Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft
File: sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft (raw, json)
Hash identifier: 9/yvIdH68lW13ZbMBhCYysTjh07O9SYAzrCzE+5WO7Q=
Subject key identifier: E5:AC:43:CD:2E:73:30:F9:BE:9A:2C:41:26:6C:66:B9:36:B1:7A:F9
Authority key identifier: B1:72:B5:BD:C7:54:D5:F6:44:E4:08:1D:BC:03:B2:B4:0A:89:F1:6D
Certificate issuer: /CN=b172b5bdc754d5f644e4081dbc03b2b40a89f16d
Certificate serial: 019873E21D115A029A0E30BA4772D67B98C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXK1vcdU1fZE5AgdvAOytAqJ8W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft
Manifest number: 036B
Signing time: Mon 04 Aug 2025 07:00:54 +0000
Manifest this update: Mon 04 Aug 2025 07:00:54 +0000
Manifest next update: Tue 05 Aug 2025 07:00:54 +0000
Files and hashes: 1: sXK1vcdU1fZE5AgdvAOytAqJ8W0.crl (hash: BKwnuvITpjFi7x84D793vrRFXVBYCKjH9U5BELL3Saw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXK1vcdU1fZE5AgdvAOytAqJ8W0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:1d:11:5a:02:9a:0e:30:ba:47:72:d6:7b:98:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172b5bdc754d5f644e4081dbc03b2b40a89f16d
Validity
Not Before: Aug 4 07:00:54 2025 GMT
Not After : Aug 5 07:00:54 2025 GMT
Subject: CN=e5ac43cd2e7330f9be9a2c41266c66b936b17af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:53:f1:48:f4:f6:99:ed:f4:9b:de:2d:b1:d4:
05:76:4c:1a:c5:14:e3:66:4a:15:31:2b:5f:64:d8:
7c:dd:05:3f:54:bd:3e:c1:51:03:e4:99:7b:07:f0:
79:64:06:8f:f3:f0:25:14:36:39:13:52:09:6f:29:
a5:5c:d9:5e:9d:ea:8d:4a:9b:4a:7d:48:22:3b:3a:
18:b5:06:be:b1:01:9e:c7:cd:8e:54:6a:c4:f3:1d:
b6:be:11:7a:e1:2b:f9:39:95:1d:20:c3:a6:1d:fa:
62:e1:cc:fb:23:91:44:c0:b5:15:4d:6a:59:c3:8f:
04:80:2f:fb:81:70:55:24:80:41:9c:dd:10:ec:65:
3f:e4:be:ee:af:5c:db:4e:6e:da:1e:2d:e8:2b:c0:
4b:da:82:4a:68:b7:85:f1:c1:85:30:19:d9:71:34:
46:d8:f4:ee:26:36:1b:24:32:48:5b:4e:08:e2:86:
5a:ed:00:03:12:0d:b4:43:a8:64:13:92:a3:d3:9c:
ba:a4:81:8f:dd:a2:db:04:08:6c:b8:84:2c:8f:9a:
b3:35:28:c1:5c:3d:e5:8d:cf:c5:d7:0a:9c:70:1b:
05:9c:92:22:ca:b6:d2:5b:ad:42:51:f4:5f:d4:0d:
dd:bf:75:39:02:71:be:a0:c8:b3:54:5f:05:19:aa:
b9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AC:43:CD:2E:73:30:F9:BE:9A:2C:41:26:6C:66:B9:36:B1:7A:F9
X509v3 Authority Key Identifier:
keyid:B1:72:B5:BD:C7:54:D5:F6:44:E4:08:1D:BC:03:B2:B4:0A:89:F1:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXK1vcdU1fZE5AgdvAOytAqJ8W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b6:12:fa:b4:60:47:13:26:35:a1:83:cb:d0:80:2e:e2:b9:
38:38:2b:95:0a:b7:3d:42:28:be:9d:3c:1a:b7:c8:73:a5:aa:
73:ee:ba:e9:07:8a:d5:b5:95:37:cd:e7:05:89:6c:36:6a:cf:
2b:f6:a9:b9:30:4a:0b:28:03:5e:60:e2:95:71:7e:fb:96:9a:
53:8c:13:0a:2c:53:85:22:28:16:c5:3e:49:80:48:ee:35:48:
a0:f0:20:91:e8:63:ff:62:40:65:36:cd:b5:dd:0d:6f:9b:97:
24:cd:d1:a2:4f:47:eb:79:eb:54:ab:55:7a:ea:bf:1c:4f:4c:
ed:c9:32:56:01:e0:be:5c:9d:aa:c8:dc:0d:30:54:1f:5a:23:
02:04:be:b1:5a:ca:4a:a0:15:d4:00:9c:a5:2d:38:b2:af:a9:
8c:db:53:ae:3a:a5:49:20:be:dd:fc:7e:c6:a3:aa:12:f6:c0:
31:e1:7c:94:31:63:d7:1b:0b:e8:b4:dd:82:29:6b:aa:d5:f7:
9a:1d:a7:f2:f3:1e:b7:f1:33:10:4f:9d:9d:35:e5:b3:41:c8:
d7:59:29:4a:37:37:44:ee:f9:3b:d0:df:d2:d5:87:e5:ad:e9:
9c:00:be:a5:54:3c:a3:61:5b:4f:da:22:d1:b1:e2:6b:d6:4a:
26:09:f0:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4h0RWgKaDjC6R3LWe5jHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNzJiNWJkYzc1NGQ1ZjY0NGU0MDgxZGJjMDNiMmI0MGE4
OWYxNmQwHhcNMjUwODA0MDcwMDU0WhcNMjUwODA1MDcwMDU0WjAzMTEwLwYDVQQD
EyhlNWFjNDNjZDJlNzMzMGY5YmU5YTJjNDEyNjZjNjZiOTM2YjE3YWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVPxSPT2me30m94tsdQFdkwaxRTj
ZkoVMStfZNh83QU/VL0+wVED5Jl7B/B5ZAaP8/AlFDY5E1IJbymlXNleneqNSptK
fUgiOzoYtQa+sQGex82OVGrE8x22vhF64Sv5OZUdIMOmHfpi4cz7I5FEwLUVTWpZ
w48EgC/7gXBVJIBBnN0Q7GU/5L7ur1zbTm7aHi3oK8BL2oJKaLeF8cGFMBnZcTRG
2PTuJjYbJDJIW04I4oZa7QADEg20Q6hkE5Kj05y6pIGP3aLbBAhsuIQsj5qzNSjB
XD3ljc/F1wqccBsFnJIiyrbSW61CUfRf1A3dv3U5AnG+oMizVF8FGaq52wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWsQ80uczD5vposQSZsZrk2sXr5MB8GA1UdIwQY
MBaAFLFytb3HVNX2ROQIHbwDsrQKifFtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1hLMXZjZFUxZlpFNUFnZHZBT3l0QXFKOFcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81MDBiYjctZTU1NC00YjFjLTlmNDMt
ZWE1MmFlMDhkZTljLzEvc1hLMXZjZFUxZlpFNUFnZHZBT3l0QXFKOFcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny81MDBiYjctZTU1NC00YjFjLTlmNDMtZWE1MmFlMDhkZTlj
LzEvc1hLMXZjZFUxZlpFNUFnZHZBT3l0QXFKOFcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLYS+rRg
RxMmNaGDy9CALuK5ODgrlQq3PUIovp08GrfIc6Wqc+666QeK1bWVN83nBYlsNmrP
K/apuTBKCygDXmDilXF++5aaU4wTCixThSIoFsU+SYBI7jVIoPAgkehj/2JAZTbN
td0Nb5uXJM3Rok9H63nrVKtVeuq/HE9M7ckyVgHgvlydqsjcDTBUH1ojAgS+sVrK
SqAV1ACcpS04sq+pjNtTrjqlSSC+3fx+xqOqEvbAMeF8lDFj1xsL6LTdgilrqtX3
mh2n8vMet/EzEE+dnTXls0HI11kpSjc3RO75O9Df0tWH5a3pnAC+pVQ8o2FbT9oi
0bHia9ZKJgnwYQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:30 2025 by rpki-client