Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
File: SxEEihpJFuExuM4Iji1v5OXF49s.mft (raw, json)
Hash identifier: 1IFfAHuCoX46P1q9BAt8Bfs8pEbiD0/xKBV6txXqAcY=
Subject key identifier: 73:3C:D0:9F:34:C4:1A:45:75:BD:ED:C6:14:21:A4:4F:82:0E:3D:CA
Authority key identifier: 4B:11:04:8A:1A:49:16:E1:31:B8:CE:08:8E:2D:6F:E4:E5:C5:E3:DB
Certificate issuer: /CN=4b11048a1a4916e131b8ce088e2d6fe4e5c5e3db
Certificate serial: 01987374B44785DC10E37C65ABEE4152EE16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
Manifest number: 0255
Signing time: Mon 04 Aug 2025 05:01:24 +0000
Manifest this update: Mon 04 Aug 2025 05:01:24 +0000
Manifest next update: Tue 05 Aug 2025 05:01:24 +0000
Files and hashes: 1: SxEEihpJFuExuM4Iji1v5OXF49s.crl (hash: 0NUgCZdAql1Kb2DNtSO+sN74HdiNR++jrnt58EzTges=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:b4:47:85:dc:10:e3:7c:65:ab:ee:41:52:ee:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b11048a1a4916e131b8ce088e2d6fe4e5c5e3db
Validity
Not Before: Aug 4 05:01:24 2025 GMT
Not After : Aug 5 05:01:24 2025 GMT
Subject: CN=733cd09f34c41a4575bdedc61421a44f820e3dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:eb:35:21:58:03:54:66:a4:a9:f8:26:17:97:
95:de:97:0e:8b:bc:2f:5c:dd:30:f3:d3:b6:87:8e:
af:b9:3d:b3:89:db:cc:43:ea:9e:40:e2:34:97:9d:
39:bc:56:dd:83:0f:85:fa:25:5d:66:86:60:ab:a0:
8e:66:da:e0:fb:dd:9e:01:43:00:97:f2:4b:c6:14:
cb:0f:88:2b:51:66:56:7c:90:37:b3:92:ea:63:09:
fd:56:ca:9f:65:e9:31:54:84:85:84:0b:8e:2e:4c:
0e:f3:5b:26:33:80:4f:c9:19:aa:2b:3c:c3:95:61:
d6:5b:f0:4d:11:2a:83:92:98:10:0a:10:67:09:58:
7c:bd:57:95:79:92:52:23:60:45:40:0b:c7:e7:a6:
fe:33:f2:d4:9e:3a:dc:df:5d:35:dc:9e:27:b3:38:
a0:96:26:2b:c1:ea:80:82:37:5a:1a:be:61:1d:6a:
af:b8:0a:7b:6a:01:bf:95:f9:3d:4c:df:91:97:3c:
77:96:af:7b:15:f5:3d:92:df:1f:1c:83:48:a2:8c:
0e:b7:9b:03:b2:4b:0a:87:78:ed:7a:87:dc:0a:fc:
68:f7:04:87:b1:14:75:a3:61:09:6a:41:d5:be:be:
b4:38:9c:15:4b:b4:8d:ea:2d:5e:38:d2:39:a3:ab:
12:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3C:D0:9F:34:C4:1A:45:75:BD:ED:C6:14:21:A4:4F:82:0E:3D:CA
X509v3 Authority Key Identifier:
keyid:4B:11:04:8A:1A:49:16:E1:31:B8:CE:08:8E:2D:6F:E4:E5:C5:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:54:1d:68:ce:70:28:64:0c:b9:1c:2d:82:98:83:60:cb:63:
a5:b0:20:d6:70:53:4b:85:45:b0:d1:af:f3:35:58:d4:e9:d8:
