Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
File: S_xaKUEPH_z03ipacFj1FiCzC3k.mft (raw, json)
Hash identifier: x0fYBHbz9/0wY2r8B7WOK+TiRt/o6iLToyxs+YRcqs8=
Subject key identifier: 74:E4:98:AB:BE:ED:7F:0E:5E:F4:A8:80:0D:5B:95:FA:D3:FE:E9:D6
Authority key identifier: 4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79
Certificate issuer: /CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79
Certificate serial: 01976884FEA74F3B0A2D0F035BFC009B8A02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
Manifest number: 0D3F
Signing time: Fri 13 Jun 2025 09:00:35 +0000
Manifest this update: Fri 13 Jun 2025 09:00:35 +0000
Manifest next update: Sat 14 Jun 2025 09:00:35 +0000
Files and hashes: 1: S_xaKUEPH_z03ipacFj1FiCzC3k.crl (hash: 8J4wEA//xb6gxjDa7+RVfVc441T9oMM2PwkP3qPWySQ=)
2: bgx026u65bEUIofoNprJyhzn_S4.roa (hash: mkA02/DFrwmq5MSNIOugSkJaE1Y0Xy5Utto0dixWmsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:fe:a7:4f:3b:0a:2d:0f:03:5b:fc:00:9b:8a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79
Validity
Not Before: Jun 13 09:00:35 2025 GMT
Not After : Jun 14 09:00:35 2025 GMT
Subject: CN=74e498abbeed7f0e5ef4a8800d5b95fad3fee9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:35:69:23:74:d8:c2:3b:0f:d5:49:39:57:56:
2d:8d:18:f3:af:1e:88:33:10:37:c9:0d:1b:2b:b7:
53:04:44:30:e4:33:a8:fa:d4:84:73:90:69:29:f6:
96:3a:fd:60:3a:b2:86:17:92:80:7e:6b:5d:a9:f2:
4e:e3:38:81:a4:7c:49:59:f6:d2:a1:8f:50:98:55:
da:55:9a:80:58:52:29:71:b5:0c:64:a0:2a:1e:93:
50:b5:20:5e:eb:ee:de:4e:1b:3f:bb:47:d3:f8:dd:
76:ef:6e:f0:e7:db:60:46:60:c5:53:e1:b6:2e:a1:
a4:71:d4:62:39:57:64:4f:36:a1:01:24:5f:b9:d0:
ed:28:53:0e:3c:86:59:eb:ec:77:69:07:b8:f4:fd:
fc:ab:c1:05:65:82:2b:90:15:5d:93:19:fe:5c:2d:
a0:37:e1:5d:4e:52:fd:c4:93:af:5f:3a:49:99:16:
53:09:40:8f:c2:01:63:61:b8:41:87:7f:f5:d5:3a:
e7:6e:36:12:6b:15:bc:48:de:4c:9e:4b:16:cc:9c:
af:ee:5a:4c:ea:4b:c2:1d:74:a9:c8:bb:b0:a0:56:
6d:b2:bc:f6:3e:a5:1b:4e:2c:e0:8c:0e:40:be:88:
06:40:a4:3a:97:e7:75:7b:42:ea:c0:32:2f:17:1f:
81:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E4:98:AB:BE:ED:7F:0E:5E:F4:A8:80:0D:5B:95:FA:D3:FE:E9:D6
X509v3 Authority Key Identifier:
keyid:4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:73:f4:b3:7e:64:f3:17:c2:05:b8:f9:c3:d6:9b:f9:19:21:
63:05:c2:1b:46:c0:dd:cb:28:47:f1:a0:33:a6:0e:65:26:a4:
