Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
File: SrfcA3ifWGIbJejdDZJdyRtKWqI.mft (raw, json)
Hash identifier: 59w4H5Y6HmV5QTU4EXCHXL13gXgimcsyWQDea2B7fyg=
Subject key identifier: B2:12:C3:C5:7D:48:B9:02:9F:4A:75:18:76:78:92:EA:AC:EB:59:9E
Authority key identifier: 4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
Certificate issuer: /CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Certificate serial: 0197B70EFB088E788FFF15CA6B4B57B77C64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
Manifest number: 0A5A
Signing time: Sat 28 Jun 2025 15:01:41 +0000
Manifest this update: Sat 28 Jun 2025 15:01:41 +0000
Manifest next update: Sun 29 Jun 2025 15:01:41 +0000
Files and hashes: 1: EmdE4lFlfaABPtiZtlnbFIKNWhE.roa (hash: xZDQuK6O09neLie5Q456W4oztNFuHLsLoArEyWHRJSU=)
2: SrfcA3ifWGIbJejdDZJdyRtKWqI.crl (hash: XmeLULNaL5ChAPDmmx7ASOjMG+wQIO6jOKSGoYPPE44=)
3: lCpE9-_9vA0HzQAwKrWQ7gX2Gi8.roa (hash: YkwTTveNH0IQGCLC0ZIMEDB0zjPdx3yFhcYm5gkoPpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:fb:08:8e:78:8f:ff:15:ca:6b:4b:57:b7:7c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Validity
Not Before: Jun 28 15:01:41 2025 GMT
Not After : Jun 29 15:01:41 2025 GMT
Subject: CN=b212c3c57d48b9029f4a7518767892eaaceb599e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a4:f0:a3:cd:3f:cd:94:96:ea:02:05:13:83:
34:d8:ec:42:ed:7e:bf:9b:ac:5e:02:8a:0c:67:94:
aa:75:c5:83:54:49:8b:a2:9f:76:b5:33:c5:44:e3:
b3:6c:d7:13:9b:ea:05:2b:a3:0e:cc:13:ba:21:ae:
b0:60:0a:e4:c8:34:9a:08:03:94:70:e3:c2:aa:93:
90:64:25:cf:ff:01:90:8f:ba:0b:f3:af:35:e6:8b:
bf:4b:79:0f:1e:98:a6:3b:16:5b:5b:20:1e:10:d2:
99:c0:12:f2:11:21:30:9f:d6:18:45:71:ad:ee:fb:
70:a1:e5:e7:7a:d0:45:a2:24:91:7f:51:e8:e4:ee:
0d:b7:1d:68:c3:d3:91:4c:01:32:d8:cb:1c:0c:59:
7d:ae:79:b3:3f:24:39:8f:c1:9a:eb:5b:37:c8:47:
0c:8f:47:f5:73:83:ad:ae:e5:f1:0b:28:59:06:d3:
d2:78:e1:bc:21:8f:8e:aa:dc:ec:b8:4f:6a:51:74:
a0:fb:16:ad:dc:1e:2c:6b:85:3e:67:d3:a2:f1:12:
21:80:14:6c:fc:fc:86:13:6d:c5:fb:34:8f:83:b5:
b7:33:6e:f7:5f:b9:51:cf:17:a6:0a:15:94:51:d7:
6e:fa:8a:01:40:8a:22:a5:9a:b0:0f:67:ab:bd:6d:
27:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:12:C3:C5:7D:48:B9:02:9F:4A:75:18:76:78:92:EA:AC:EB:59:9E
X509v3 Authority Key Identifier:
keyid:4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:bf:a7:83:dc:d2:d3:6b:42:a0:4b:3a:6d:bd:2a:29:2c:7a:
