Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft
File: S6XEBCZt6xbZx4qpLoAtg_uibHE.mft (raw, json)
Hash identifier: kvR4Ixw1F6gBSLJEqJSYdElV50HpO1txFmyLISWqXVg=
Subject key identifier: 4A:A8:DE:AE:F6:53:C7:CA:B0:AD:D7:51:4F:71:DE:8D:8F:6F:26:5E
Authority key identifier: 4B:A5:C4:04:26:6D:EB:16:D9:C7:8A:A9:2E:80:2D:83:FB:A2:6C:71
Certificate issuer: /CN=4ba5c404266deb16d9c78aa92e802d83fba26c71
Certificate serial: 01977B9DE21444D4777BE163601D3B560BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6XEBCZt6xbZx4qpLoAtg_uibHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft
Manifest number: 049A
Signing time: Tue 17 Jun 2025 02:00:33 +0000
Manifest this update: Tue 17 Jun 2025 02:00:33 +0000
Manifest next update: Wed 18 Jun 2025 02:00:33 +0000
Files and hashes: 1: S6XEBCZt6xbZx4qpLoAtg_uibHE.crl (hash: cgbmMxg/ervD5lqFQ5LmkpW1NZ8u+GGroqNV5Qjx2WA=)
2: eQ54edgYKIUcfPhFEws-eNJ8BAA.roa (hash: OAjHXz/8YyId26wIY7CC8yapukZc0Z6aGp6x02zSR/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6XEBCZt6xbZx4qpLoAtg_uibHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:9d:e2:14:44:d4:77:7b:e1:63:60:1d:3b:56:0b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba5c404266deb16d9c78aa92e802d83fba26c71
Validity
Not Before: Jun 17 02:00:33 2025 GMT
Not After : Jun 18 02:00:33 2025 GMT
Subject: CN=4aa8deaef653c7cab0add7514f71de8d8f6f265e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:52:a9:76:dd:3e:fc:59:ea:4b:d1:25:4d:90:
0d:91:96:21:ab:ea:ae:fa:c6:7e:41:6a:28:ce:8d:
a8:29:ad:62:28:de:8b:eb:74:6c:90:17:52:ec:eb:
b3:4d:ca:52:a5:8f:22:51:e9:24:5f:77:52:e4:b9:
56:c2:46:41:17:4f:e1:b1:36:df:8e:eb:78:26:69:
b8:50:68:20:bf:2d:d3:db:8e:15:11:d9:a4:c0:aa:
1a:94:61:01:a0:d7:5c:54:0e:cc:e5:dd:55:fa:56:
50:44:c6:0f:11:c0:d2:e1:17:36:03:10:2e:ce:95:
fa:f3:b5:44:ef:62:44:4b:5e:a3:29:6a:d6:fc:06:
1d:b6:e9:aa:79:7d:a2:6e:e8:c0:49:b8:1c:9e:26:
30:bd:52:a7:78:2f:a6:25:72:ae:81:13:91:a5:4f:
1a:60:0e:51:46:2c:1b:4e:65:93:0e:fc:c6:94:7b:
45:c2:96:f2:e5:f0:85:ee:68:01:89:07:cb:78:b3:
1f:1e:a0:a2:32:ca:6c:74:f4:98:cc:d5:ec:68:40:
bf:01:dd:c6:88:ee:3f:6d:b0:ad:a8:52:17:89:40:
68:f6:63:a9:32:0e:3a:7e:db:da:52:66:0a:a0:9c:
0e:04:0c:79:4f:1f:94:0e:c8:a3:2b:37:01:1d:ff:
11:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A8:DE:AE:F6:53:C7:CA:B0:AD:D7:51:4F:71:DE:8D:8F:6F:26:5E
X509v3 Authority Key Identifier:
keyid:4B:A5:C4:04:26:6D:EB:16:D9:C7:8A:A9:2E:80:2D:83:FB:A2:6C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6XEBCZt6xbZx4qpLoAtg_uibHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:97:19:27:c6:bc:7c:36:ba:08:97:bd:a3:95:53:e2:bc:e6:
