Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
File: SxEEihpJFuExuM4Iji1v5OXF49s.mft (raw, json)
Hash identifier: leCSfmT/k6G5RUtY/kPC3KiiyUXwxWgh44a5W5+iOnY=
Subject key identifier: 96:8E:3A:AD:F9:8A:0D:DB:5E:4D:52:2A:C8:44:3E:18:2A:85:0C:5F
Authority key identifier: 4B:11:04:8A:1A:49:16:E1:31:B8:CE:08:8E:2D:6F:E4:E5:C5:E3:DB
Certificate issuer: /CN=4b11048a1a4916e131b8ce088e2d6fe4e5c5e3db
Certificate serial: 0197767752EDF71EEA85964B6A54A7BD8B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
Manifest number: 01D2
Signing time: Mon 16 Jun 2025 02:00:20 +0000
Manifest this update: Mon 16 Jun 2025 02:00:20 +0000
Manifest next update: Tue 17 Jun 2025 02:00:20 +0000
Files and hashes: 1: SxEEihpJFuExuM4Iji1v5OXF49s.crl (hash: lLMFKdhI0BfdAvWHSSTz3Qof76oNpa80A+eo9Mh3n6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:77:52:ed:f7:1e:ea:85:96:4b:6a:54:a7:bd:8b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b11048a1a4916e131b8ce088e2d6fe4e5c5e3db
Validity
Not Before: Jun 16 02:00:20 2025 GMT
Not After : Jun 17 02:00:20 2025 GMT
Subject: CN=968e3aadf98a0ddb5e4d522ac8443e182a850c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e5:6a:4d:53:e4:68:8a:bd:26:e7:98:70:6c:
bc:5a:d7:b1:88:0d:08:36:f5:79:38:5e:01:61:09:
0a:43:84:a4:13:6e:45:ff:ec:e6:31:3d:bb:05:89:
48:9a:f5:65:90:38:5f:5f:5f:2b:20:7d:bd:45:af:
64:27:7c:0b:b8:20:24:f3:b2:f3:b8:c9:c2:e0:e0:
f7:fc:c5:d8:66:2e:9e:88:b7:9e:ac:85:2a:76:0e:
d7:4f:a7:6e:22:f7:fb:cd:e2:92:b7:9b:ce:c8:6a:
1b:0c:28:be:3b:45:e6:54:df:c0:53:67:8f:51:fb:
4e:16:92:04:cd:19:ee:e6:98:42:2e:17:03:b6:d2:
8a:76:b5:9a:7e:22:37:12:a4:85:3b:3e:ad:1a:ab:
e3:45:74:82:f7:5f:d1:eb:bf:24:c4:3b:cf:34:c9:
c1:e9:81:5c:95:9d:b9:aa:59:7f:7e:bb:7d:a7:df:
f1:1d:11:86:ec:7b:2f:17:03:db:55:b2:ec:1a:ae:
95:5e:2b:64:6e:c0:a3:76:53:94:01:fa:a3:75:71:
4c:6d:31:3a:fb:52:f5:32:73:2b:6a:cd:cc:a1:97:
4a:6b:a8:8c:1d:8f:7c:16:3c:68:fa:57:78:db:2a:
64:21:72:60:10:fa:d0:8f:ee:8c:da:aa:78:2a:6e:
29:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8E:3A:AD:F9:8A:0D:DB:5E:4D:52:2A:C8:44:3E:18:2A:85:0C:5F
X509v3 Authority Key Identifier:
keyid:4B:11:04:8A:1A:49:16:E1:31:B8:CE:08:8E:2D:6F:E4:E5:C5:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:57:75:39:5c:0e:19:ee:4f:cc:18:a8:a1:53:8f:b3:36:50:
48:70:4b:7e:5f:06:fb:37:9d:69:95:e2:86:08:88:06:79:83:
