Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
File: sKEzNsOO66EMusnCjK8e_PRKyGM.mft (raw, json)
Hash identifier: +hCKogYHwmOkDM0NZiK0PNi3tQKNJYMX8/2z+fEnxdw=
Subject key identifier: E7:88:85:34:4C:F1:70:18:EC:B2:9B:85:64:56:D9:4B:E1:06:EF:21
Authority key identifier: B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
Certificate issuer: /CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Certificate serial: 0197B7EA7B056E34F0BCF75F93158785AB08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
Manifest number: 087F
Signing time: Sat 28 Jun 2025 19:01:26 +0000
Manifest this update: Sat 28 Jun 2025 19:01:26 +0000
Manifest next update: Sun 29 Jun 2025 19:01:26 +0000
Files and hashes: 1: sKEzNsOO66EMusnCjK8e_PRKyGM.crl (hash: LAYbl/Zw+xXNJhPH4/mDPHksYWJnrcDhLrMOwYDbZK0=)
2: y3LlHCcHKFo-BQ_p86jxyc013sQ.roa (hash: 70W6ragDKntXJcQVl89iuaUr+4h8ye/EbsXthKhbWqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:7b:05:6e:34:f0:bc:f7:5f:93:15:87:85:ab:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Validity
Not Before: Jun 28 19:01:26 2025 GMT
Not After : Jun 29 19:01:26 2025 GMT
Subject: CN=e78885344cf17018ecb29b856456d94be106ef21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ac:84:ca:9c:53:ec:d9:ba:b3:4e:ab:dc:c6:
4a:1d:57:84:d2:ce:c5:89:16:2d:40:52:d8:c1:ba:
1c:7e:9b:59:5d:f4:d7:82:db:fe:93:22:2c:3d:52:
6a:79:f8:b1:4e:9b:89:74:a5:91:11:bd:dc:71:9d:
b4:21:27:6b:62:14:0b:d9:32:88:d9:98:52:27:7c:
9b:0d:7f:8b:fd:f4:b6:ac:8b:70:47:46:85:b8:d0:
5c:c2:93:34:e3:eb:91:bc:9e:7b:ea:f6:cb:50:0e:
a2:f8:d6:a5:16:c6:33:10:bd:78:54:b8:0c:ed:01:
ff:89:16:a4:0f:6f:ba:a3:10:62:86:df:b3:12:ee:
5d:84:75:e9:aa:f4:22:5e:70:88:15:6f:57:a6:3c:
e2:fa:69:d6:e0:31:86:5a:2e:ac:39:34:64:16:84:
ea:a5:16:22:02:75:b6:2f:a1:9d:a6:2d:ec:cd:98:
a0:1e:10:00:fb:e5:93:74:65:d7:5c:cb:26:62:bb:
e6:7f:c9:18:4e:2c:57:14:7c:1b:b7:b5:a0:cb:8e:
4e:3b:76:b5:dd:e9:48:8c:82:e3:5c:25:48:32:83:
bd:75:6e:e9:dc:5b:98:62:64:a3:ea:95:cd:06:8c:
7a:3f:c4:a7:99:50:c4:ca:11:23:ac:7c:a1:2f:b4:
cf:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:88:85:34:4C:F1:70:18:EC:B2:9B:85:64:56:D9:4B:E1:06:EF:21
X509v3 Authority Key Identifier:
keyid:B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:77:05:f7:5c:51:85:94:a9:73:61:89:cf:d2:03:f4:52:1f:
77:bf:6b:78:12:47:c2:ca:f8:a9:66:72:50:8d:dd:66:d2:58:
