Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
File: SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft (raw, json)
Hash identifier: dyTX/oXsNK0O03psw4n66QueO1o31oZn+4SyMSFL2Y8=
Subject key identifier: CE:54:DD:DD:64:83:E8:D8:72:E8:B2:D5:0E:46:29:B1:60:57:E7:72
Authority key identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
Certificate issuer: /CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Certificate serial: 0197B70E722EF1FD757558E26E4478061225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
Manifest number: 0594
Signing time: Sat 28 Jun 2025 15:01:06 +0000
Manifest this update: Sat 28 Jun 2025 15:01:06 +0000
Manifest next update: Sun 29 Jun 2025 15:01:06 +0000
Files and hashes: 1: 3klZTNM9YhJqZUNp3PJkFRczFX8.roa (hash: OyXgZ5l4rO5Wt2TcoTvX9gJZ0hgPAdu2wTU0n6/gZoU=)
2: SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl (hash: zknhcLqsGo6A63eAYEgfp2IlZjZSZ01web9bip4AP8s=)
3: W0AAJRLr6gi2r74kS95DxTYGfTw.roa (hash: MH+HQqYFMBeGJJqR0jYHA1u1MAdvWa+AHHutk6W2MvA=)
4: r0aCHKZqLV95OV5gwTfYdhHbA6Q.roa (hash: xjRrpFDO8g9sZNIp8GQ1hogAG1em04ZcPXgm2d8N7a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:72:2e:f1:fd:75:75:58:e2:6e:44:78:06:12:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Validity
Not Before: Jun 28 15:01:06 2025 GMT
Not After : Jun 29 15:01:06 2025 GMT
Subject: CN=ce54dddd6483e8d872e8b2d50e4629b16057e772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2f:d8:98:4f:7b:1b:1a:65:3a:00:1c:a3:60:
23:98:67:63:f9:52:4c:e7:96:be:a5:c8:1e:63:33:
57:26:a5:0f:da:f0:7b:b2:6f:f9:94:ed:57:c9:41:
de:97:bb:f2:72:e9:eb:6e:05:d5:49:cb:80:27:ae:
6f:08:ca:67:92:4f:1e:20:bb:8f:3f:ed:41:e5:26:
0d:b4:f3:40:a8:58:af:d7:70:f7:d9:9f:1f:4e:1a:
57:7b:c0:5d:93:0c:05:8b:71:37:97:f7:0b:f3:73:
16:96:8b:af:d1:75:14:8c:2d:0b:9d:f6:fe:48:b7:
9e:5d:43:44:37:89:cd:13:f2:9e:33:18:31:9a:04:
8b:64:ae:03:52:77:d7:e1:e5:a1:a9:d9:67:fa:8a:
08:ea:0e:22:d0:1b:24:3c:1e:53:e8:cb:0c:0f:56:
61:a3:04:57:22:78:ad:d0:ad:c8:11:2f:d2:2a:2f:
1b:4c:83:be:09:7e:5c:14:26:6a:c0:35:0b:d7:2a:
94:5a:81:c0:69:5d:0e:dd:7a:d5:f0:b7:b4:99:10:
5b:8c:64:bb:6a:b8:2c:d6:58:32:93:5c:4f:0a:b3:
83:e6:5d:d2:23:e3:72:3a:06:36:29:4b:48:70:ff:
e8:92:38:32:a0:3e:67:df:40:5b:be:37:f1:8c:5c:
9a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:54:DD:DD:64:83:E8:D8:72:E8:B2:D5:0E:46:29:B1:60:57:E7:72
X509v3 Authority Key Identifier:
