Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
File: SdWTfY5gK0jLL_UXFtmV0jofPho.mft (raw, json)
Hash identifier: 44oUmzp6ILkbLHSZgxeBk2yXhU/R8uPVBI2EjRpFhzQ=
Subject key identifier: D7:E6:73:5A:31:36:1A:B4:74:F1:C5:39:CF:28:DC:9E:E4:21:5D:60
Authority key identifier: 49:D5:93:7D:8E:60:2B:48:CB:2F:F5:17:16:D9:95:D2:3A:1F:3E:1A
Certificate issuer: /CN=49d5937d8e602b48cb2ff51716d995d23a1f3e1a
Certificate serial: 0197C426D0DC7B985E73ADBB96D6336CC08A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
Manifest number: 0E7F
Signing time: Tue 01 Jul 2025 04:02:47 +0000
Manifest this update: Tue 01 Jul 2025 04:02:47 +0000
Manifest next update: Wed 02 Jul 2025 04:02:47 +0000
Files and hashes: 1: SdWTfY5gK0jLL_UXFtmV0jofPho.crl (hash: 5gg6UBbm6TzgXTgVorKUzXQUQMGZaAKG/XQpNr9fYs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 04:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:26:d0:dc:7b:98:5e:73:ad:bb:96:d6:33:6c:c0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d5937d8e602b48cb2ff51716d995d23a1f3e1a
Validity
Not Before: Jul 1 04:02:47 2025 GMT
Not After : Jul 2 04:02:47 2025 GMT
Subject: CN=d7e6735a31361ab474f1c539cf28dc9ee4215d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ac:58:f2:18:a5:1f:c1:65:50:38:ed:9a:5b:
f6:86:c2:1f:27:27:35:58:df:b4:f5:f7:af:9d:ec:
26:36:28:a3:a8:b8:f3:7c:18:e7:7d:8e:f9:7a:4e:
e7:dd:df:84:0d:d5:75:57:ed:46:8b:80:18:6f:1f:
69:b9:51:51:f8:92:dc:6a:81:10:36:be:81:fe:3c:
aa:44:48:d6:65:64:4c:0d:6a:aa:1b:68:e9:03:52:
30:10:6e:54:9f:b2:31:87:c7:ba:fc:29:f1:c2:7b:
14:f0:bb:54:7b:3b:15:f5:7e:16:e4:87:2e:e1:1e:
48:df:73:a4:4b:ff:26:e2:82:e9:91:a8:5b:9f:57:
e8:cc:10:82:7d:25:d2:91:11:df:71:4e:29:2e:f9:
22:d1:2c:b8:49:16:3b:86:25:9b:46:90:f3:0e:25:
e1:17:4c:72:cc:63:b1:8c:57:7d:e0:42:e7:7c:d6:
a9:7e:e6:28:1d:14:64:9a:a8:68:54:97:c0:e6:3d:
46:2f:d7:44:01:9c:ed:58:db:ff:74:59:ed:40:4e:
3a:85:cf:74:75:da:c5:90:25:3a:00:ed:04:f3:e3:
c3:47:1e:3f:95:81:3a:8e:da:74:1e:1a:27:4a:3f:
10:2d:31:0b:c1:27:a8:7a:b6:48:2f:27:fa:73:4e:
05:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E6:73:5A:31:36:1A:B4:74:F1:C5:39:CF:28:DC:9E:E4:21:5D:60
X509v3 Authority Key Identifier:
keyid:49:D5:93:7D:8E:60:2B:48:CB:2F:F5:17:16:D9:95:D2:3A:1F:3E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:54:07:20:9d:fb:7e:d8:8a:a5:81:48:08:b8:20:b1:1d:be:
8a:af:58:d6:41:ce:73:31:03:69:7e:92:e2:82:8e:00:aa:bb:
da:f8:d4:85:25:df:b9:86:5e:bc:37:17:63:4a:f3:4c:da:bd:
1e:f7:1a:df:a8:0f:e9:c5:b5:b7:82:a8:52:91:a6:7e:84:2e:
d2:a5:62:ab:b4:33:f4:c1:26:5e:7a:4b:dd:ca:3d:e6:c7:34:
56:bb:1a:67:eb:47:ca:a3:34:fe:52:63:81:48:39:25:22:88:
69:00:aa:19:07:e6:9c:90:6b:d8:19:2f:19:39:7a:64:84:3a:
48:3b:61:cb:bb:8c:53:06:52:fe:7b:8d:22:05:3e:d2:7c:e2:
80:e9:5f:95:24:b2:60:30:7c:a3:70:62:8e:de:f9:4f:76:2d:
d9:fb:f2:3b:14:52:42:a1:54:76:64:a1:e9:d1:f8:ea:14:b7:
26:5c:a4:c2:c1:b3:64:53:bb:a3:b1:96:d1:86:6e:82:19:73:
29:92:c9:b1:9c:4e:3e:cc:62:86:50:fc:a3:a3:6f:cb:e8:44:
11:71:5a:d1:01:6d:02:86:7a:0e:67:b2:c4:fe:b8:da:c1:62:
61:f2:da:53:60:63:8a:63:01:36:1c:b8:6b:56:42:92:40:c8:
dc:ae:0d:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfEJtDce5hec627ltYzbMCKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZDU5MzdkOGU2MDJiNDhjYjJmZjUxNzE2ZDk5NWQyM2Ex
ZjNlMWEwHhcNMjUwNzAxMDQwMjQ3WhcNMjUwNzAyMDQwMjQ3WjAzMTEwLwYDVQQD
EyhkN2U2NzM1YTMxMzYxYWI0NzRmMWM1MzljZjI4ZGM5ZWU0MjE1ZDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaxY8hilH8FlUDjtmlv2hsIfJyc1
WN+09fevnewmNiijqLjzfBjnfY75ek7n3d+EDdV1V+1Gi4AYbx9puVFR+JLcaoEQ
Nr6B/jyqREjWZWRMDWqqG2jpA1IwEG5Un7Ixh8e6/CnxwnsU8LtUezsV9X4W5Icu
4R5I33OkS/8m4oLpkahbn1fozBCCfSXSkRHfcU4pLvki0Sy4SRY7hiWbRpDzDiXh
F0xyzGOxjFd94ELnfNapfuYoHRRkmqhoVJfA5j1GL9dEAZztWNv/dFntQE46hc90
ddrFkCU6AO0E8+PDRx4/lYE6jtp0HhonSj8QLTELwSeoerZILyf6c04FJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfmc1oxNhq0dPHFOc8o3J7kIV1gMB8GA1UdIwQY
MBaAFEnVk32OYCtIyy/1FxbZldI6Hz4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2RXVGZZNWdLMGpMTF9VWEZ0bVYwam9mUGhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lZGFhMzItYzVkOS00MDEzLTg0YmIt
OWIyYWRjNzRiNTJkLzEvU2RXVGZZNWdLMGpMTF9VWEZ0bVYwam9mUGhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9lZGFhMzItYzVkOS00MDEzLTg0YmItOWIyYWRjNzRiNTJk
LzEvU2RXVGZZNWdLMGpMTF9VWEZ0bVYwam9mUGhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFQHIJ37
ftiKpYFICLggsR2+iq9Y1kHOczEDaX6S4oKOAKq72vjUhSXfuYZevDcXY0rzTNq9
Hvca36gP6cW1t4KoUpGmfoQu0qViq7Qz9MEmXnpL3co95sc0VrsaZ+tHyqM0/lJj
gUg5JSKIaQCqGQfmnJBr2BkvGTl6ZIQ6SDthy7uMUwZS/nuNIgU+0nzigOlflSSy
YDB8o3Bijt75T3Yt2fvyOxRSQqFUdmSh6dH46hS3JlykwsGzZFO7o7GW0YZughlz
KZLJsZxOPsxihlD8o6Nvy+hEEXFa0QFtAoZ6DmeyxP642sFiYfLaU2BjimMBNhy4
a1ZCkkDI3K4NkA==
-----END CERTIFICATE-----
Generated at Tue Jul 1 13:11:57 2025 by rpki-client