Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
File: rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft (raw, json)
Hash identifier: dLN8vi2EEb0E34O/WNfF7In6Jf/Fc6ZcmX0LDEpowTU=
Subject key identifier: 39:54:76:57:CA:B5:BD:4F:D2:41:A4:E5:D9:71:43:83:94:70:76:52
Authority key identifier: AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
Certificate issuer: /CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Certificate serial: 01977978C583A490CB7B3F89F4CC26848344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
Manifest number: 0740
Signing time: Mon 16 Jun 2025 16:00:47 +0000
Manifest this update: Mon 16 Jun 2025 16:00:47 +0000
Manifest next update: Tue 17 Jun 2025 16:00:47 +0000
Files and hashes: 1: rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl (hash: 5361nek53iFB0pWWny5k5SoaLvkOi6YA7Q4cgPu7KO0=)
2: saC2CSGHzjfoqz_AyeGRfbO_Z4c.roa (hash: evXXOhKr0k/9XMT8MxumeZizzHV0YoG5/EuRYGW5sl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:78:c5:83:a4:90:cb:7b:3f:89:f4:cc:26:84:83:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Validity
Not Before: Jun 16 16:00:47 2025 GMT
Not After : Jun 17 16:00:47 2025 GMT
Subject: CN=39547657cab5bd4fd241a4e5d971438394707652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f5:2f:d0:5b:13:a3:81:07:d4:a5:d5:16:0f:
2e:5d:a9:14:1e:37:ec:2a:f8:7c:58:af:0f:cd:6b:
4d:a5:03:13:a5:8d:7e:53:3e:79:47:11:62:6d:87:
75:b6:49:9e:85:cb:0b:c2:1d:2c:d5:3d:88:59:95:
05:e3:06:fa:33:bf:b4:c4:db:cc:48:a5:f2:30:47:
a7:4d:b2:75:f1:a2:7c:5f:8d:2f:e2:83:d6:05:20:
44:29:bc:5b:7b:0e:cf:f4:38:bf:6d:16:ff:64:43:
3d:a6:09:81:42:e9:44:85:d1:6d:84:d0:48:7f:ca:
f4:e4:bd:d3:95:e7:cb:e7:65:de:b9:29:bb:b7:d9:
3a:4b:38:1b:91:d4:ca:2a:1c:ff:11:6a:de:29:05:
4e:b7:f3:3b:c1:32:c0:0e:97:ea:ab:c1:ef:9b:d9:
26:fd:65:88:98:08:83:e9:a8:ad:69:78:e9:27:5d:
dc:75:3f:a2:fe:a7:d1:5c:09:a7:eb:49:a1:98:0f:
15:ec:f3:cb:cc:3f:5c:0c:c6:41:02:67:63:31:ed:
b6:dd:90:0c:ef:f4:eb:d5:35:01:ed:42:54:d1:d1:
ec:55:89:4b:62:81:1c:f0:8d:be:b8:83:ea:96:c8:
3e:8e:3e:ac:40:f9:42:55:aa:d0:e2:51:f7:86:f8:
1d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:54:76:57:CA:B5:BD:4F:D2:41:A4:E5:D9:71:43:83:94:70:76:52
X509v3 Authority Key Identifier:
keyid:AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ed:bd:8f:d5:34:5e:0d:cc:e9:e6:b5:d2:be:c7:37:b6:c8:
3c:0a:29:32:31:fb:e0:54:52:b1:8e:4b:b7:b1:b5:c1:13:52:
