Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
File: SxEEihpJFuExuM4Iji1v5OXF49s.mft (raw, json)
Hash identifier: JzBcLMifYB3wkZhIfqpAGNdMbNFKqsB437D49+qZHkg=
Subject key identifier: C1:45:51:A0:44:FA:F8:31:53:EA:58:B5:D4:4A:B5:69:48:C2:4C:23
Authority key identifier: 4B:11:04:8A:1A:49:16:E1:31:B8:CE:08:8E:2D:6F:E4:E5:C5:E3:DB
Certificate issuer: /CN=4b11048a1a4916e131b8ce088e2d6fe4e5c5e3db
Certificate serial: 0198D5F1836C2ACD8169DB548B3865EEBF98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
Manifest number: 0288
Signing time: Sat 23 Aug 2025 08:00:31 +0000
Manifest this update: Sat 23 Aug 2025 08:00:31 +0000
Manifest next update: Sun 24 Aug 2025 08:00:31 +0000
Files and hashes: 1: SxEEihpJFuExuM4Iji1v5OXF49s.crl (hash: MX5Pwp/fMp8fOYgEro19MAAXW/XutHJXAxXJWWKiEcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:83:6c:2a:cd:81:69:db:54:8b:38:65:ee:bf:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b11048a1a4916e131b8ce088e2d6fe4e5c5e3db
Validity
Not Before: Aug 23 08:00:31 2025 GMT
Not After : Aug 24 08:00:31 2025 GMT
Subject: CN=c14551a044faf83153ea58b5d44ab56948c24c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2f:30:bb:13:50:5b:1c:9d:65:a8:84:7a:97:
05:3d:a3:af:03:74:61:26:b8:8c:15:1d:85:62:13:
42:89:78:a4:a9:d6:f3:cc:9e:0c:2f:a0:ca:d2:8b:
3e:98:9b:53:34:d8:89:6e:e3:64:8e:54:1c:86:eb:
65:53:27:7b:87:bf:a4:47:67:e8:d2:f2:d7:be:20:
0c:24:b1:53:27:23:9a:fd:4a:a6:24:a7:2c:d4:11:
6b:26:1c:14:6a:63:63:99:c3:46:27:f6:5e:03:f8:
57:b6:94:1e:f9:fb:ae:58:6f:60:43:74:dc:e0:ef:
65:ed:84:e4:a2:8b:69:17:27:1e:2a:7f:fd:0a:70:
f0:59:1e:d4:b4:b1:5a:69:76:9e:a3:09:e7:d6:3f:
23:84:aa:84:d5:04:1e:5f:5e:88:ce:f3:7f:f6:5a:
7f:cb:4e:ec:c3:02:5d:8d:fe:7a:66:bd:c7:fa:1a:
46:45:5a:0c:29:e7:8d:66:0b:e0:e3:09:8c:25:70:
bd:ef:e6:54:bd:51:92:d3:76:4d:d9:55:50:91:eb:
8e:de:44:c3:ab:95:b7:c9:e7:22:b5:b0:2f:c4:3c:
4d:3d:87:64:02:55:8c:1c:47:a1:0f:34:33:f8:25:
78:f7:29:c2:08:27:27:5d:ad:11:8c:a3:96:70:b5:
65:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:45:51:A0:44:FA:F8:31:53:EA:58:B5:D4:4A:B5:69:48:C2:4C:23
X509v3 Authority Key Identifier:
keyid:4B:11:04:8A:1A:49:16:E1:31:B8:CE:08:8E:2D:6F:E4:E5:C5:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d5:a1:0f:0a:2a:b7:94:0c:59:c3:8a:f8:9d:85:f0:10:b5:
f4:b0:da:3b:d2:b8:89:91:af:b2:2c:5a:cb:ad:a5:ca:d0:1b:
