26:39:d7:87:70:c6:70:a3:ab:
df:80:ca:ca:c5:13:af:f8:d3:e5:94:ec:c2:89:60:d9:ff:d5:
c3:ea:96:3a:1d:c6:03:24:69:2b:37:a1:87:93:c8:85:50:64:
ab:94:57:ef:e9:8a:9f:04:3d:f5:ab:03:82:56:c2:e8:4e:f4:
36:4c:81:ef:6e:14:f6:2d:ca:4a:c8:6c:dc:a1:17:47:2c:e3:
97:7c:45:9e:00:2e:54:a0:16:05:e5:36:ca:59:b6:0c:95:5f:
11:5c:1a:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RS2W2rr3NkuImVMl8s+WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYTcyNTJhYTY0M2QwZGJjNDJkYTQxMGU5YzIwZjU3MDMz
NjhjZDgwHhcNMjUwNjI4MTYwMDUzWhcNMjUwNjI5MTYwMDUzWjAzMTEwLwYDVQQD
Eyg4ZGFkNmIzMjM4YTU5Mjc5NDBlODkzOWRmNTc1MWU0MmUzNTcyZjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jnux1gM7Ho+G1nSPHKk/NoCU+a4
Jf1jgikJsO9ROh5rxE7Xw+w15nKCSC76CQYj2y52IVqpIX4QqSvL7EkzCiDC6dtU
eF1O1lW8/ceU6VUPa3mmMfYAuYiwIU7L8qQmN2ylIBaTxCjJNcKbqOotPjzZ5r5K
A7VFzhGG26kz3xljN6xItITThswMpx74HafIrdsuZ6GBhr6p0RSImhf5cMlH0ER4
/PLCtXyM0issjRbn4FXJfiSxQ1u2mfbHX5kb1P0dEu/D8IUasJVLOzKr0ye0AcVC
6I8JiKB6ozvlHJf0/WhiqtM1mo14qKjJv5y1EEiWAPV8v5bP5kLevdu7OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2tazI4pZJ5QOiTnfV1HkLjVy8KMB8GA1UdIwQY
MBaAFLCnJSqmQ9DbxC2kEOnCD1cDNozYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0tjbEtxWkQwTnZFTGFRUTZjSVBWd00yak5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lNGYzZWYtN2JmYy00MDU1LWI3OTgt
MDI4YTJiMGE1M2Q1LzEvc0tjbEtxWkQwTnZFTGFRUTZjSVBWd00yak5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9lNGYzZWYtN2JmYy00MDU1LWI3OTgtMDI4YTJiMGE1M2Q1
LzEvc0tjbEtxWkQwTnZFTGFRUTZjSVBWd00yak5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlda0FXfw
Ey3/BpazZwW4z7MSx6HG94/frE266RaMxafhGpG0dO5eiOFe2y/DwT6xXm5Nu0sc
cHeX0PxLLfDq3P5rpk8c7DIe4kgwcMiIyTEQ5ozTpoE8vJ5hNY0YqRGQYPERVcFT
KP56VdQsS7MF4v0mvMjpaFuRG+4cXF3y8fOZ3WRugIg698m7Ehx+q3XYIUC52Bvw
RT03JjnXh3DGcKOr34DKysUTr/jT5ZTswolg2f/Vw+qWOh3GAyRpKzehh5PIhVBk
q5RX7+mKnwQ99asDglbC6E70NkyB724U9i3KSshs3KEXRyzjl3xFngAuVKAWBeU2
ylm2DJVfEVwaEQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:50:29 2025 by rpki-client