Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
File: S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft (raw, json)
Hash identifier: DTfR8gSGgAbZAYLS15TbguPtZsCUM0VXsFfRjmx43ww=
Subject key identifier: E8:C1:B6:82:C5:2E:EF:FD:B5:F9:05:F0:A6:36:5F:E1:CE:74:02:A4
Authority key identifier: 4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD
Certificate issuer: /CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
Certificate serial: 0197684E1F93B5E0E3891F8DA61FDCD23EC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
Manifest number: 0265
Signing time: Fri 13 Jun 2025 08:00:39 +0000
Manifest this update: Fri 13 Jun 2025 08:00:39 +0000
Manifest next update: Sat 14 Jun 2025 08:00:39 +0000
Files and hashes: 1: N2ivlz1wZCpdYYLO1Jxljykvn4c.roa (hash: qYmGGsXcI2a1eHN7AFVSkBu0axGqB7MkOzzu5zM+aAU=)
2: S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl (hash: PQY2Aoa9/X6KdKQlwrXHdliJz5Od4tK933Jcn3kLbiA=)
3: y-thR2-wOGxjUF2dmavWMwBsUm0.roa (hash: WQLO7IU5V5iq1uzzyryZYM1QGfm/WLluTpgcnyQ2D8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:1f:93:b5:e0:e3:89:1f:8d:a6:1f:dc:d2:3e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
Validity
Not Before: Jun 13 08:00:39 2025 GMT
Not After : Jun 14 08:00:39 2025 GMT
Subject: CN=e8c1b682c52eeffdb5f905f0a6365fe1ce7402a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:96:39:8f:7a:5c:bc:84:bf:bd:1e:d9:f6:77:
32:92:48:8a:6e:9e:cf:e3:d8:f7:b0:d1:4c:cf:a2:
23:e1:2f:78:7a:51:8f:92:e9:b1:fb:96:2a:59:6c:
2a:57:9a:c5:b5:6c:61:09:dc:db:e1:46:bb:50:eb:
33:ad:00:a9:cd:9f:9f:5e:1a:b0:74:62:28:c9:6a:
1b:79:ba:39:6b:bd:38:9b:b3:1d:da:a8:2f:b4:af:
c7:f3:ff:10:de:d3:bb:e6:67:3f:6d:a0:07:de:5b:
df:ab:1f:5c:7f:ae:df:bb:43:29:e4:f3:ae:66:aa:
50:23:0d:a3:37:30:03:4f:18:ee:09:12:2e:56:17:
37:56:22:17:62:9a:6b:ad:15:a0:fe:40:b5:fd:72:
bb:04:7e:e6:be:c6:5f:c7:1f:ea:ef:5a:a1:fb:ae:
06:4d:90:53:cd:3e:67:dd:0c:a0:2a:cb:1a:13:1c:
24:9c:45:a6:ec:c9:7e:0c:d6:50:cd:8f:39:8b:e3:
8c:d7:25:64:4d:d3:25:0a:3f:f9:4c:be:2b:64:ca:
8a:79:c0:99:9d:f8:64:49:ed:d7:74:7f:ec:93:d3:
b3:02:ea:02:b6:e1:24:9f:6a:67:78:ef:52:bc:f2:
3a:db:f4:55:86:a8:d8:c8:dd:a9:ba:bc:be:3a:35:
f7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C1:B6:82:C5:2E:EF:FD:B5:F9:05:F0:A6:36:5F:E1:CE:74:02:A4
X509v3 Authority Key Identifier:
keyid:4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c4:c2:df:b1:35:59:9c:47:20:89:51:8a:37:ce:c3:06:bf:
