Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
File: S-kZqE4aIp94nZOdGqpxKk08OZ0.mft (raw, json)
Hash identifier: jZSvH3O7UYboMXdIXtGiRfvO0orrcA2xmpd/r3PbX+Q=
Subject key identifier: 3F:CD:14:62:54:07:7C:5E:84:2A:E3:B3:B8:0F:D9:13:B9:21:E9:E7
Authority key identifier: 4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D
Certificate issuer: /CN=4be919a84e1a229f789d939d1aaa712a4d3c399d
Certificate serial: 0197B6A22E56C63F754E3E374C877B03067E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
Manifest number: 0413
Signing time: Sat 28 Jun 2025 13:02:51 +0000
Manifest this update: Sat 28 Jun 2025 13:02:51 +0000
Manifest next update: Sun 29 Jun 2025 13:02:51 +0000
Files and hashes: 1: FE9TisHKbwT-TG7WXc-HdjPStqc.roa (hash: pRwsqMoq8wG5C6fvp0aFlXXk9XmPop41EHqaLEOgfSc=)
2: S-kZqE4aIp94nZOdGqpxKk08OZ0.crl (hash: ltbYpA3WeSogTYryTfRtDm97CP9KbKqGzoTVbHmMs1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:2e:56:c6:3f:75:4e:3e:37:4c:87:7b:03:06:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be919a84e1a229f789d939d1aaa712a4d3c399d
Validity
Not Before: Jun 28 13:02:51 2025 GMT
Not After : Jun 29 13:02:51 2025 GMT
Subject: CN=3fcd146254077c5e842ae3b3b80fd913b921e9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f5:21:d9:01:43:97:7c:48:70:2a:ca:50:f6:
2c:91:f8:aa:98:e9:b7:af:9f:7c:54:4c:84:d5:da:
09:65:8f:ae:3c:90:dd:68:51:af:ce:96:03:f2:0e:
7b:1f:46:19:9c:26:0c:54:1c:af:3b:16:1e:2b:76:
1d:c8:70:63:ed:9f:0b:d2:b5:20:63:1c:8e:d5:f5:
33:42:e9:0d:e4:af:ad:44:04:fc:c7:d5:20:1a:4a:
13:9d:7f:ff:0a:a1:1b:55:87:90:c1:7f:d9:3a:5b:
97:fc:e7:69:47:e2:28:0e:ed:ee:bd:ca:d8:c2:8e:
7a:46:e7:68:d1:33:61:4b:cd:8b:06:fb:09:4b:17:
20:72:b1:c5:c4:0c:04:24:a0:e4:b3:81:75:e2:b8:
17:74:f9:72:15:ed:9c:44:ef:46:69:9b:5b:31:14:
66:39:7b:d7:cd:a5:fe:ed:f9:78:57:12:74:db:f9:
06:41:87:76:75:21:dd:c8:52:09:6e:e9:a1:60:d8:
2b:70:48:80:66:47:45:81:37:86:69:2a:78:5f:d8:
a6:e5:de:38:ca:45:ec:4e:36:3f:71:be:0a:e9:75:
81:c3:ab:ce:91:70:28:84:a5:7e:df:de:75:eb:5b:
88:f8:8a:08:00:30:14:93:3a:b6:38:73:9c:e2:99:
33:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CD:14:62:54:07:7C:5E:84:2A:E3:B3:B8:0F:D9:13:B9:21:E9:E7
X509v3 Authority Key Identifier:
keyid:4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:cd:82:1f:96:f9:22:16:f3:80:13:70:c3:2b:59:bf:1b:65:
8f:84:29:50:5c:04:51:0d:d5:0a:d1:07:ea:e8:87:db:6f:a6:
5f:60:10:7c:d8:d1:df:2b:27:62:0a:f0:1d:7f:9f:b0:53:c3:
90:0a:cc:dd:6e:bb:0f:9b:6e:ad:96:29:1c:2b:af:f0:70:b4:
d6:c3:8f:dd:2b:d3:a0:ec:a1:7d:11:cb:ad:1e:bd:1e:33:6d:
be:cc:8b:d1:31:30:91:5f:cb:1b:ff:5a:16:9f:4c:82:fd:da:
57:41:87:06:56:5a:86:f6:e3:f0:57:f5:67:3f:7c:b6:35:4a:
ef:aa:b4:7b:37:70:25:84:2c:f3:b1:d8:88:92:90:32:81:de:
6d:ef:16:4a:f1:9d:84:cc:5e:4f:96:48:cd:33:2e:b2:34:66:
b0:49:a9:3c:91:43:4c:8f:0c:d2:72:89:ae:34:a8:64:03:27:
49:20:54:2f:c0:98:b0:62:7a:43:4f:04:b8:39:cf:54:37:48:
83:56:c6:d8:47:18:e1:8b:03:90:bc:0c:01:74:04:f8:15:05:
f2:da:ac:43:de:63:ac:13:eb:28:f3:26:7b:a3:ad:41:99:ef:
12:4a:eb:a9:24:f7:be:d0:34:30:06:d7:60:f2:b3:dd:8c:4e:
e7:f9:64:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oi5Wxj91Tj43TId7AwZ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZTkxOWE4NGUxYTIyOWY3ODlkOTM5ZDFhYWE3MTJhNGQz
YzM5OWQwHhcNMjUwNjI4MTMwMjUxWhcNMjUwNjI5MTMwMjUxWjAzMTEwLwYDVQQD
EygzZmNkMTQ2MjU0MDc3YzVlODQyYWUzYjNiODBmZDkxM2I5MjFlOWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfUh2QFDl3xIcCrKUPYskfiqmOm3
r598VEyE1doJZY+uPJDdaFGvzpYD8g57H0YZnCYMVByvOxYeK3YdyHBj7Z8L0rUg
YxyO1fUzQukN5K+tRAT8x9UgGkoTnX//CqEbVYeQwX/ZOluX/OdpR+IoDu3uvcrY
wo56Rudo0TNhS82LBvsJSxcgcrHFxAwEJKDks4F14rgXdPlyFe2cRO9GaZtbMRRm
OXvXzaX+7fl4VxJ02/kGQYd2dSHdyFIJbumhYNgrcEiAZkdFgTeGaSp4X9im5d44
ykXsTjY/cb4K6XWBw6vOkXAohKV+395161uI+IoIADAUkzq2OHOc4pkzrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/NFGJUB3xehCrjs7gP2RO5IennMB8GA1UdIwQY
MBaAFEvpGahOGiKfeJ2TnRqqcSpNPDmdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUy1rWnFFNGFJcDk0blpPZEdxcHhLazA4T1owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zNjc3NDgtODg1Yy00NjIxLWI0NGMt
MTE5NWZlMDUwZGUxLzEvUy1rWnFFNGFJcDk0blpPZEdxcHhLazA4T1owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8zNjc3NDgtODg1Yy00NjIxLWI0NGMtMTE5NWZlMDUwZGUx
LzEvUy1rWnFFNGFJcDk0blpPZEdxcHhLazA4T1owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVM2CH5b5
IhbzgBNwwytZvxtlj4QpUFwEUQ3VCtEH6uiH22+mX2AQfNjR3ysnYgrwHX+fsFPD
kArM3W67D5turZYpHCuv8HC01sOP3SvToOyhfRHLrR69HjNtvsyL0TEwkV/LG/9a
Fp9Mgv3aV0GHBlZahvbj8Ff1Zz98tjVK76q0ezdwJYQs87HYiJKQMoHebe8WSvGd
hMxeT5ZIzTMusjRmsEmpPJFDTI8M0nKJrjSoZAMnSSBUL8CYsGJ6Q08EuDnPVDdI
g1bG2EcY4YsDkLwMAXQE+BUF8tqsQ95jrBPrKPMme6OtQZnvEkrrqST3vtA0MAbX
YPKz3YxO5/lkzw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:16:18 2025 by rpki-client