Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft
File: sVKsjTaZEe8sE_k_mZumY8GOETM.mft (raw, json)
Hash identifier: BAXfLB5cRar8afPvZbhqSH6v1tssVhUSJHp/991o52Y=
Subject key identifier: 8E:CC:98:8B:9C:16:A3:06:9B:6B:69:64:3B:84:9A:F9:55:E3:DB:8B
Authority key identifier: B1:52:AC:8D:36:99:11:EF:2C:13:F9:3F:99:9B:A6:63:C1:8E:11:33
Certificate issuer: /CN=b152ac8d369911ef2c13f93f999ba663c18e1133
Certificate serial: 0197B6A1BACCEE757A16E7ECE1896A7822FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVKsjTaZEe8sE_k_mZumY8GOETM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft
Manifest number: 10BC
Signing time: Sat 28 Jun 2025 13:02:21 +0000
Manifest this update: Sat 28 Jun 2025 13:02:21 +0000
Manifest next update: Sun 29 Jun 2025 13:02:21 +0000
Files and hashes: 1: sVKsjTaZEe8sE_k_mZumY8GOETM.crl (hash: m6fz8S4ephRVj0wzMpY91GTzZOTPhWeN9ezuGMxWFzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVKsjTaZEe8sE_k_mZumY8GOETM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ba:cc:ee:75:7a:16:e7:ec:e1:89:6a:78:22:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b152ac8d369911ef2c13f93f999ba663c18e1133
Validity
Not Before: Jun 28 13:02:21 2025 GMT
Not After : Jun 29 13:02:21 2025 GMT
Subject: CN=8ecc988b9c16a3069b6b69643b849af955e3db8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2a:a7:b4:f5:ba:8c:b4:52:06:59:30:36:57:
54:df:6c:17:ff:34:a3:32:5a:94:27:7d:dc:8a:02:
2d:a0:cf:c3:4b:3a:76:4c:f1:72:85:4d:e8:60:4a:
01:2e:4d:d1:3e:d9:52:a8:60:41:f8:44:98:ef:15:
03:bf:6f:fa:35:77:a4:33:e4:8d:74:cb:07:3c:ef:
b1:25:f6:9e:d0:e0:3f:f9:8b:7c:c8:f4:f1:5f:16:
3a:54:d2:80:12:26:5d:7d:55:95:df:9a:de:bf:25:
97:6a:ef:03:b8:b6:d6:20:d8:bd:5f:76:a0:f4:8c:
df:8c:53:01:95:e0:eb:11:50:f3:de:18:4f:03:21:
e8:80:b2:c5:76:6b:c5:1e:e5:5c:1b:6d:3c:b4:23:
be:b1:77:ad:3e:e9:f0:ef:6f:52:f1:93:c8:80:6c:
34:80:b4:9a:52:15:ee:ff:2d:4e:66:89:b7:c8:2e:
ef:c0:01:b9:2e:f9:0e:aa:ba:14:ec:8f:a6:24:d2:
3e:6c:ce:54:5e:1f:24:22:b4:63:6d:4e:c1:cd:12:
c5:cc:81:cd:97:5d:06:97:b1:e1:28:7b:27:3a:0b:
14:42:9f:05:9c:9f:1a:7e:a0:4b:18:c8:79:7a:74:
ca:12:b2:61:1d:8c:87:a2:14:53:81:05:e5:cb:ac:
06:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CC:98:8B:9C:16:A3:06:9B:6B:69:64:3B:84:9A:F9:55:E3:DB:8B
X509v3 Authority Key Identifier:
keyid:B1:52:AC:8D:36:99:11:EF:2C:13:F9:3F:99:9B:A6:63:C1:8E:11:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVKsjTaZEe8sE_k_mZumY8GOETM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:56:6a:01:61:76:26:29:43:42:5b:a0:49:4b:e2:a1:9b:71:
c4:ad:db:c6:fc:01:a8:c5:1c:2d:d9:e7:0f:c0:9e:ec:c7:ad:
fa:0d:63:43:e0:c6:66:89:8a:93:bc:6e:b2:cd:4d:32:f2:43:
d5:e8:45:de:94:67:8a:8a:7e:a6:35:44:96:31:d4:07:69:54:
55:45:ed:cb:c3:bb:8b:82:e0:d0:dd:28:2e:85:01:e0:95:43:
3f:85:00:6f:b6:f2:83:4e:4c:d6:b0:e1:d4:30:b6:f2:db:bb:
7f:36:63:5f:b1:b7:ce:93:fe:1d:15:64:5c:1c:4c:bf:2c:fe:
83:2d:d6:30:df:5c:8b:2b:2c:38:81:ea:57:73:93:da:9c:a5:
8e:85:db:0e:db:dd:05:bf:0c:98:65:f7:c5:4f:ad:d2:7d:12:
e4:dc:51:d0:92:37:ff:91:44:54:81:19:b1:9a:95:62:7e:03:
09:0b:cf:9f:2e:91:7e:b4:8b:99:e1:41:00:61:40:04:53:6e:
b0:53:46:b7:45:c0:36:9b:f9:83:aa:2c:b7:10:65:be:43:31:
a0:0d:21:45:d8:1e:a1:1a:69:a4:0b:f7:7f:e7:c1:bc:8b:f6:
eb:49:34:8a:c3:66:46:ff:98:3a:4d:14:2e:e4:aa:5e:be:8f:
05:3b:53:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2obrM7nV6Fufs4YlqeCL6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTJhYzhkMzY5OTExZWYyYzEzZjkzZjk5OWJhNjYzYzE4
ZTExMzMwHhcNMjUwNjI4MTMwMjIxWhcNMjUwNjI5MTMwMjIxWjAzMTEwLwYDVQQD
Eyg4ZWNjOTg4YjljMTZhMzA2OWI2YjY5NjQzYjg0OWFmOTU1ZTNkYjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiqntPW6jLRSBlkwNldU32wX/zSj
MlqUJ33cigItoM/DSzp2TPFyhU3oYEoBLk3RPtlSqGBB+ESY7xUDv2/6NXekM+SN
dMsHPO+xJfae0OA/+Yt8yPTxXxY6VNKAEiZdfVWV35revyWXau8DuLbWINi9X3ag
9IzfjFMBleDrEVDz3hhPAyHogLLFdmvFHuVcG208tCO+sXetPunw729S8ZPIgGw0
gLSaUhXu/y1OZom3yC7vwAG5LvkOqroU7I+mJNI+bM5UXh8kIrRjbU7BzRLFzIHN
l10Gl7HhKHsnOgsUQp8FnJ8afqBLGMh5enTKErJhHYyHohRTgQXly6wGawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7MmIucFqMGm2tpZDuEmvlV49uLMB8GA1UdIwQY
MBaAFLFSrI02mRHvLBP5P5mbpmPBjhEzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZLc2pUYVpFZThzRV9rX21adW1ZOEdPRVRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83NTQ0YjYtZTBhOS00ZGY4LTlkYjUt
ZTkzNGRiZjkzNjMxLzEvc1ZLc2pUYVpFZThzRV9rX21adW1ZOEdPRVRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC83NTQ0YjYtZTBhOS00ZGY4LTlkYjUtZTkzNGRiZjkzNjMx
LzEvc1ZLc2pUYVpFZThzRV9rX21adW1ZOEdPRVRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtlZqAWF2
JilDQlugSUvioZtxxK3bxvwBqMUcLdnnD8Ce7Met+g1jQ+DGZomKk7xuss1NMvJD
1ehF3pRniop+pjVEljHUB2lUVUXty8O7i4Lg0N0oLoUB4JVDP4UAb7byg05M1rDh
1DC28tu7fzZjX7G3zpP+HRVkXBxMvyz+gy3WMN9ciyssOIHqV3OT2pyljoXbDtvd
Bb8MmGX3xU+t0n0S5NxR0JI3/5FEVIEZsZqVYn4DCQvPny6RfrSLmeFBAGFABFNu
sFNGt0XANpv5g6ostxBlvkMxoA0hRdgeoRpppAv3f+fBvIv260k0isNmRv+YOk0U
LuSqXr6PBTtTRg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:18:19 2025 by rpki-client