78:65:3c:8b:a7:7d:a0:a8:bf:67:21:f9:6b:08:27:51:a9:1c:
5f:51:82:e0:d0:83:34:a8:5d:5e:12:db:6f:9c:49:09:28:1e:
3d:ce:4b:0a:38:5a:3b:ec:e7:ab:17:c2:18:df:cd:85:53:cc:
da:67:10:d1:d6:89:71:4a:d5:69:8f:ca:6b:bd:1a:76:09:a6:
de:19:37:13:82:89:e0:48:0e:ab:b2:28:19:e7:55:00:46:ef:
72:78:cb:30:e0:f3:9a:35:2d:00:7e:15:0d:6d:73:5d:84:dc:
a9:af:c6:83:dd:0c:14:36:16:0c:fe:42:17:e0:10:e4:30:b9:
c4:aa:17:65:70:43:70:cc:50:78:70:ec:54:99:d1:fd:84:e7:
86:ac:88:7d:c5:f9:5d:67:ec:c5:ca:1c:b8:c5:b4:5c:55:b4:
d6:d1:6b:a1:86:d3:8d:47:14:f8:fa:ca:e7:3e:77:98:53:40:
b1:bb:c9:f3:94:eb:a3:ac:b4:ad:46:2c:67:ed:1d:d3:84:d9:
93:04:fb:c4:8a:ee:3e:be:eb:3b:99:d7:a3:52:55:fe:29:5b:
f6:14:27:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36nsFbjTwvPdfkxWHhasIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYTEzMzM2YzM4ZWViYTEwY2JhYzljMjhjYWYxZWZjZjQ0
YWM4NjMwHhcNMjUwNjI4MTkwMTI2WhcNMjUwNjI5MTkwMTI2WjAzMTEwLwYDVQQD
EyhlNzg4ODUzNDRjZjE3MDE4ZWNiMjliODU2NDU2ZDk0YmUxMDZlZjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KyEypxT7Nm6s06r3MZKHVeE0s7F
iRYtQFLYwbocfptZXfTXgtv+kyIsPVJqefixTpuJdKWREb3ccZ20ISdrYhQL2TKI
2ZhSJ3ybDX+L/fS2rItwR0aFuNBcwpM04+uRvJ576vbLUA6i+NalFsYzEL14VLgM
7QH/iRakD2+6oxBiht+zEu5dhHXpqvQiXnCIFW9Xpjzi+mnW4DGGWi6sOTRkFoTq
pRYiAnW2L6Gdpi3szZigHhAA++WTdGXXXMsmYrvmf8kYTixXFHwbt7Wgy45OO3a1
3elIjILjXCVIMoO9dW7p3FuYYmSj6pXNBox6P8SnmVDEyhEjrHyhL7TP+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOeIhTRM8XAY7LKbhWRW2UvhBu8hMB8GA1UdIwQY
MBaAFLChMzbDjuuhDLrJwoyvHvz0SshjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0tFek5zT082NkVNdXNuQ2pLOGVfUFJLeUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8yMzg0ODYtM2U4ZC00YmMzLWExOWQt
MGE3NjhiMjQxMjVhLzEvc0tFek5zT082NkVNdXNuQ2pLOGVfUFJLeUdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8yMzg0ODYtM2U4ZC00YmMzLWExOWQtMGE3NjhiMjQxMjVh
LzEvc0tFek5zT082NkVNdXNuQ2pLOGVfUFJLeUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3cF91xR
hZSpc2GJz9ID9FIfd79reBJHwsr4qWZyUI3dZtJYeGU8i6d9oKi/ZyH5awgnUakc
X1GC4NCDNKhdXhLbb5xJCSgePc5LCjhaO+znqxfCGN/NhVPM2mcQ0daJcUrVaY/K
a70adgmm3hk3E4KJ4EgOq7IoGedVAEbvcnjLMODzmjUtAH4VDW1zXYTcqa/Gg90M
FDYWDP5CF+AQ5DC5xKoXZXBDcMxQeHDsVJnR/YTnhqyIfcX5XWfsxcocuMW0XFW0
1tFroYbTjUcU+PrK5z53mFNAsbvJ85Tro6y0rUYsZ+0d04TZkwT7xIruPr7rO5nX
o1JV/ilb9hQnXA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:55 2025 by rpki-client