b9:92:ff:3c:68:16:ac:fe:2a:52:d0:d5:23:b1:43:06:c5:f7:
28:d2:5c:10:ff:7b:03:f5:fe:56:2f:68:91:a3:a0:f0:9b:3a:
f5:7f:20:22:9c:d9:a8:5d:c5:f9:18:ed:cd:14:dd:b6:02:78:
98:84:c1:f9:f2:85:a1:b4:b4:ee:42:66:ea:fb:8f:ff:6f:5f:
c9:ea:73:ef:a3:2f:72:c7:2b:f9:d2:61:48:0a:c9:10:c4:9d:
64:c8:97:a8:d7:f3:ce:8a:9c:9c:1d:61:98:83:bd:06:17:fa:
c1:d1:50:a2:09:5d:70:a0:da:3f:91:04:6d:76:b2:ae:32:e1:
5b:88:15:05:7d:4a:8b:0d:56:75:b5:02:87:1c:17:88:f2:2a:
e4:5d:41:c3:b3:20:5c:0a:c3:c5:19:62:71:e2:1a:0c:0b:21:
67:29:8a:d6:f9:a9:91:a9:cb:90:9c:df:6b:7a:54:4d:a8:c3:
7f:f6:36:44:01:c0:a1:e7:9e:03:2b:1c:44:4b:f6:b6:3e:07:
2d:99:3b:6d:ee:d4:fd:29:5d:a6:f6:a8:b8:11:83:dc:f0:5d:
73:64:55:ab:75:0d:43:90:6e:96:bc:ca:7f:18:11:8d:d8:18:
18:2e:ea:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DvsIjniP/xXKa0tXt3xkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYjdkYzAzNzg5ZjU4NjIxYjI1ZThkZDBkOTI1ZGM5MWI0
YTVhYTIwHhcNMjUwNjI4MTUwMTQxWhcNMjUwNjI5MTUwMTQxWjAzMTEwLwYDVQQD
EyhiMjEyYzNjNTdkNDhiOTAyOWY0YTc1MTg3Njc4OTJlYWFjZWI1OTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6Two80/zZSW6gIFE4M02OxC7X6/
m6xeAooMZ5SqdcWDVEmLop92tTPFROOzbNcTm+oFK6MOzBO6Ia6wYArkyDSaCAOU
cOPCqpOQZCXP/wGQj7oL86815ou/S3kPHpimOxZbWyAeENKZwBLyESEwn9YYRXGt
7vtwoeXnetBFoiSRf1Ho5O4Ntx1ow9ORTAEy2MscDFl9rnmzPyQ5j8Ga61s3yEcM
j0f1c4OtruXxCyhZBtPSeOG8IY+OqtzsuE9qUXSg+xat3B4sa4U+Z9Oi8RIhgBRs
/PyGE23F+zSPg7W3M273X7lRzxemChWUUddu+ooBQIoipZqwD2ervW0nuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLISw8V9SLkCn0p1GHZ4kuqs61meMB8GA1UdIwQY
MBaAFEq33AN4n1hiGyXo3Q2SXckbSlqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3JmY0EzaWZXR0liSmVqZERaSmR5UnRLV3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84YTU5ZGItNWFkOC00ZjNmLTk3YzIt
ZjM4YmNiZDkzMzkwLzEvU3JmY0EzaWZXR0liSmVqZERaSmR5UnRLV3FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC84YTU5ZGItNWFkOC00ZjNmLTk3YzItZjM4YmNiZDkzMzkw
LzEvU3JmY0EzaWZXR0liSmVqZERaSmR5UnRLV3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATr+ng9zS
02tCoEs6bb0qKSx6uZL/PGgWrP4qUtDVI7FDBsX3KNJcEP97A/X+Vi9okaOg8Js6
9X8gIpzZqF3F+RjtzRTdtgJ4mITB+fKFobS07kJm6vuP/29fyepz76Mvcscr+dJh
SArJEMSdZMiXqNfzzoqcnB1hmIO9Bhf6wdFQogldcKDaP5EEbXayrjLhW4gVBX1K
iw1WdbUChxwXiPIq5F1Bw7MgXArDxRliceIaDAshZymK1vmpkanLkJzfa3pUTajD
f/Y2RAHAoeeeAyscREv2tj4HLZk7be7U/SldpvaouBGD3PBdc2RVq3UNQ5BulrzK
fxgRjdgYGC7q9A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:24 2025 by rpki-client