2c:7a:03:9a:18:a7:6c:af:93:67:1d:1a:05:c1:6f:f2:66:21:
91:e6:ce:1a:64:af:97:e9:45:38:af:91:70:dc:e8:e7:58:f4:
10:af:5d:5f:fd:b7:fc:9e:78:f6:4c:d2:c0:e0:84:70:64:0b:
cf:c0:6e:40:c7:51:5b:1b:10:83:a0:b4:83:11:0d:94:6f:16:
1c:73:ec:e4:7a:26:62:87:6f:80:a1:5b:0b:7f:c1:7d:19:95:
30:48:a3:90:b2:d3:81:bc:31:d9:59:24:87:e3:43:c5:a4:48:
ea:5b:b4:25:86:ce:76:39:67:31:33:8a:e8:85:80:7a:e9:a0:
71:d9:a9:69:c5:fa:35:8b:96:23:81:e3:ad:f9:67:de:3c:b4:
a2:4e:45:03:6b:28:85:bb:63:a3:36:6d:5a:d9:a6:c2:c7:14:
cf:31:aa:5d:b4:52:c5:1e:47:1d:f6:90:02:0d:0c:96:01:c6:
6d:30:98:fd:a7:26:bb:2c:8a:3d:ce:5e:0a:3b:a2:d9:86:e3:
1d:4c:ea:fc:e4:fa:f4:a5:18:eb:4e:88:7a:1c:18:08:3a:ed:
5f:e1:02:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8YNsKs2BadtUizhl7r+YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMTEwNDhhMWE0OTE2ZTEzMWI4Y2UwODhlMmQ2ZmU0ZTVj
NWUzZGIwHhcNMjUwODIzMDgwMDMxWhcNMjUwODI0MDgwMDMxWjAzMTEwLwYDVQQD
EyhjMTQ1NTFhMDQ0ZmFmODMxNTNlYTU4YjVkNDRhYjU2OTQ4YzI0YzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi8wuxNQWxydZaiEepcFPaOvA3Rh
JriMFR2FYhNCiXikqdbzzJ4ML6DK0os+mJtTNNiJbuNkjlQchutlUyd7h7+kR2fo
0vLXviAMJLFTJyOa/UqmJKcs1BFrJhwUamNjmcNGJ/ZeA/hXtpQe+fuuWG9gQ3Tc
4O9l7YTkootpFyceKn/9CnDwWR7UtLFaaXaeownn1j8jhKqE1QQeX16IzvN/9lp/
y07swwJdjf56Zr3H+hpGRVoMKeeNZgvg4wmMJXC97+ZUvVGS03ZN2VVQkeuO3kTD
q5W3yecitbAvxDxNPYdkAlWMHEehDzQz+CV49ynCCCcnXa0RjKOWcLVlHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFFUaBE+vgxU+pYtdRKtWlIwkwjMB8GA1UdIwQY
MBaAFEsRBIoaSRbhMbjOCI4tb+TlxePbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3hFRWlocEpGdUV4dU00SWppMXY1T1hGNDlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kM2EyMjgtZmM0Zi00MGIyLTg4YjIt
ZTQ4NDYxMWE5NjIxLzEvU3hFRWlocEpGdUV4dU00SWppMXY1T1hGNDlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9kM2EyMjgtZmM0Zi00MGIyLTg4YjItZTQ4NDYxMWE5NjIx
LzEvU3hFRWlocEpGdUV4dU00SWppMXY1T1hGNDlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9WhDwoq
t5QMWcOK+J2F8BC19LDaO9K4iZGvsixay62lytAbLHoDmhinbK+TZx0aBcFv8mYh
kebOGmSvl+lFOK+RcNzo51j0EK9dX/23/J549kzSwOCEcGQLz8BuQMdRWxsQg6C0
gxENlG8WHHPs5HomYodvgKFbC3/BfRmVMEijkLLTgbwx2Vkkh+NDxaRI6lu0JYbO
djlnMTOK6IWAeumgcdmpacX6NYuWI4Hjrfln3jy0ok5FA2sohbtjozZtWtmmwscU
zzGqXbRSxR5HHfaQAg0MlgHGbTCY/acmuyyKPc5eCjui2YbjHUzq/OT69KUY606I
ehwYCDrtX+ECzQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:36 2025 by rpki-client