keyid:48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:1e:f4:ce:5d:af:de:b2:e1:43:d8:ec:0a:2d:a0:78:4f:c7:
0a:30:f3:a0:56:78:6f:55:f2:af:f6:82:a7:df:03:bf:bd:c5:
47:71:22:4e:18:d4:75:ae:ce:29:25:d6:07:e0:35:c2:ba:44:
08:dc:2b:e3:03:7d:07:e6:a0:2d:00:15:f1:f6:70:73:26:86:
05:fb:c6:2e:25:36:7c:1c:f0:e2:30:55:4c:10:f5:f9:2e:64:
f2:59:5f:d0:6f:2b:19:eb:98:a9:6a:e4:b3:c4:11:dd:e7:5e:
1e:e3:59:71:f8:e7:f3:b2:de:8d:a2:98:cc:d8:1d:2f:71:80:
96:6f:11:38:6b:b0:7d:df:6b:64:1e:23:4e:66:15:02:42:5e:
72:39:14:1d:29:73:00:91:e7:21:84:6e:b8:bc:4e:dc:31:1a:
8a:be:81:d8:81:e4:06:75:36:43:07:f6:b7:6a:60:8c:bf:9c:
9d:48:72:78:83:f0:85:5a:6c:b2:49:e3:2a:6e:9c:71:d6:c3:
b7:8f:28:12:12:2d:77:c4:95:6d:7d:32:bc:95:5e:34:e1:37:
cb:9c:0e:87:bb:ec:6d:a6:0f:9c:41:a6:cc:d1:55:02:82:07:
13:3c:89:02:c8:27:cb:a0:7e:f0:f3:69:25:d9:88:5a:23:a7:
fe:2e:ea:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DnIu8f11dVjibkR4BhIlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NWRkYjY3OGM0YzBkMGM0ODhlZmQzYjgzNjcxNDIxODlm
MzM1OGEwHhcNMjUwNjI4MTUwMTA2WhcNMjUwNjI5MTUwMTA2WjAzMTEwLwYDVQQD
EyhjZTU0ZGRkZDY0ODNlOGQ4NzJlOGIyZDUwZTQ2MjliMTYwNTdlNzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC/YmE97GxplOgAco2AjmGdj+VJM
55a+pcgeYzNXJqUP2vB7sm/5lO1XyUHel7vycunrbgXVScuAJ65vCMpnkk8eILuP
P+1B5SYNtPNAqFiv13D32Z8fThpXe8BdkwwFi3E3l/cL83MWlouv0XUUjC0Lnfb+
SLeeXUNEN4nNE/KeMxgxmgSLZK4DUnfX4eWhqdln+ooI6g4i0BskPB5T6MsMD1Zh
owRXInit0K3IES/SKi8bTIO+CX5cFCZqwDUL1yqUWoHAaV0O3XrV8Le0mRBbjGS7
args1lgyk1xPCrOD5l3SI+NyOgY2KUtIcP/okjgyoD5n30BbvjfxjFyavQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5U3d1kg+jYcuiy1Q5GKbFgV+dyMB8GA1UdIwQY
MBaAFEhd22eMTA0MSI79O4NnFCGJ8zWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iZWIyMDAtZTVkNi00Njk2LWFlMjUt
ZGViZmNkOWViMjBlLzEvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iZWIyMDAtZTVkNi00Njk2LWFlMjUtZGViZmNkOWViMjBl
LzEvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMh70zl2v
3rLhQ9jsCi2geE/HCjDzoFZ4b1Xyr/aCp98Dv73FR3EiThjUda7OKSXWB+A1wrpE
CNwr4wN9B+agLQAV8fZwcyaGBfvGLiU2fBzw4jBVTBD1+S5k8llf0G8rGeuYqWrk
s8QR3edeHuNZcfjn87LejaKYzNgdL3GAlm8ROGuwfd9rZB4jTmYVAkJecjkUHSlz
AJHnIYRuuLxO3DEair6B2IHkBnU2Qwf2t2pgjL+cnUhyeIPwhVpssknjKm6ccdbD
t48oEhItd8SVbX0yvJVeNOE3y5wOh7vsbaYPnEGmzNFVAoIHEzyJAsgny6B+8PNp
JdmIWiOn/i7qYQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:44 2025 by rpki-client