Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
File: sSZ6Uay2bymRvqUkP-OIBolxofE.mft (raw, json)
Hash identifier: vOlWX5BM0srR2kmL/1S/t/QMjgCU8ju4qG6AjRovNJY=
Subject key identifier: 92:45:B4:A0:41:C6:C1:12:7D:B1:A1:AD:08:51:49:67:95:B0:0A:EF
Authority key identifier: B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
Certificate issuer: /CN=b1267a51acb66f2991bea5243fe388068971a1f1
Certificate serial: 0197B6A0D30DC3BD564A197A329DB51F495C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:01:22 +0000
Manifest this update: Sat 28 Jun 2025 13:01:22 +0000
Manifest next update: Sun 29 Jun 2025 13:01:22 +0000
Files and hashes: 1: sSZ6Uay2bymRvqUkP-OIBolxofE.crl (hash: 8SSd9TmOiF45gYDjCOLh1gkSBKwsDWbESzaf4vO3RQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:d3:0d:c3:bd:56:4a:19:7a:32:9d:b5:1f:49:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1267a51acb66f2991bea5243fe388068971a1f1
Validity
Not Before: Jun 28 13:01:22 2025 GMT
Not After : Jun 29 13:01:22 2025 GMT
Subject: CN=9245b4a041c6c1127db1a1ad0851496795b00aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:96:6b:09:5a:76:53:6c:76:bb:6b:4d:a7:8c:
71:d8:13:f3:88:a4:2d:4f:c2:bf:98:37:3c:05:e7:
4f:02:bc:7b:8e:a0:f2:ba:59:3e:28:52:c0:5c:b6:
a8:66:82:65:6c:c9:15:56:8e:75:4c:81:2a:97:08:
77:ac:54:d1:5c:9b:9b:ce:57:19:d8:da:d4:d4:4f:
3b:94:b4:84:41:e7:ac:65:5f:2d:f5:1a:f7:7c:55:
e7:77:ed:08:52:29:e5:d4:2f:81:5e:56:d2:59:c7:
59:a6:1d:96:f1:bc:03:66:3b:b4:d7:32:08:3d:14:
77:2b:95:f4:9f:48:6b:1c:2e:b4:09:f0:a7:2e:88:
f3:70:69:1c:9e:b1:34:1d:15:61:83:36:e5:d3:3b:
68:78:ef:d7:e1:7f:79:80:c8:38:62:8c:27:42:aa:
59:ea:3d:fd:06:8a:13:b7:7b:6b:4c:89:f2:fd:d9:
ef:49:8d:6f:ac:f5:a8:03:6e:cc:ae:02:f1:5c:ea:
02:e7:65:64:ec:d4:8d:0e:4e:57:46:e8:d4:22:9b:
a2:07:bf:1e:eb:e4:91:3d:cf:f3:7d:ae:4b:ac:46:
86:8b:99:76:e8:6b:1f:af:1e:37:aa:7e:f9:26:26:
ce:4a:05:82:73:17:a1:04:35:12:c1:d5:bf:93:eb:
0a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:45:B4:A0:41:C6:C1:12:7D:B1:A1:AD:08:51:49:67:95:B0:0A:EF
X509v3 Authority Key Identifier:
keyid:B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:42:d6:4e:0b:5d:01:3c:ac:9e:d4:51:27:f9:00:aa:a1:ea:
3b:09:56:a0:a6:ec:10:c1:3b:fe:1a:3a:ab:2f:a4:a8:52:f7:
33:ec:25:94:cf:a6:0a:62:0f:fd:e3:67:8c:04:b9:60:2b:55:
