Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
File: Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft (raw, json)
Hash identifier: 9Wa9oIVXSkxL0sGfrioP1AoRZWNRoFmL8zmkv0I5DHw=
Subject key identifier: 3E:B2:F5:A1:9A:49:CC:3F:96:AE:16:8A:AE:AD:34:6A:5F:5B:C1:07
Authority key identifier: 49:BA:74:C8:CB:E1:E2:7F:AC:A5:C6:7E:89:D3:F6:23:C1:F0:9A:5E
Certificate issuer: /CN=49ba74c8cbe1e27faca5c67e89d3f623c1f09a5e
Certificate serial: 0198733D9D6A440029722F6019F852B8AEFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
Manifest number: 10AC
Signing time: Mon 04 Aug 2025 04:01:14 +0000
Manifest this update: Mon 04 Aug 2025 04:01:14 +0000
Manifest next update: Tue 05 Aug 2025 04:01:14 +0000
Files and hashes: 1: Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl (hash: QnmRieEFIeOnmRKHJyWa6gETtOofgiZYTc+Yl88v4eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:9d:6a:44:00:29:72:2f:60:19:f8:52:b8:ae:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ba74c8cbe1e27faca5c67e89d3f623c1f09a5e
Validity
Not Before: Aug 4 04:01:14 2025 GMT
Not After : Aug 5 04:01:14 2025 GMT
Subject: CN=3eb2f5a19a49cc3f96ae168aaead346a5f5bc107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5c:da:f1:76:8a:74:0e:4b:41:1a:a2:68:44:
14:94:71:58:04:a7:c0:05:9d:6f:99:19:e2:ca:b6:
11:77:c2:38:20:78:ad:64:a4:d4:1f:1d:d4:b7:6b:
f3:05:ae:85:fa:ea:93:04:95:68:32:7d:af:ae:89:
e8:11:d4:56:4e:ea:b7:c8:b2:5f:e9:22:66:90:23:
bb:b4:6b:38:a6:e6:ec:f4:1f:9a:55:bc:30:ef:36:
81:b6:38:c2:be:25:f6:a3:27:12:7b:66:04:66:45:
60:ac:fc:29:d3:9d:18:cd:3a:c1:b9:1a:72:71:2b:
08:71:ab:ad:1e:3a:f1:fd:72:4b:fa:71:c9:a5:ae:
47:27:e9:d8:a5:28:df:fb:8a:bb:6d:06:97:48:17:
06:6b:2d:f7:d8:14:a3:96:b3:ca:d7:f6:a6:a3:78:
98:b5:bd:0d:83:bf:b2:ee:8f:b4:ac:ca:63:d0:a7:
42:6f:ac:f9:37:41:f4:0e:2f:e3:a0:c6:c8:52:cd:
89:2f:7f:0b:0e:04:89:5d:a7:b5:61:8e:47:4d:e0:
2d:58:e8:f6:a2:92:bb:a5:f4:b7:b5:c5:89:d2:6e:
5c:fe:27:60:21:8e:66:b2:2e:9d:4c:50:60:b2:4b:
2a:2d:15:84:eb:b6:2b:54:94:55:de:af:0c:9c:6e:
6d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B2:F5:A1:9A:49:CC:3F:96:AE:16:8A:AE:AD:34:6A:5F:5B:C1:07
X509v3 Authority Key Identifier:
keyid:49:BA:74:C8:CB:E1:E2:7F:AC:A5:C6:7E:89:D3:F6:23:C1:F0:9A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:4c:81:cf:0b:26:17:59:c4:d0:5a:43:b6:5f:24:e8:38:b6:
d4:9e:b0:46:d3:45:24:88:33:e3:a7:d3:2d:c8:6b:0c:76:61:
b4:7e:e3:e3:cf:a3:83:ab:5a:2d:bf:58:dd:73:4e:c8:b2:20:
75:15:07:03:5c:28:d6:c2:b4:f2:48:0b:79:49:ce:3c:fd:85:
d2:f3:7b:78:bc:7a:bf:b9:bc:0a:68:6a:49:c3:78:1e:3e:0d:
77:38:5e:0b:6d:97:b3:ef:07:7e:4f:d0:a2:4c:c4:3e:03:68:
e4:ba:fd:f9:e7:72:79:fb:a0:8f:92:c2:8a:d5:fe:d7:29:ea:
65:a4:68:a1:52:30:42:39:fc:b7:cd:e2:3f:ad:b3:34:c1:d6:
bd:76:de:19:5d:b4:9d:1a:ba:21:1b:cb:75:4e:da:0a:e6:30:
ed:ef:66:b2:3e:c3:d7:84:87:12:15:a8:83:b5:47:7b:bd:19:
31:4a:c7:f4:c9:a1:31:c1:e7:b6:cc:07:eb:c7:b7:ca:5d:1f:
b6:26:23:11:e3:0e:f1:eb:a5:f6:13:a6:88:e8:cd:35:67:0e:
c8:cb:6d:90:02:c5:4c:f2:09:ce:9f:64:0b:e0:36:01:01:9f:
15:bc:a0:fa:7d:3d:81:f7:6b:81:50:b0:53:2b:b0:e8:56:03:
d0:f1:cd:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPZ1qRAApci9gGfhSuK78MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YmE3NGM4Y2JlMWUyN2ZhY2E1YzY3ZTg5ZDNmNjIzYzFm
MDlhNWUwHhcNMjUwODA0MDQwMTE0WhcNMjUwODA1MDQwMTE0WjAzMTEwLwYDVQQD
EygzZWIyZjVhMTlhNDljYzNmOTZhZTE2OGFhZWFkMzQ2YTVmNWJjMTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFza8XaKdA5LQRqiaEQUlHFYBKfA
BZ1vmRniyrYRd8I4IHitZKTUHx3Ut2vzBa6F+uqTBJVoMn2vronoEdRWTuq3yLJf
6SJmkCO7tGs4pubs9B+aVbww7zaBtjjCviX2oycSe2YEZkVgrPwp050YzTrBuRpy
cSsIcautHjrx/XJL+nHJpa5HJ+nYpSjf+4q7bQaXSBcGay332BSjlrPK1/amo3iY
tb0Ng7+y7o+0rMpj0KdCb6z5N0H0Di/joMbIUs2JL38LDgSJXae1YY5HTeAtWOj2
opK7pfS3tcWJ0m5c/idgIY5msi6dTFBgsksqLRWE67YrVJRV3q8MnG5tPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6y9aGaScw/lq4Wiq6tNGpfW8EHMB8GA1UdIwQY
MBaAFEm6dMjL4eJ/rKXGfonT9iPB8JpeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2JwMHlNdmg0bi1zcGNaLWlkUDJJOEh3bWw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9lNzM2ZmEtODFjOC00NzVmLWE3M2Ut
MmJiMGUxYzBlM2VmLzEvU2JwMHlNdmg0bi1zcGNaLWlkUDJJOEh3bWw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9lNzM2ZmEtODFjOC00NzVmLWE3M2UtMmJiMGUxYzBlM2Vm
LzEvU2JwMHlNdmg0bi1zcGNaLWlkUDJJOEh3bWw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeEyBzwsm
F1nE0FpDtl8k6Di21J6wRtNFJIgz46fTLchrDHZhtH7j48+jg6taLb9Y3XNOyLIg
dRUHA1wo1sK08kgLeUnOPP2F0vN7eLx6v7m8CmhqScN4Hj4NdzheC22Xs+8Hfk/Q
okzEPgNo5Lr9+edyefugj5LCitX+1ynqZaRooVIwQjn8t83iP62zNMHWvXbeGV20
nRq6IRvLdU7aCuYw7e9msj7D14SHEhWog7VHe70ZMUrH9MmhMcHntswH68e3yl0f
tiYjEeMO8eul9hOmiOjNNWcOyMttkALFTPIJzp9kC+A2AQGfFbyg+n09gfdrgVCw
Uyuw6FYD0PHN4w==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:52 2025 by rpki-client