43:18:e7:01:25:23:34:c3:57:23:dd:85:e8:2b:b8:62:dc:19:
c7:44:99:f5:91:f9:bc:67:7f:de:8f:98:01:37:b1:fc:97:1c:
71:1c:cc:c5:68:b1:bb:06:e6:21:4a:57:b9:c7:cf:3a:ad:33:
72:aa:10:bc:35:36:1f:9e:80:01:b5:75:40:74:2f:75:65:a4:
85:de:68:64:8d:dc:80:0c:cc:4c:97:ba:ff:c9:04:bd:98:4e:
92:81:2c:c1:8a:3a:50:ab:13:f5:1c:9f:c6:35:f2:83:b2:bc:
7d:c7:29:f6:f7:41:61:fe:d8:14:a2:c0:c6:4b:66:b0:89:8f:
08:af:da:7f:30:cf:47:1c:9a:35:7b:e1:5d:9c:84:40:9d:28:
22:5d:01:ee:b5:83:dc:8c:3c:50:1d:54:10:f5:9d:67:86:b4:
fb:e5:de:c7:09:42:b3:80:87:e9:ac:8e:31:11:2a:e6:6b:e5:
b8:94:0a:4b:7a:9a:03:42:0f:ec:4c:79:c3:3e:1f:c8:84:97:
46:22:7a:47:6d:85:37:30:13:20:be:af:dc:ff:50:e0:20:93:
b9:3d:bb:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdohP6nTzsKLQ8DW/wAm4oCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZmM1YTI5NDEwZjFmZmNmNGRlMmE1YTcwNThmNTE2MjBi
MzBiNzkwHhcNMjUwNjEzMDkwMDM1WhcNMjUwNjE0MDkwMDM1WjAzMTEwLwYDVQQD
Eyg3NGU0OThhYmJlZWQ3ZjBlNWVmNGE4ODAwZDViOTVmYWQzZmVlOWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDVpI3TYwjsP1Uk5V1YtjRjzrx6I
MxA3yQ0bK7dTBEQw5DOo+tSEc5BpKfaWOv1gOrKGF5KAfmtdqfJO4ziBpHxJWfbS
oY9QmFXaVZqAWFIpcbUMZKAqHpNQtSBe6+7eThs/u0fT+N12727w59tgRmDFU+G2
LqGkcdRiOVdkTzahASRfudDtKFMOPIZZ6+x3aQe49P38q8EFZYIrkBVdkxn+XC2g
N+FdTlL9xJOvXzpJmRZTCUCPwgFjYbhBh3/11TrnbjYSaxW8SN5MnksWzJyv7lpM
6kvCHXSpyLuwoFZtsrz2PqUbTizgjA5AvogGQKQ6l+d1e0LqwDIvFx+BWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTkmKu+7X8OXvSogA1blfrT/unWMB8GA1UdIwQY
MBaAFEv8WilBDx/89N4qWnBY9RYgswt5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU194YUtVRVBIX3owM2lwYWNGajFGaUN6QzNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zYjJiZmQtNjBlYi00Y2JmLTlmN2Yt
MTM2MjU3ZTMwNzZlLzEvU194YUtVRVBIX3owM2lwYWNGajFGaUN6QzNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8zYjJiZmQtNjBlYi00Y2JmLTlmN2YtMTM2MjU3ZTMwNzZl
LzEvU194YUtVRVBIX3owM2lwYWNGajFGaUN6QzNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIHP0s35k
8xfCBbj5w9ab+RkhYwXCG0bA3csoR/GgM6YOZSakQxjnASUjNMNXI92F6Cu4YtwZ
x0SZ9ZH5vGd/3o+YATex/JcccRzMxWixuwbmIUpXucfPOq0zcqoQvDU2H56AAbV1
QHQvdWWkhd5oZI3cgAzMTJe6/8kEvZhOkoEswYo6UKsT9RyfxjXyg7K8fccp9vdB
Yf7YFKLAxktmsImPCK/afzDPRxyaNXvhXZyEQJ0oIl0B7rWD3Iw8UB1UEPWdZ4a0
++XexwlCs4CH6ayOMREq5mvluJQKS3qaA0IP7Ex5wz4fyISXRiJ6R22FNzATIL6v
3P9Q4CCTuT274Q==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:45 2025 by rpki-client