88:7b:07:13:41:d2:61:85:94:e9:27:5d:dd:3e:7e:16:74:19:
53:3d:ac:66:a5:a3:7c:92:71:f0:68:83:b7:9e:dc:3d:5e:8f:
14:4b:d6:f5:7f:ea:a1:ee:8b:0f:7d:0d:3f:65:62:73:40:1f:
1c:12:a7:38:a0:c7:35:1a:d7:27:58:5b:10:d7:20:9d:bc:73:
22:a2:3c:75:d8:ca:ff:12:bd:27:a9:55:e6:b6:73:ed:42:e1:
9c:78:62:d2:b0:61:b1:e5:a4:aa:25:3b:38:b9:29:40:ed:79:
ba:9b:2f:04:49:b4:be:22:55:61:cb:95:1c:17:af:c6:ec:fd:
29:91:9e:d1:f6:19:71:60:54:a1:e9:16:9c:57:49:fc:bf:31:
4f:78:40:09:df:6d:55:65:94:dc:1e:24:b9:fa:e7:ec:f7:f2:
99:0c:6f:c7:f2:bb:e9:72:66:9c:03:21:6f:26:64:3f:a4:0b:
ec:80:83:86:c0:c0:0f:2c:d2:7a:b4:13:4f:f4:44:6e:ba:58:
7b:7a:ca:d8:f5:4a:dc:82:ba:cb:fc:8a:fb:62:91:74:e5:3b:
e8:af:66:cb:e0:89:e1:8c:1d:7f:4b:0a:4c:a1:42:d4:93:96:
67:18:fb:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdoTh+TteDjiR+Nph/c0j7EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNGZiZmNmNWZkYzQ4YWIwYmZiNTI4NTRmN2EwNGZjMWNm
ZjFkYmQwHhcNMjUwNjEzMDgwMDM5WhcNMjUwNjE0MDgwMDM5WjAzMTEwLwYDVQQD
EyhlOGMxYjY4MmM1MmVlZmZkYjVmOTA1ZjBhNjM2NWZlMWNlNzQwMmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypY5j3pcvIS/vR7Z9ncykkiKbp7P
49j3sNFMz6Ij4S94elGPkumx+5YqWWwqV5rFtWxhCdzb4Ua7UOszrQCpzZ+fXhqw
dGIoyWobebo5a704m7Md2qgvtK/H8/8Q3tO75mc/baAH3lvfqx9cf67fu0Mp5POu
ZqpQIw2jNzADTxjuCRIuVhc3ViIXYpprrRWg/kC1/XK7BH7mvsZfxx/q71qh+64G
TZBTzT5n3QygKssaExwknEWm7Ml+DNZQzY85i+OM1yVkTdMlCj/5TL4rZMqKecCZ
nfhkSe3XdH/sk9OzAuoCtuEkn2pneO9SvPI62/RVhqjYyN2pury+OjX3TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjBtoLFLu/9tfkF8KY2X+HOdAKkMB8GA1UdIwQY
MBaAFEtPv89f3EirC/tShU96BPwc/x29MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzAtX3oxX2NTS3NMLTFLRlQzb0VfQnpfSGIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jNjBiMWItOWI0Mi00NWViLWE1ODIt
OTJkZGVjNmJkMGEyLzEvUzAtX3oxX2NTS3NMLTFLRlQzb0VfQnpfSGIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9jNjBiMWItOWI0Mi00NWViLWE1ODItOTJkZGVjNmJkMGEy
LzEvUzAtX3oxX2NTS3NMLTFLRlQzb0VfQnpfSGIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADsTC37E1
WZxHIIlRijfOwwa/iHsHE0HSYYWU6Sdd3T5+FnQZUz2sZqWjfJJx8GiDt57cPV6P
FEvW9X/qoe6LD30NP2Vic0AfHBKnOKDHNRrXJ1hbENcgnbxzIqI8ddjK/xK9J6lV
5rZz7ULhnHhi0rBhseWkqiU7OLkpQO15upsvBEm0viJVYcuVHBevxuz9KZGe0fYZ
cWBUoekWnFdJ/L8xT3hACd9tVWWU3B4kufrn7PfymQxvx/K76XJmnAMhbyZkP6QL
7ICDhsDADyzSerQTT/REbrpYe3rK2PVK3IK6y/yK+2KRdOU76K9my+CJ4Ywdf0sK
TKFC1JOWZxj7WA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:58 2025 by rpki-client