f8:1c:af:db:af:68:0f:bd:e2:55:7b:26:1a:3b:68:af:00:1f:
92:4e:5c:d0:a0:bb:cc:58:5e:f5:52:84:bc:75:ba:83:85:a9:
eb:99:3b:42:0a:ab:55:b2:e8:3e:60:93:94:3b:03:04:52:ac:
aa:2a:27:64:b6:09:39:62:09:d3:9b:90:41:71:71:77:2f:ad:
d9:03:bb:83:be:bf:18:dd:08:b7:11:9b:ea:e7:30:d2:c7:a5:
b6:fd:2d:17:1b:fe:ef:b9:7c:8b:59:84:c3:2c:ea:93:c1:c3:
b4:3a:52:02:25:4a:13:78:13:21:8c:b9:ef:d9:39:9d:7b:1c:
c5:15:ea:d1:29:b9:ac:13:5e:7a:ec:d2:65:d2:95:30:24:19:
d8:c0:bd:6d:7f:5f:ea:bf:e1:37:db:ca:5d:04:46:ed:a3:1e:
fd:7b:ec:19:3d:48:0c:43:87:49:3e:9d:c5:02:9c:8c:53:b5:
6a:a7:1e:26:4b:2f:f8:4a:40:f3:34:1b:97:52:8d:41:c2:9d:
f8:07:23:e7:d0:04:b6:a7:7d:d4:6a:12:1a:d8:54:d7:60:16:
ab:9f:45:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd5eMWDpJDLez+J9MwmhINEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMjQ2NGVjYzk0NmYyOTJlNDA0ZjJjMzUxOTIyZWNmNGM1
OTBmZDgwHhcNMjUwNjE2MTYwMDQ3WhcNMjUwNjE3MTYwMDQ3WjAzMTEwLwYDVQQD
EygzOTU0NzY1N2NhYjViZDRmZDI0MWE0ZTVkOTcxNDM4Mzk0NzA3NjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/Uv0FsTo4EH1KXVFg8uXakUHjfs
Kvh8WK8PzWtNpQMTpY1+Uz55RxFibYd1tkmehcsLwh0s1T2IWZUF4wb6M7+0xNvM
SKXyMEenTbJ18aJ8X40v4oPWBSBEKbxbew7P9Di/bRb/ZEM9pgmBQulEhdFthNBI
f8r05L3TlefL52XeuSm7t9k6SzgbkdTKKhz/EWreKQVOt/M7wTLADpfqq8Hvm9km
/WWImAiD6aitaXjpJ13cdT+i/qfRXAmn60mhmA8V7PPLzD9cDMZBAmdjMe223ZAM
7/Tr1TUB7UJU0dHsVYlLYoEc8I2+uIPqlsg+jj6sQPlCVarQ4lH3hvgdQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlUdlfKtb1P0kGk5dlxQ4OUcHZSMB8GA1UdIwQY
MBaAFK0kZOzJRvKS5ATyw1GSLs9MWQ/YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclNSazdNbEc4cExrQlBMRFVaSXV6MHhaRDlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iMjY4NTktOWIxNC00NTBmLWJiODUt
NTkyZWQ3Mzc2MWNhLzEvclNSazdNbEc4cExrQlBMRFVaSXV6MHhaRDlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9iMjY4NTktOWIxNC00NTBmLWJiODUtNTkyZWQ3Mzc2MWNh
LzEvclNSazdNbEc4cExrQlBMRFVaSXV6MHhaRDlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo+29j9U0
Xg3M6ea10r7HN7bIPAopMjH74FRSsY5Lt7G1wRNS+Byv269oD73iVXsmGjtorwAf
kk5c0KC7zFhe9VKEvHW6g4Wp65k7QgqrVbLoPmCTlDsDBFKsqionZLYJOWIJ05uQ
QXFxdy+t2QO7g76/GN0ItxGb6ucw0seltv0tFxv+77l8i1mEwyzqk8HDtDpSAiVK
E3gTIYy579k5nXscxRXq0Sm5rBNeeuzSZdKVMCQZ2MC9bX9f6r/hN9vKXQRG7aMe
/XvsGT1IDEOHST6dxQKcjFO1aqceJksv+EpA8zQbl1KNQcKd+Acj59AEtqd91GoS
GthU12AWq59FuA==
-----END CERTIFICATE-----
Generated at Tue Jun 17 01:26:17 2025 by rpki-client