b2:c2:5d:04:aa:1b:9b:f8:9e:3c:90:b7:62:ee:20:2a:59:e1:
cd:38:d7:b7:b0:4b:6d:f1:70:a9:84:f0:b3:25:72:9a:b8:92:
9d:a7:10:82:2a:ea:50:45:1f:a7:f1:a8:e4:fe:cd:b0:41:9d:
32:18:3e:10:88:82:4e:98:95:af:b8:77:18:a0:0f:62:c4:6f:
4d:e4:ba:6b:e6:c5:c6:c4:d7:21:7a:33:1f:1e:b9:19:32:50:
52:f2:32:cd:f3:43:84:0c:19:6d:1f:30:c7:06:57:2e:bc:ff:
ca:fc:49:1e:c0:ef:a1:59:d4:ea:da:3f:70:8c:e0:bc:9e:67:
17:ee:ce:6c:5a:57:a9:48:46:7d:00:47:96:e3:7f:df:4f:b6:
5b:4d:fc:aa:6f:30:81:c8:2e:5f:7d:ae:f1:69:20:47:21:14:
31:c3:35:06:6f:50:16:2e:a6:5f:77:31:a6:cc:4e:39:f0:a3:
6c:43:de:da:ac:e9:5d:2e:6b:a5:64:01:0e:19:8d:a3:57:76:
a7:63:6e:29:da:14:3b:73:b3:d0:6c:01:8d:11:5c:8c:fb:8a:
03:34:da:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd2d1Lt9x7qhZZLalSnvYt8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMTEwNDhhMWE0OTE2ZTEzMWI4Y2UwODhlMmQ2ZmU0ZTVj
NWUzZGIwHhcNMjUwNjE2MDIwMDIwWhcNMjUwNjE3MDIwMDIwWjAzMTEwLwYDVQQD
Eyg5NjhlM2FhZGY5OGEwZGRiNWU0ZDUyMmFjODQ0M2UxODJhODUwYzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+VqTVPkaIq9JueYcGy8WtexiA0I
NvV5OF4BYQkKQ4SkE25F/+zmMT27BYlImvVlkDhfX18rIH29Ra9kJ3wLuCAk87Lz
uMnC4OD3/MXYZi6eiLeerIUqdg7XT6duIvf7zeKSt5vOyGobDCi+O0XmVN/AU2eP
UftOFpIEzRnu5phCLhcDttKKdrWafiI3EqSFOz6tGqvjRXSC91/R678kxDvPNMnB
6YFclZ25qll/frt9p9/xHRGG7HsvFwPbVbLsGq6VXitkbsCjdlOUAfqjdXFMbTE6
+1L1MnMras3MoZdKa6iMHY98Fjxo+ld42ypkIXJgEPrQj+6M2qp4Km4p+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJaOOq35ig3bXk1SKshEPhgqhQxfMB8GA1UdIwQY
MBaAFEsRBIoaSRbhMbjOCI4tb+TlxePbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3hFRWlocEpGdUV4dU00SWppMXY1T1hGNDlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kM2EyMjgtZmM0Zi00MGIyLTg4YjIt
ZTQ4NDYxMWE5NjIxLzEvU3hFRWlocEpGdUV4dU00SWppMXY1T1hGNDlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9kM2EyMjgtZmM0Zi00MGIyLTg4YjItZTQ4NDYxMWE5NjIx
LzEvU3hFRWlocEpGdUV4dU00SWppMXY1T1hGNDlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl1d1OVwO
Ge5PzBiooVOPszZQSHBLfl8G+zedaZXihgiIBnmDssJdBKobm/iePJC3Yu4gKlnh
zTjXt7BLbfFwqYTwsyVymriSnacQgirqUEUfp/Go5P7NsEGdMhg+EIiCTpiVr7h3
GKAPYsRvTeS6a+bFxsTXIXozHx65GTJQUvIyzfNDhAwZbR8wxwZXLrz/yvxJHsDv
oVnU6to/cIzgvJ5nF+7ObFpXqUhGfQBHluN/30+2W038qm8wgcguX32u8WkgRyEU
McM1Bm9QFi6mX3cxpsxOOfCjbEPe2qzpXS5rpWQBDhmNo1d2p2NuKdoUO3Oz0GwB
jRFcjPuKAzTa+g==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:11:08 2025 by rpki-client