Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft
File: d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft (raw, json)
Hash identifier: XkApby3JXLi3Jv0DuVH+F+rbp+7W30zhKW0lfYrun3k=
Subject key identifier: B3:52:FA:F1:E8:22:58:DF:D6:07:D0:89:6D:97:CE:D6:D7:54:33:D5
Authority key identifier: 77:F4:9A:F8:4C:0B:8A:09:A7:B3:B4:F1:F2:71:44:EB:25:91:0F:B5
Certificate issuer: /CN=77f49af84c0b8a09a7b3b4f1f27144eb25910fb5
Certificate serial: 0197B6D7C022F4B3A8DF9CE10849A7ED73FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Sa-EwLigmns7Tx8nFE6yWRD7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft
Manifest number: 0421
Signing time: Sat 28 Jun 2025 14:01:22 +0000
Manifest this update: Sat 28 Jun 2025 14:01:22 +0000
Manifest next update: Sun 29 Jun 2025 14:01:22 +0000
Files and hashes: 1: d_Sa-EwLigmns7Tx8nFE6yWRD7U.crl (hash: I+BxKRNcCnwtBZRfkn0IjNmfN4I5Y1ert69p+YQRfvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_Sa-EwLigmns7Tx8nFE6yWRD7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:c0:22:f4:b3:a8:df:9c:e1:08:49:a7:ed:73:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f49af84c0b8a09a7b3b4f1f27144eb25910fb5
Validity
Not Before: Jun 28 14:01:22 2025 GMT
Not After : Jun 29 14:01:22 2025 GMT
Subject: CN=b352faf1e82258dfd607d0896d97ced6d75433d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ec:c0:1d:0c:90:3f:54:75:dd:a6:f7:1e:9a:
ca:3b:55:0a:16:6e:ab:b9:f7:76:ac:82:fa:54:19:
e1:7c:cb:b6:19:4a:ed:ee:67:79:90:f4:a7:8d:45:
a4:13:87:1c:c7:7e:32:8f:95:3f:0e:68:32:57:01:
d5:18:a1:27:1c:71:cb:f3:76:0d:09:04:ab:bb:a2:
9e:60:15:d3:2d:25:2a:4b:f7:6f:b3:64:f8:3f:1f:
30:c4:e2:c3:04:80:e3:99:28:93:b8:55:92:cd:ea:
ea:57:68:c8:ec:c4:2e:c2:a9:cd:74:d6:31:b9:eb:
17:ff:2f:64:47:4a:41:78:01:9c:34:b9:8e:1b:e7:
28:e5:70:67:da:1b:e7:9e:b0:10:ce:c5:39:dd:d3:
be:85:39:bb:ef:22:a9:8a:94:9e:7c:fc:64:cf:15:
3d:ff:d1:6a:a5:f2:63:0c:fb:f7:8e:01:be:f8:ee:
38:7b:83:be:0e:db:29:72:1d:32:64:f7:fd:55:65:
22:38:26:65:40:17:98:c8:6d:8b:33:66:23:83:58:
80:f8:ac:8a:9e:3f:88:51:87:96:4f:10:d6:d0:7e:
73:5e:96:16:54:d6:97:a3:b1:8e:49:fc:e8:3e:28:
89:b9:5a:02:6f:57:19:ab:d8:75:04:65:d8:5f:86:
f9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:52:FA:F1:E8:22:58:DF:D6:07:D0:89:6D:97:CE:D6:D7:54:33:D5
X509v3 Authority Key Identifier:
keyid:77:F4:9A:F8:4C:0B:8A:09:A7:B3:B4:F1:F2:71:44:EB:25:91:0F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Sa-EwLigmns7Tx8nFE6yWRD7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:46:92:af:93:8f:54:7c:73:8a:ed:3b:5d:31:9a:47:ca:b6:
d2:02:da:e7:ca:7b:02:5a:46:96:83:a2:14:16:60:50:76:d1:
ff:de:61:71:a0:4c:a5:63:e8:f3:78:8f:94:04:9b:cb:1b:a2:
ae:9e:b7:05:34:b0:b5:d0:28:7e:74:53:b5:a9:8e:7e:16:4f:
df:17:ae:6b:cc:10:73:99:51:8d:9b:e4:81:9d:73:0d:de:f0:
12:47:0d:c0:23:7e:de:0d:1c:27:96:29:7b:33:d0:1f:12:fc:
42:64:fe:50:ef:47:f9:73:73:9e:9c:f1:c2:59:ce:9f:2a:d9:
3c:67:ff:3a:a7:d5:02:0d:16:e6:63:9f:2c:6e:4c:a9:4c:4f:
94:8b:b1:8f:7c:43:57:7d:34:84:a1:59:1f:3c:bc:8a:06:73:
48:e8:54:b9:b4:b5:30:57:d6:ba:f6:60:e7:32:c9:3e:de:7d:
b8:c7:1e:53:16:99:1f:91:34:3f:b2:a2:ec:c5:a4:dc:37:fe:
5c:6b:b0:17:3f:15:96:b4:0c:bf:c6:de:76:66:6a:d1:78:18:
82:6e:4c:54:11:ff:62:b4:20:f9:5b:89:79:b0:f9:1c:20:92:
7a:c7:b3:62:17:93:70:73:24:1c:35:85:49:ac:de:80:61:c8:
e9:80:08:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe218Ai9LOo35zhCEmn7XP8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjQ5YWY4NGMwYjhhMDlhN2IzYjRmMWYyNzE0NGViMjU5
MTBmYjUwHhcNMjUwNjI4MTQwMTIyWhcNMjUwNjI5MTQwMTIyWjAzMTEwLwYDVQQD
EyhiMzUyZmFmMWU4MjI1OGRmZDYwN2QwODk2ZDk3Y2VkNmQ3NTQzM2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+zAHQyQP1R13ab3HprKO1UKFm6r
ufd2rIL6VBnhfMu2GUrt7md5kPSnjUWkE4ccx34yj5U/DmgyVwHVGKEnHHHL83YN
CQSru6KeYBXTLSUqS/dvs2T4Px8wxOLDBIDjmSiTuFWSzerqV2jI7MQuwqnNdNYx
uesX/y9kR0pBeAGcNLmOG+co5XBn2hvnnrAQzsU53dO+hTm77yKpipSefPxkzxU9
/9FqpfJjDPv3jgG++O44e4O+Dtspch0yZPf9VWUiOCZlQBeYyG2LM2Yjg1iA+KyK
nj+IUYeWTxDW0H5zXpYWVNaXo7GOSfzoPiiJuVoCb1cZq9h1BGXYX4b5LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNS+vHoIljf1gfQiW2XztbXVDPVMB8GA1UdIwQY
MBaAFHf0mvhMC4oJp7O08fJxROslkQ+1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9TYS1Fd0xpZ21uczdUeDhuRkU2eVdSRDdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yNjQ0YTAtM2Q4Zi00ZWJkLTg1ODgt
MzU2YzQxMWI0MzBlLzEvZF9TYS1Fd0xpZ21uczdUeDhuRkU2eVdSRDdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8yNjQ0YTAtM2Q4Zi00ZWJkLTg1ODgtMzU2YzQxMWI0MzBl
LzEvZF9TYS1Fd0xpZ21uczdUeDhuRkU2eVdSRDdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP0aSr5OP
VHxziu07XTGaR8q20gLa58p7AlpGloOiFBZgUHbR/95hcaBMpWPo83iPlASbyxui
rp63BTSwtdAofnRTtamOfhZP3xeua8wQc5lRjZvkgZ1zDd7wEkcNwCN+3g0cJ5Yp
ezPQHxL8QmT+UO9H+XNznpzxwlnOnyrZPGf/OqfVAg0W5mOfLG5MqUxPlIuxj3xD
V300hKFZHzy8igZzSOhUubS1MFfWuvZg5zLJPt59uMceUxaZH5E0P7Ki7MWk3Df+
XGuwFz8VlrQMv8bedmZq0XgYgm5MVBH/YrQg+VuJebD5HCCSesezYheTcHMkHDWF
SazegGHI6YAIFA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:04 2025 by rpki-client