Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.mft
File: sTSesOfbZTbKeYKWH_rJsykWXF8.mft (raw, json)
Hash identifier: VYSdVeHazS9lwW5NybvnHgc1P1XBkIcD7Bm1ql4sMU8=
Subject key identifier: 5B:97:05:64:CE:C8:9F:92:D5:4E:B8:12:AB:E5:AF:E6:AF:FC:76:57
Authority key identifier: B1:34:9E:B0:E7:DB:65:36:CA:79:82:96:1F:FA:C9:B3:29:16:5C:5F
Certificate issuer: /CN=b1349eb0e7db6536ca7982961ffac9b329165c5f
Certificate serial: 01976CCFBBC588FEAD927FD2E6CC9E22AA9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTSesOfbZTbKeYKWH_rJsykWXF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.mft
Manifest number: 0243
Signing time: Sat 14 Jun 2025 05:00:42 +0000
Manifest this update: Sat 14 Jun 2025 05:00:42 +0000
Manifest next update: Sun 15 Jun 2025 05:00:42 +0000
Files and hashes: 1: sTSesOfbZTbKeYKWH_rJsykWXF8.crl (hash: pLbm/ioFDBJsWuwcReMn+VZdQEN/gy4d0VvZGkfVz+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTSesOfbZTbKeYKWH_rJsykWXF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:bb:c5:88:fe:ad:92:7f:d2:e6:cc:9e:22:aa:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1349eb0e7db6536ca7982961ffac9b329165c5f
Validity
Not Before: Jun 14 05:00:42 2025 GMT
Not After : Jun 15 05:00:42 2025 GMT
Subject: CN=5b970564cec89f92d54eb812abe5afe6affc7657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b2:e8:82:21:90:6d:1e:52:c2:c4:4e:92:67:
13:cd:90:d4:0d:3a:b9:0c:6b:ae:0e:21:d3:5f:f1:
d4:b8:65:03:3d:2b:50:b7:a7:a2:88:4c:ce:fe:33:
fa:3e:f7:5b:ac:eb:7a:14:f3:da:25:bf:36:22:3f:
b5:c8:29:a1:d1:03:66:64:94:68:a1:fd:b2:5b:67:
68:04:0a:98:c1:b7:04:f3:3e:b7:1a:4a:bb:fd:d6:
97:7f:d7:28:b3:82:27:e1:61:f9:c3:3d:b6:4e:44:
0b:b3:70:a9:22:01:d1:07:c9:31:fc:11:e9:a2:fa:
ee:99:fb:97:c7:e8:0c:07:09:8d:7a:cb:90:43:5f:
a0:c1:8a:75:23:7e:38:00:ef:e2:d4:a4:61:b1:21:
9c:55:f4:57:ce:6a:71:18:da:fd:88:fc:13:f7:8b:
ed:86:10:c4:1b:12:88:59:d6:4d:df:6f:f8:be:25:
d1:7f:a6:07:cc:fa:54:42:51:13:f4:82:eb:a1:87:
41:57:22:2e:21:d1:74:28:85:52:2e:e0:d8:4d:e7:
65:4f:e6:6b:1e:14:18:50:da:88:04:1d:62:3a:08:
9c:71:8f:06:45:b4:74:aa:99:9f:83:c6:e4:2c:1e:
21:f9:9b:64:e8:60:2d:9b:0f:96:65:e1:00:84:b9:
e9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:97:05:64:CE:C8:9F:92:D5:4E:B8:12:AB:E5:AF:E6:AF:FC:76:57
X509v3 Authority Key Identifier:
keyid:B1:34:9E:B0:E7:DB:65:36:CA:79:82:96:1F:FA:C9:B3:29:16:5C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTSesOfbZTbKeYKWH_rJsykWXF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8a:c2:7d:01:89:2f:e7:a3:03:4b:61:c5:26:72:4a:da:70:
0b:e7:91:ad:73:7e:7e:0b:9a:1e:df:f9:ab:cf:2b:75:03:3d:
bd:3a:67:5b:84:8f:53:6a:b8:a2:fc:b6:5c:98:58:90:63:53:
73:5d:99:97:ec:62:40:33:b4:d8:62:12:18:b9:3f:f3:f7:45:
bb:dd:75:b1:01:45:bd:bf:c1:5a:2b:93:3c:7c:dc:38:a2:1e:
07:61:b8:fd:60:c0:06:b9:f1:3d:90:32:a0:6e:0d:2f:0d:4f:
00:04:c8:8a:4f:fb:a9:9c:c1:45:a1:96:bc:77:bb:cc:de:2b:
19:a6:0a:75:30:26:28:52:34:62:0b:48:c7:c7:61:46:ee:b4:
ce:d5:ac:62:b2:ff:f9:ca:4b:00:db:72:8a:1f:4c:1e:f7:e2:
07:38:4b:07:aa:81:74:f1:a9:29:88:ea:74:60:c4:4a:3a:2d:
8e:ce:2c:26:db:57:6e:91:17:c4:71:9a:25:5a:5c:32:0d:24:
c7:55:6a:d0:17:d9:97:c9:56:b6:4a:10:b9:5e:8a:78:0f:b0:
d6:52:ba:3c:7d:63:d3:78:11:5e:be:5e:b9:03:b6:43:b3:07:
59:06:cd:cd:88:39:e6:60:6c:f5:6a:9a:3a:8c:05:73:48:3c:
a1:33:18:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz7vFiP6tkn/S5syeIqqeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMzQ5ZWIwZTdkYjY1MzZjYTc5ODI5NjFmZmFjOWIzMjkx
NjVjNWYwHhcNMjUwNjE0MDUwMDQyWhcNMjUwNjE1MDUwMDQyWjAzMTEwLwYDVQQD
Eyg1Yjk3MDU2NGNlYzg5ZjkyZDU0ZWI4MTJhYmU1YWZlNmFmZmM3NjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbLogiGQbR5SwsROkmcTzZDUDTq5
DGuuDiHTX/HUuGUDPStQt6eiiEzO/jP6PvdbrOt6FPPaJb82Ij+1yCmh0QNmZJRo
of2yW2doBAqYwbcE8z63Gkq7/daXf9cos4In4WH5wz22TkQLs3CpIgHRB8kx/BHp
ovrumfuXx+gMBwmNesuQQ1+gwYp1I344AO/i1KRhsSGcVfRXzmpxGNr9iPwT94vt
hhDEGxKIWdZN32/4viXRf6YHzPpUQlET9ILroYdBVyIuIdF0KIVSLuDYTedlT+Zr
HhQYUNqIBB1iOgiccY8GRbR0qpmfg8bkLB4h+Ztk6GAtmw+WZeEAhLnpOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuXBWTOyJ+S1U64Eqvlr+av/HZXMB8GA1UdIwQY
MBaAFLE0nrDn22U2ynmClh/6ybMpFlxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1RTZXNPZmJaVGJLZVlLV0hfckpzeWtXWEY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8xYjMwYmYtYmNjNy00Nzc3LTkxNDYt
N2EzMGJlNWNlY2MwLzEvc1RTZXNPZmJaVGJLZVlLV0hfckpzeWtXWEY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8xYjMwYmYtYmNjNy00Nzc3LTkxNDYtN2EzMGJlNWNlY2Mw
LzEvc1RTZXNPZmJaVGJLZVlLV0hfckpzeWtXWEY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACorCfQGJ
L+ejA0thxSZyStpwC+eRrXN+fguaHt/5q88rdQM9vTpnW4SPU2q4ovy2XJhYkGNT
c12Zl+xiQDO02GISGLk/8/dFu911sQFFvb/BWiuTPHzcOKIeB2G4/WDABrnxPZAy
oG4NLw1PAATIik/7qZzBRaGWvHe7zN4rGaYKdTAmKFI0YgtIx8dhRu60ztWsYrL/
+cpLANtyih9MHvfiBzhLB6qBdPGpKYjqdGDESjotjs4sJttXbpEXxHGaJVpcMg0k
x1Vq0BfZl8lWtkoQuV6KeA+w1lK6PH1j03gRXr5euQO2Q7MHWQbNzYg55mBs9Wqa
OowFc0g8oTMYmg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:21:49 2025 by rpki-client