Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
File: rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft (raw, json)
Hash identifier: XdRdzZOgEwb1TjadmMiM1Rb7F/N/TSZrWtY2ihTrwYc=
Subject key identifier: 51:C3:E6:BE:E8:E7:2D:25:84:36:DB:E6:78:01:DA:27:9E:DF:3E:CE
Authority key identifier: AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
Certificate issuer: /CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Certificate serial: 0197BBC6E220C1EF9DF0D35E22E43740DB3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
Manifest number: 0268
Signing time: Sun 29 Jun 2025 13:01:02 +0000
Manifest this update: Sun 29 Jun 2025 13:01:02 +0000
Manifest next update: Mon 30 Jun 2025 13:01:02 +0000
Files and hashes: 1: rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl (hash: 8j7sue5+5TEW+JbuaLiKGB8MhQxjchV4i2wcT2WtKeQ=)
2: ymqELlMii23trp9Ry-AEB-L5Gsg.roa (hash: bg95RMRsGjw0+vtsFPQKv+EI6I0p/reBLLmPNmAd/+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:c6:e2:20:c1:ef:9d:f0:d3:5e:22:e4:37:40:db:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Validity
Not Before: Jun 29 13:01:02 2025 GMT
Not After : Jun 30 13:01:02 2025 GMT
Subject: CN=51c3e6bee8e72d258436dbe67801da279edf3ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:80:12:b8:ba:e5:c3:b6:e8:1a:0c:c1:0f:c6:
25:d9:7d:df:48:a9:50:1d:f8:0f:d1:ed:9d:ba:34:
c4:0a:a2:11:8d:43:47:b5:ab:d6:0b:1a:3f:f9:98:
27:67:99:29:1d:bb:1c:e4:58:4b:47:b2:27:09:d5:
24:56:7c:d3:f1:31:65:7e:8b:25:36:30:ce:b7:cc:
29:b4:75:27:a3:d8:81:56:28:f5:64:87:ae:f4:62:
bb:6f:b7:4e:59:69:d6:6f:e1:2b:b7:d6:3b:7c:bf:
3b:e7:45:1e:28:1b:63:03:96:a6:00:dd:80:ba:c0:
78:6a:99:70:ad:38:39:1c:6d:f9:fd:48:aa:dd:70:
58:18:78:23:7a:8d:7d:ee:9d:2b:b3:e8:b6:1d:cd:
d4:9e:56:ff:8f:e1:bc:17:95:aa:ec:0c:91:5e:21:
d3:63:97:43:91:36:d5:9b:15:45:60:4a:c2:98:5d:
fd:fe:f6:b2:bf:58:46:13:c2:60:07:4d:e3:55:19:
50:01:41:18:25:32:1f:8f:4e:41:ce:b2:14:68:9c:
29:1e:00:a1:ca:bc:8f:f1:91:f8:b6:ed:e5:c4:8f:
6c:1d:8e:41:0f:51:91:f1:a7:64:19:f1:9e:94:b9:
24:78:7d:8d:a0:3a:96:28:4e:71:b3:68:b8:07:bd:
1e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C3:E6:BE:E8:E7:2D:25:84:36:DB:E6:78:01:DA:27:9E:DF:3E:CE
X509v3 Authority Key Identifier:
keyid:AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:84:17:63:dd:42:13:e5:db:44:55:a9:f3:ee:fc:48:c4:c9:
ae:ed:6a:3b:37:30:20:4d:a1:71:ba:82:51:a5:1d:ac:71:7b:
ce:89:81:95:e4:85:2a:52:8a:9b:31:a3:7b:4c:b9:53:0b:b1:
be:68:7b:ff:1c:ff:21:0c:6d:62:69:3f:b3:98:9c:14:3c:54:
9b:6e:92:06:b8:26:7e:cc:ef:79:aa:ba:b3:08:f8:28:4d:7c:
28:8b:be:5f:ed:d5:ed:ae:11:7d:3e:b5:82:24:fe:e6:69:c8:
2c:c1:c3:95:dd:52:6b:3e:2b:e0:79:02:9b:ec:3e:93:f4:dd:
32:19:40:43:76:ae:b7:f2:54:21:48:76:97:ae:0a:82:f3:17:
db:77:2c:71:f1:52:5e:98:ef:9c:90:17:f5:37:9f:6f:8b:0b:
28:50:f7:02:1f:a0:5e:70:40:27:da:bd:e2:7c:11:1e:21:93:
1a:49:4b:6c:3f:54:1a:16:00:1a:0a:bc:f9:f4:7a:d3:6d:f6:
58:2a:64:51:2a:a2:b3:a0:f8:08:16:67:19:b5:9c:50:7c:fa:
e9:0a:d6:ac:8c:70:78:a9:c1:90:32:40:ac:79:58:c1:a1:e3:
6b:f9:f8:7b:98:62:9d:46:f3:d4:fe:07:2c:f6:3b:1d:97:e8:
6f:cd:05:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe7xuIgwe+d8NNeIuQ3QNs8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYjgzODVkMDg1NzA4MGNmYzAxM2FhNTIxYmRlNmEzYTkz
ZTQ4MTIwHhcNMjUwNjI5MTMwMTAyWhcNMjUwNjMwMTMwMTAyWjAzMTEwLwYDVQQD
Eyg1MWMzZTZiZWU4ZTcyZDI1ODQzNmRiZTY3ODAxZGEyNzllZGYzZWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIASuLrlw7boGgzBD8Yl2X3fSKlQ
HfgP0e2dujTECqIRjUNHtavWCxo/+ZgnZ5kpHbsc5FhLR7InCdUkVnzT8TFlfosl
NjDOt8wptHUno9iBVij1ZIeu9GK7b7dOWWnWb+Ert9Y7fL8750UeKBtjA5amAN2A
usB4aplwrTg5HG35/Uiq3XBYGHgjeo197p0rs+i2Hc3Unlb/j+G8F5Wq7AyRXiHT
Y5dDkTbVmxVFYErCmF39/vayv1hGE8JgB03jVRlQAUEYJTIfj05BzrIUaJwpHgCh
yryP8ZH4tu3lxI9sHY5BD1GR8adkGfGelLkkeH2NoDqWKE5xs2i4B70e5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHD5r7o5y0lhDbb5ngB2iee3z7OMB8GA1UdIwQY
MBaAFKy4OF0IVwgM/AE6pSG95qOpPkgSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckxnNFhRaFhDQXo4QVRxbEliM21vNmstU0JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yYWE0NGQtM2JmMy00MjBiLWFlM2Ut
ZThhNmExNDQxOWQ5LzEvckxnNFhRaFhDQXo4QVRxbEliM21vNmstU0JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8yYWE0NGQtM2JmMy00MjBiLWFlM2UtZThhNmExNDQxOWQ5
LzEvckxnNFhRaFhDQXo4QVRxbEliM21vNmstU0JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqoQXY91C
E+XbRFWp8+78SMTJru1qOzcwIE2hcbqCUaUdrHF7zomBleSFKlKKmzGje0y5Uwux
vmh7/xz/IQxtYmk/s5icFDxUm26SBrgmfszveaq6swj4KE18KIu+X+3V7a4RfT61
giT+5mnILMHDld1Saz4r4HkCm+w+k/TdMhlAQ3aut/JUIUh2l64KgvMX23cscfFS
XpjvnJAX9Tefb4sLKFD3Ah+gXnBAJ9q94nwRHiGTGklLbD9UGhYAGgq8+fR60232
WCpkUSqis6D4CBZnGbWcUHz66QrWrIxweKnBkDJArHlYwaHja/n4e5hinUbz1P4H
LPY7HZfob80FwQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 16:47:21 2025 by rpki-client