06:6b:4f:d7:2f:66:d2:4c:2a:6a:0e:1a:54:05:db:8f:fe:20:
92:43:7f:ee:b0:64:d7:1e:6a:85:5d:17:03:49:35:6b:3a:4a:
8b:4e:25:b4:89:11:32:f1:15:d1:2a:e1:f4:3c:5b:26:55:55:
6f:a9:80:98:b1:cb:b4:9b:4a:af:89:91:89:7c:b6:9f:63:5a:
7c:ad:7b:36:5a:5b:17:ba:f3:59:cf:2d:5d:8b:84:6e:40:a6:
16:2a:c2:fc:4f:a9:77:71:74:ea:03:3e:e3:ac:b2:ea:00:0a:
dc:a8:90:31:cf:b0:86:ff:ad:92:e1:6e:97:17:9f:90:4f:4e:
7f:84:25:b8:e8:4d:c2:c8:c8:e9:be:32:ed:78:9d:8a:7f:6b:
08:9c:03:77:1c:56:32:5a:08:60:49:38:7e:03:fc:e8:67:e7:
b0:c1:05:a0:fd:e1:ea:c3:f6:72:75:49:58:75:73:13:4a:71:
f7:78:97:2a:f1:c8:a7:54:e7:de:43:b8:b5:83:8e:9d:54:cd:
25:76:7f:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oNMNw71WShl6Mp21H0lcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMjY3YTUxYWNiNjZmMjk5MWJlYTUyNDNmZTM4ODA2ODk3
MWExZjEwHhcNMjUwNjI4MTMwMTIyWhcNMjUwNjI5MTMwMTIyWjAzMTEwLwYDVQQD
Eyg5MjQ1YjRhMDQxYzZjMTEyN2RiMWExYWQwODUxNDk2Nzk1YjAwYWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJZrCVp2U2x2u2tNp4xx2BPziKQt
T8K/mDc8BedPArx7jqDyulk+KFLAXLaoZoJlbMkVVo51TIEqlwh3rFTRXJubzlcZ
2NrU1E87lLSEQeesZV8t9Rr3fFXnd+0IUinl1C+BXlbSWcdZph2W8bwDZju01zII
PRR3K5X0n0hrHC60CfCnLojzcGkcnrE0HRVhgzbl0ztoeO/X4X95gMg4YownQqpZ
6j39BooTt3trTIny/dnvSY1vrPWoA27MrgLxXOoC52Vk7NSNDk5XRujUIpuiB78e
6+SRPc/zfa5LrEaGi5l26Gsfrx43qn75JibOSgWCcxehBDUSwdW/k+sKXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJFtKBBxsESfbGhrQhRSWeVsArvMB8GA1UdIwQY
MBaAFLEmelGstm8pkb6lJD/jiAaJcaHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1NaNlVheTJieW1SdnFVa1AtT0lCb2x4b2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9kNzRjYTItM2RlNi00YjY5LWEwMDAt
OTRkMWI4OWY4Y2IyLzEvc1NaNlVheTJieW1SdnFVa1AtT0lCb2x4b2ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9kNzRjYTItM2RlNi00YjY5LWEwMDAtOTRkMWI4OWY4Y2Iy
LzEvc1NaNlVheTJieW1SdnFVa1AtT0lCb2x4b2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQELWTgtd
ATysntRRJ/kAqqHqOwlWoKbsEME7/ho6qy+kqFL3M+wllM+mCmIP/eNnjAS5YCtV
BmtP1y9m0kwqag4aVAXbj/4gkkN/7rBk1x5qhV0XA0k1azpKi04ltIkRMvEV0Srh
9DxbJlVVb6mAmLHLtJtKr4mRiXy2n2NafK17NlpbF7rzWc8tXYuEbkCmFirC/E+p
d3F06gM+46yy6gAK3KiQMc+whv+tkuFulxefkE9Of4QluOhNwsjI6b4y7Xidin9r
CJwDdxxWMloIYEk4fgP86GfnsMEFoP3h6sP2cnVJWHVzE0px93iXKvHIp1Tn3kO4
tYOOnVTNJXZ/vA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:33 2025 by rpki-client