ca:4a:0f:3e:b2:bb:96:d0:e5:cb:69:bb:a5:cd:b3:46:0d:d6:
ce:e9:c7:03:5d:a9:f8:69:bf:88:48:7d:61:cb:d3:2c:76:85:
af:21:1d:20:85:e5:0f:08:89:34:0f:a2:11:0d:2a:2d:2c:66:
09:79:75:dc:7f:ff:a1:b5:cc:2b:58:3e:cd:2d:36:52:e5:83:
52:b8:42:91:f5:4c:c4:b0:e7:b9:c0:5e:96:89:17:7a:b9:82:
1a:2e:7c:fd:21:93:12:9b:b9:49:6e:dd:8a:e6:33:5e:c0:7d:
7e:56:97:a8:bc:80:ea:32:7f:c4:23:ff:96:d4:d0:cb:f5:19:
39:2d:e1:5e:6e:66:0d:d7:2f:64:75:c8:fc:65:97:c8:68:c7:
13:8f:00:2d:27:87:e9:3f:b5:aa:a9:2e:45:c4:e6:ca:bc:9d:
6f:de:fe:5d:77:c4:b0:d9:d3:6c:9e:f1:8f:bc:df:bf:64:5e:
a4:a4:3e:9d:a0:e6:75:b4:b0:4b:e7:2c:78:7d:ea:7c:ea:2a:
35:af:47:84:aa:60:e0:e1:2b:7b:f1:ca:d6:58:1e:b1:96:a1:
e2:9a:9a:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzdLRHhdwQ43xlq+5BUu4WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMTEwNDhhMWE0OTE2ZTEzMWI4Y2UwODhlMmQ2ZmU0ZTVj
NWUzZGIwHhcNMjUwODA0MDUwMTI0WhcNMjUwODA1MDUwMTI0WjAzMTEwLwYDVQQD
Eyg3MzNjZDA5ZjM0YzQxYTQ1NzViZGVkYzYxNDIxYTQ0ZjgyMGUzZGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+s1IVgDVGakqfgmF5eV3pcOi7wv
XN0w89O2h46vuT2zidvMQ+qeQOI0l505vFbdgw+F+iVdZoZgq6COZtrg+92eAUMA
l/JLxhTLD4grUWZWfJA3s5LqYwn9VsqfZekxVISFhAuOLkwO81smM4BPyRmqKzzD
lWHWW/BNESqDkpgQChBnCVh8vVeVeZJSI2BFQAvH56b+M/LUnjrc31013J4nszig
liYrweqAgjdaGr5hHWqvuAp7agG/lfk9TN+Rlzx3lq97FfU9kt8fHINIoowOt5sD
sksKh3jteofcCvxo9wSHsRR1o2EJakHVvr60OJwVS7SN6i1eONI5o6sSRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHM80J80xBpFdb3txhQhpE+CDj3KMB8GA1UdIwQY
MBaAFEsRBIoaSRbhMbjOCI4tb+TlxePbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3hFRWlocEpGdUV4dU00SWppMXY1T1hGNDlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kM2EyMjgtZmM0Zi00MGIyLTg4YjIt
ZTQ4NDYxMWE5NjIxLzEvU3hFRWlocEpGdUV4dU00SWppMXY1T1hGNDlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9kM2EyMjgtZmM0Zi00MGIyLTg4YjItZTQ4NDYxMWE5NjIx
LzEvU3hFRWlocEpGdUV4dU00SWppMXY1T1hGNDlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1QdaM5w
KGQMuRwtgpiDYMtjpbAg1nBTS4VFsNGv8zVY1OnYykoPPrK7ltDly2m7pc2zRg3W
zunHA12p+Gm/iEh9YcvTLHaFryEdIIXlDwiJNA+iEQ0qLSxmCXl13H//obXMK1g+
zS02UuWDUrhCkfVMxLDnucBelokXermCGi58/SGTEpu5SW7diuYzXsB9flaXqLyA
6jJ/xCP/ltTQy/UZOS3hXm5mDdcvZHXI/GWXyGjHE48ALSeH6T+1qqkuRcTmyryd
b97+XXfEsNnTbJ7xj7zfv2RepKQ+naDmdbSwS+cseH3qfOoqNa9HhKpg4OEre/HK
1lgesZah4pqaAw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:03 2025 by rpki-client