99:97:57:70:56:e9:12:90:bf:62:65:22:56:9a:2a:91:e7:c1:
2b:f6:9e:71:ca:80:e5:e1:f3:f8:cb:ba:ff:e3:b5:0a:86:f6:
78:02:00:a9:a1:3e:34:cf:1c:cf:0e:b4:6e:d6:b5:f5:44:6a:
89:10:07:dc:0b:91:85:70:07:cb:56:ac:49:47:51:e9:fa:d7:
d1:30:60:ea:50:4e:89:78:38:af:79:d3:b1:f4:6d:6f:fe:1a:
66:13:f6:70:54:c5:7e:97:d0:70:d1:c5:cf:d7:d4:79:04:a9:
37:ab:4f:07:01:4a:4b:4d:09:96:a8:85:3d:be:ba:2a:b6:23:
03:49:a8:27:60:e9:70:62:41:81:a8:49:27:c0:b5:b6:31:e8:
b1:16:77:1c:3d:70:18:88:48:c2:18:fc:ac:83:2b:99:4e:fe:
66:57:41:ae:27:6c:5e:66:4f:f8:22:09:68:67:5d:09:cc:48:
0a:07:d2:03:07:80:0f:02:57:d4:02:be:a6:e4:3b:a7:3e:44:
51:13:60:f2:6e:2d:7e:77:59:01:98:73:28:11:38:f5:42:a6:
a7:2f:96:d4:74:06:e0:c8:55:0d:10:64:43:c7:84:ab:e5:cf:
bd:fa:84:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd7neIURNR3e+FjYB07VgvkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYTVjNDA0MjY2ZGViMTZkOWM3OGFhOTJlODAyZDgzZmJh
MjZjNzEwHhcNMjUwNjE3MDIwMDMzWhcNMjUwNjE4MDIwMDMzWjAzMTEwLwYDVQQD
Eyg0YWE4ZGVhZWY2NTNjN2NhYjBhZGQ3NTE0ZjcxZGU4ZDhmNmYyNjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFKpdt0+/FnqS9ElTZANkZYhq+qu
+sZ+QWoozo2oKa1iKN6L63RskBdS7OuzTcpSpY8iUekkX3dS5LlWwkZBF0/hsTbf
jut4Jmm4UGggvy3T244VEdmkwKoalGEBoNdcVA7M5d1V+lZQRMYPEcDS4Rc2AxAu
zpX687VE72JES16jKWrW/AYdtumqeX2ibujASbgcniYwvVKneC+mJXKugRORpU8a
YA5RRiwbTmWTDvzGlHtFwpby5fCF7mgBiQfLeLMfHqCiMspsdPSYzNXsaEC/Ad3G
iO4/bbCtqFIXiUBo9mOpMg46ftvaUmYKoJwOBAx5Tx+UDsijKzcBHf8RiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqo3q72U8fKsK3XUU9x3o2PbyZeMB8GA1UdIwQY
MBaAFEulxAQmbesW2ceKqS6ALYP7omxxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzZYRUJDWnQ2eGJaeDRxcExvQXRnX3VpYkhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8zZjI3NzItM2RhMy00OTIxLTljNTIt
YjBiMDZlYjM0NGZiLzEvUzZYRUJDWnQ2eGJaeDRxcExvQXRnX3VpYkhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8zZjI3NzItM2RhMy00OTIxLTljNTItYjBiMDZlYjM0NGZi
LzEvUzZYRUJDWnQ2eGJaeDRxcExvQXRnX3VpYkhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADpcZJ8a8
fDa6CJe9o5VT4rzmmZdXcFbpEpC/YmUiVpoqkefBK/aeccqA5eHz+Mu6/+O1Cob2
eAIAqaE+NM8czw60bta19URqiRAH3AuRhXAHy1asSUdR6frX0TBg6lBOiXg4r3nT
sfRtb/4aZhP2cFTFfpfQcNHFz9fUeQSpN6tPBwFKS00JlqiFPb66KrYjA0moJ2Dp
cGJBgahJJ8C1tjHosRZ3HD1wGIhIwhj8rIMrmU7+ZldBridsXmZP+CIJaGddCcxI
CgfSAweADwJX1AK+puQ7pz5EURNg8m4tfndZAZhzKBE49UKmpy+W1HQG4MhVDRBk
Q8eEq+XPvfqE/g==
-----END CERTIFICATE-----
Generated at Tue Jun 17 07:21:01 2025 by rpki-client