Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft
File: 1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft (raw, json)
Hash identifier: OjI1oGW3TjAofO4xG4KURxpzunOcfJaxJTpVPLCv+VU=
Subject key identifier: A4:57:33:CD:36:74:1C:0C:4C:73:04:CA:C2:8D:ED:32:0F:55:1F:06
Authority key identifier: FB:BE:33:C8:D1:8E:53:BF:D2:48:22:09:8D:C7:48:64:05:50:C5:04
Certificate issuer: /CN=fbbe33c8d18e53bfd24822098dc748640550c504
Certificate serial: 0197B77C697A422620C6EA4D9B45C8587846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft
Manifest number: 1563
Signing time: Sat 28 Jun 2025 17:01:13 +0000
Manifest this update: Sat 28 Jun 2025 17:01:13 +0000
Manifest next update: Sun 29 Jun 2025 17:01:13 +0000
Files and hashes: 1: 1-74zyNGOU7_SSCIJjcdIZAVQxQQ.crl (hash: qXZm0a85WUrw8Swxjy3xN7nWUEaV7tRxYQH8AdZFJKY=)
2: 1LPXXVcn8YcrOhINi57GGnN80Vc.roa (hash: EuzggDd0CDcAYZ0FKfuRQi6JcLt5k3MGrLBckBR8HEg=)
3: Rxqhs05VJgswf5IagYYVduWK4dw.roa (hash: 9jWiYjM3BCeOeN51O2+mgMeypqqwXkFllajBFOOYBzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 17:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:69:7a:42:26:20:c6:ea:4d:9b:45:c8:58:78:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbe33c8d18e53bfd24822098dc748640550c504
Validity
Not Before: Jun 28 17:01:13 2025 GMT
Not After : Jun 29 17:01:13 2025 GMT
Subject: CN=a45733cd36741c0c4c7304cac28ded320f551f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:02:91:e6:88:e9:e5:d2:81:5b:df:80:69:68:
78:d7:1d:1c:3b:f2:19:90:d7:76:e6:e0:d0:5c:15:
f4:88:95:9d:a9:a8:91:25:ce:49:39:b6:37:7f:42:
db:6b:37:4b:c9:af:df:26:02:4a:54:f0:a8:45:9a:
29:1d:17:b9:07:66:58:b0:05:59:26:de:4a:5b:60:
bc:0a:48:b4:01:fb:9b:8a:38:ec:30:95:c6:e9:87:
15:2c:08:c4:cd:c8:86:d9:8a:d6:79:a1:ba:89:53:
34:de:8e:7c:e3:b3:68:42:1e:9c:b4:e7:ad:d4:b1:
49:ad:97:62:96:11:4a:3b:81:45:24:02:39:5d:e0:
11:00:16:de:44:d2:e8:25:9e:e0:e9:f0:94:de:40:
41:c8:85:bc:fb:c3:76:42:c1:0a:2b:64:0b:8e:0d:
d9:fd:9a:d2:1d:56:ce:9d:71:36:fd:53:39:ea:1b:
e3:96:d9:e8:10:82:13:e3:77:fd:59:c4:65:ba:23:
b9:61:1f:e7:55:9a:eb:32:35:d7:19:97:2c:43:70:
65:18:39:33:09:de:4a:10:78:10:c5:9c:6e:78:64:
6c:00:9a:24:33:bc:23:34:94:ff:88:ca:5b:4b:6f:
40:54:0e:6a:bb:d1:5e:a4:80:bf:72:2c:a3:d6:95:
83:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:57:33:CD:36:74:1C:0C:4C:73:04:CA:C2:8D:ED:32:0F:55:1F:06
X509v3 Authority Key Identifier:
keyid:FB:BE:33:C8:D1:8E:53:BF:D2:48:22:09:8D:C7:48:64:05:50:C5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:3d:3b:d4:be:98:6e:21:b8:be:13:3c:39:21:2f:04:27:10:
48:46:77:35:c3:31:9c:04:ab:02:06:27:b5:c6:8f:e1:bf:e6:
e2:13:11:5a:fb:a8:7a:55:df:0b:82:4f:5a:d5:83:eb:f9:bc:
57:b5:58:89:c1:62:69:00:0c:2a:f7:a7:78:b8:fa:12:d7:91:
bd:29:f3:df:60:57:f9:f1:73:cd:6d:7e:88:5f:9d:50:d5:94:
f4:1a:fb:74:0c:c3:5d:38:63:38:1f:df:44:7d:59:95:fe:7c:
c4:af:6a:6d:30:3f:ec:3d:04:94:5d:17:66:83:89:12:d4:9c:
dc:bf:1d:e1:1a:76:eb:98:ce:57:52:eb:de:a3:64:b8:dc:bf:
90:41:ee:87:ec:94:ff:75:3a:d2:c4:de:7f:42:29:c2:0a:0b:
a3:6a:11:f9:bd:9d:06:b4:76:b2:25:85:5e:24:b4:f8:63:00:
46:40:2a:20:c3:7e:ee:98:c3:c0:5e:1a:9a:61:62:c1:57:48:
1d:e3:e6:5e:84:be:02:93:dd:ed:f3:87:df:4c:40:ce:5b:e0:
a0:3f:1a:0e:12:0d:06:7d:37:c7:74:06:fe:8f:cd:58:c3:ee:
f8:96:3b:04:3d:b8:54:b2:4e:6c:58:5d:55:2f:c1:f4:c2:8c:
de:f9:8e:03
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZe3fGl6QiYgxupNm0XIWHhGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYmUzM2M4ZDE4ZTUzYmZkMjQ4MjIwOThkYzc0ODY0MDU1
MGM1MDQwHhcNMjUwNjI4MTcwMTEzWhcNMjUwNjI5MTcwMTEzWjAzMTEwLwYDVQQD
EyhhNDU3MzNjZDM2NzQxYzBjNGM3MzA0Y2FjMjhkZWQzMjBmNTUxZjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9gKR5ojp5dKBW9+AaWh41x0cO/IZ
kNd25uDQXBX0iJWdqaiRJc5JObY3f0LbazdLya/fJgJKVPCoRZopHRe5B2ZYsAVZ
Jt5KW2C8Cki0AfubijjsMJXG6YcVLAjEzciG2YrWeaG6iVM03o5847NoQh6ctOet
1LFJrZdilhFKO4FFJAI5XeARABbeRNLoJZ7g6fCU3kBByIW8+8N2QsEKK2QLjg3Z
/ZrSHVbOnXE2/VM56hvjltnoEIIT43f9WcRluiO5YR/nVZrrMjXXGZcsQ3BlGDkz
Cd5KEHgQxZxueGRsAJokM7wjNJT/iMpbS29AVA5qu9FepIC/ciyj1pWDrwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKRXM802dBwMTHMEysKN7TIPVR8GMB8GA1UdIwQY
MBaAFPu+M8jRjlO/0kgiCY3HSGQFUMUEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS03NHp5TkdPVTdfU1NDSUpqY2RJWkFWUXhRUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvOWNmZWU4LTk0NDYtNGY1ZS1hZDFl
LTA1NTQzMTFkODdiNS8xLzEtNzR6eU5HT1U3X1NTQ0lKamNkSVpBVlF4UVEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzcwLzljZmVlOC05NDQ2LTRmNWUtYWQxZS0wNTU0MzExZDg3
YjUvMS8xLTc0enlOR09VN19TU0NJSmpjZElaQVZReFFRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvT07
1L6YbiG4vhM8OSEvBCcQSEZ3NcMxnASrAgYntcaP4b/m4hMRWvuoelXfC4JPWtWD
6/m8V7VYicFiaQAMKveneLj6EteRvSnz32BX+fFzzW1+iF+dUNWU9Br7dAzDXThj
OB/fRH1Zlf58xK9qbTA/7D0ElF0XZoOJEtSc3L8d4Rp265jOV1Lr3qNkuNy/kEHu
h+yU/3U60sTef0IpwgoLo2oR+b2dBrR2siWFXiS0+GMARkAqIMN+7pjDwF4ammFi
wVdIHePmXoS+ApPd7fOH30xAzlvgoD8aDhINBn03x3QG/o/NWMPu+JY7BD24VLJO
bFhdVS/B9MKM3vmOAw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:46:17 2025 by rpki-client