Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/sNj0abkHEaEoK_SQ0A8VYJZZd2A.mft
File: sNj0abkHEaEoK_SQ0A8VYJZZd2A.mft (raw, json)
Hash identifier: ENE3qm9ZfxXCq5psQ7u4pnsz1ylcYn2HzQuc7hDoMmc=
Subject key identifier: C5:13:2F:BB:A2:80:EF:6F:02:56:F7:8B:F7:C6:13:11:3B:FC:FD:13
Authority key identifier: B0:D8:F4:69:B9:07:11:A1:28:2B:F4:90:D0:0F:15:60:96:59:77:60
Certificate issuer: /CN=b0d8f469b90711a1282bf490d00f156096597760
Certificate serial: 0197B89043639AB3C9EE89DD694AA6AB084D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNj0abkHEaEoK_SQ0A8VYJZZd2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/sNj0abkHEaEoK_SQ0A8VYJZZd2A.mft
Manifest number: 1510
Signing time: Sat 28 Jun 2025 22:02:31 +0000
Manifest this update: Sat 28 Jun 2025 22:02:31 +0000
Manifest next update: Sun 29 Jun 2025 22:02:31 +0000
Files and hashes: 1: 4W2MsaFzCqc3vmN-m_KV3fKLCCE.roa (hash: yb1ZkdtEhTyv9DB1WP29BM5drsp9NA6SmJ1955YSoLA=)
2: sNj0abkHEaEoK_SQ0A8VYJZZd2A.crl (hash: igkkDqtHhxZIymFqpAHEdkp7H2ezF6fU0eRRMjwV4Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/sNj0abkHEaEoK_SQ0A8VYJZZd2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/sNj0abkHEaEoK_SQ0A8VYJZZd2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sNj0abkHEaEoK_SQ0A8VYJZZd2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:43:63:9a:b3:c9:ee:89:dd:69:4a:a6:ab:08:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d8f469b90711a1282bf490d00f156096597760
Validity
Not Before: Jun 28 22:02:31 2025 GMT
Not After : Jun 29 22:02:31 2025 GMT
Subject: CN=c5132fbba280ef6f0256f78bf7c613113bfcfd13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:e4:18:44:29:d7:ec:10:51:5a:b0:b0:80:
54:8a:cd:f3:5d:9f:f3:f7:f9:f1:98:ae:94:c2:d3:
15:c2:47:d2:3c:04:a0:e1:3b:e1:d7:7b:72:c3:51:
1b:1f:4a:91:6e:92:fa:46:16:6e:1f:dc:ac:a3:91:
a5:30:41:db:78:a5:8a:04:f0:51:60:96:7d:9f:f4:
1e:68:4e:07:42:7e:cb:93:65:f8:5f:96:72:71:74:
47:aa:57:2b:06:58:f4:5d:54:30:b6:5a:f5:18:3a:
fa:6e:f5:d7:b2:53:4e:6b:b7:49:7c:68:22:7f:87:
67:64:8d:74:9e:28:81:cc:9b:33:0b:f9:cd:7d:42:
c7:a4:f4:91:16:e2:96:a1:a4:97:ec:80:94:02:89:
96:04:c8:1d:93:27:24:07:ec:33:5a:63:bc:50:16:
b9:ca:e7:c8:3e:3b:a9:b4:c9:83:93:c7:8a:3e:98:
d7:13:ef:95:90:1a:39:96:77:06:e4:0e:47:a3:a0:
22:df:fc:ec:72:93:1e:8c:6a:c1:60:fe:32:cd:d8:
f4:39:88:e8:c2:68:d9:fd:00:d7:0f:1d:fe:8a:4f:
ca:24:8d:df:e6:7d:83:17:a2:c0:c9:06:ee:76:df:
da:f6:09:fd:9e:e2:1b:46:3d:05:84:dd:64:31:04:
16:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:13:2F:BB:A2:80:EF:6F:02:56:F7:8B:F7:C6:13:11:3B:FC:FD:13
X509v3 Authority Key Identifier:
keyid:B0:D8:F4:69:B9:07:11:A1:28:2B:F4:90:D0:0F:15:60:96:59:77:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNj0abkHEaEoK_SQ0A8VYJZZd2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/sNj0abkHEaEoK_SQ0A8VYJZZd2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/sNj0abkHEaEoK_SQ0A8VYJZZd2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b6:cd:32:b4:b5:f9:eb:16:67:9f:df:80:ef:a7:8c:84:a7:
31:c7:99:e5:40:0b:2e:7d:69:e9:d9:ab:ae:03:ff:19:43:e5:
1a:f2:1e:71:73:d1:73:89:6f:20:ff:76:bb:e7:47:2c:24:1f:
6a:07:94:7c:89:1a:63:f3:63:7d:87:6d:2c:9c:0c:d4:1d:b8:
94:46:ed:16:12:f3:26:43:43:7a:8a:f9:62:b8:43:c9:7d:45:
60:82:31:e4:e6:68:48:ca:a7:e0:1e:86:84:21:14:31:fc:93:
43:ef:d9:c1:f3:c7:60:55:7e:63:e5:5d:c0:93:08:4e:54:59:
1d:a3:42:8e:ac:f1:ba:38:e8:b9:4a:94:fd:16:b8:d3:14:cc:
69:af:3e:1b:e7:cf:b9:5e:cf:f9:e7:d4:3b:39:f4:c7:74:e1:
ca:65:fe:c3:ba:e9:d5:26:a9:0b:18:0f:33:dc:09:7e:56:2e:
b1:04:c3:33:26:a5:e3:8a:54:80:16:68:c5:0b:30:70:a8:52:
08:51:70:21:c6:95:8e:90:1d:1f:ca:e6:17:5e:f2:d7:aa:cc:
11:9e:5b:d5:89:ab:00:f5:f2:dc:5f:5b:46:2d:59:6e:3d:c9:
49:27:a3:c8:ee:45:dd:9c:6f:fb:d8:08:08:f9:1f:c5:af:8c:
6e:79:2e:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4kENjmrPJ7ondaUqmqwhNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZDhmNDY5YjkwNzExYTEyODJiZjQ5MGQwMGYxNTYwOTY1
OTc3NjAwHhcNMjUwNjI4MjIwMjMxWhcNMjUwNjI5MjIwMjMxWjAzMTEwLwYDVQQD
EyhjNTEzMmZiYmEyODBlZjZmMDI1NmY3OGJmN2M2MTMxMTNiZmNmZDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxvkGEQp1+wQUVqwsIBUis3zXZ/z
9/nxmK6UwtMVwkfSPASg4Tvh13tyw1EbH0qRbpL6RhZuH9yso5GlMEHbeKWKBPBR
YJZ9n/QeaE4HQn7Lk2X4X5ZycXRHqlcrBlj0XVQwtlr1GDr6bvXXslNOa7dJfGgi
f4dnZI10niiBzJszC/nNfULHpPSRFuKWoaSX7ICUAomWBMgdkyckB+wzWmO8UBa5
yufIPjuptMmDk8eKPpjXE++VkBo5lncG5A5Ho6Ai3/zscpMejGrBYP4yzdj0OYjo
wmjZ/QDXDx3+ik/KJI3f5n2DF6LAyQbudt/a9gn9nuIbRj0FhN1kMQQWGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUTL7uigO9vAlb3i/fGExE7/P0TMB8GA1UdIwQY
MBaAFLDY9Gm5BxGhKCv0kNAPFWCWWXdgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc05qMGFia0hFYUVvS19TUTBBOFZZSlpaZDJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi81MzBjMmItOTQ0Mi00NjIxLThlOTEt
ZDBlNDg2ODBmMjMyLzEvc05qMGFia0hFYUVvS19TUTBBOFZZSlpaZDJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi81MzBjMmItOTQ0Mi00NjIxLThlOTEtZDBlNDg2ODBmMjMy
LzEvc05qMGFia0hFYUVvS19TUTBBOFZZSlpaZDJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7bNMrS1
+esWZ5/fgO+njISnMceZ5UALLn1p6dmrrgP/GUPlGvIecXPRc4lvIP92u+dHLCQf
ageUfIkaY/NjfYdtLJwM1B24lEbtFhLzJkNDeor5YrhDyX1FYIIx5OZoSMqn4B6G
hCEUMfyTQ+/ZwfPHYFV+Y+VdwJMITlRZHaNCjqzxujjouUqU/Ra40xTMaa8+G+fP
uV7P+efUOzn0x3ThymX+w7rp1SapCxgPM9wJflYusQTDMyal44pUgBZoxQswcKhS
CFFwIcaVjpAdH8rmF17y16rMEZ5b1YmrAPXy3F9bRi1Zbj3JSSejyO5F3Zxv+9gI
CPkfxa+MbnkuzQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:47 2025 by rpki-client