
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
File: sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft (raw, json)
Hash identifier: CELFKV5ZCynKzVr/EjjNQDyTq7FjL1VODLiiPRraCbo=
Subject key identifier: DC:3B:9A:F7:9B:BE:94:37:50:03:90:F1:57:E9:47:DC:7A:63:07:DE
Authority key identifier: B1:04:0B:C2:51:FE:02:66:9F:57:FE:A5:72:74:3A:37:AC:FB:D5:57
Certificate issuer: /CN=b1040bc251fe02669f57fea572743a37acfbd557
Certificate serial: 01987A51BD4C7C4EA5CF3CFF683411B887EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
Manifest number: 07C0
Signing time: Tue 05 Aug 2025 13:00:33 +0000
Manifest this update: Tue 05 Aug 2025 13:00:33 +0000
Manifest next update: Wed 06 Aug 2025 13:00:33 +0000
Files and hashes: 1: sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl (hash: WOW6NWTvjF8sU9kOph5lbQZtoP/8ikz1oNziyWCTfjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:51:bd:4c:7c:4e:a5:cf:3c:ff:68:34:11:b8:87:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1040bc251fe02669f57fea572743a37acfbd557
Validity
Not Before: Aug 5 13:00:33 2025 GMT
Not After : Aug 6 13:00:33 2025 GMT
Subject: CN=dc3b9af79bbe9437500390f157e947dc7a6307de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:92:a4:28:f9:ed:62:38:b7:0f:e0:0b:a4:54:
16:cc:3f:fc:aa:e8:76:11:c1:61:84:7e:f8:85:1b:
c6:f4:2b:1f:80:a1:7f:5c:5f:5d:33:0a:86:47:d6:
07:60:e5:b6:2e:8b:6b:92:af:20:d7:47:60:9d:7d:
36:f2:f6:c3:1a:e0:72:1b:52:75:bb:6e:4a:02:22:
41:c6:af:0a:4c:d7:69:e5:79:e8:5c:40:84:1d:a0:
3a:32:d5:06:bb:91:58:5e:72:85:cd:80:d0:c2:92:
fc:78:94:29:fa:22:d5:48:78:a1:a3:4b:e7:09:bd:
81:84:d7:03:4b:3d:b9:46:e5:47:9d:66:d0:f5:57:
74:a0:8d:92:88:68:eb:a5:e5:34:37:33:56:96:8f:
75:bb:ad:e0:92:07:fe:18:50:2f:3f:42:3c:06:e0:
32:50:1b:6c:80:bd:55:48:aa:eb:5f:29:c6:00:77:
88:b2:8c:4d:2c:bb:e7:26:3a:6e:24:27:13:c7:24:
f4:4b:5c:e8:68:28:5a:72:2f:11:e3:76:b0:10:05:
d6:06:72:fe:54:78:c7:cb:ce:9f:cc:bd:4a:15:1b:
7c:d2:f8:ba:ab:ba:e3:9e:e2:df:8a:90:42:e4:1d:
25:91:29:63:98:a5:17:c6:7e:68:bf:c1:80:fe:bc:
8f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3B:9A:F7:9B:BE:94:37:50:03:90:F1:57:E9:47:DC:7A:63:07:DE
X509v3 Authority Key Identifier:
keyid:B1:04:0B:C2:51:FE:02:66:9F:57:FE:A5:72:74:3A:37:AC:FB:D5:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:82:f6:bb:07:0f:5e:54:c4:b4:66:6a:75:d0:ec:a1:7c:06:
33:d5:4c:85:d1:90:3b:92:cb:22:f3:0c:e3:61:55:08:5d:d9:
e5:24:ff:90:2a:de:89:dc:de:c8:66:9c:e4:7f:4b:65:4e:76:
bd:62:af:25:8c:32:57:02:66:12:5b:81:2c:2e:67:f4:71:24:
7f:c4:d8:af:74:45:b3:18:8d:23:6f:0b:b1:65:80:0e:7a:d2:
30:ad:e7:71:02:b7:6c:8e:16:68:8e:cc:c1:fd:39:12:89:19:
2e:c6:7f:17:22:d5:8e:5d:07:d7:1a:57:08:ef:1f:2a:57:18:
48:f9:30:76:f5:ee:2e:fc:5c:46:4c:04:f8:23:b6:0b:b0:00:
b2:30:71:b2:c9:03:b3:dd:08:e2:c8:1c:91:a6:6d:ce:4c:50:
5a:b7:56:62:85:de:68:06:f8:5e:69:29:a6:b2:32:e5:e6:30:
cc:94:e6:e5:a5:90:2b:39:e8:6a:12:df:e7:fe:4f:fc:37:da:
0f:30:38:c2:ab:21:45:4d:1a:51:7f:d9:00:e4:15:c0:48:e3:
7a:45:f4:f7:32:76:74:b5:89:2a:65:b2:48:a4:22:06:d0:69:
bf:04:55:50:8e:b2:56:06:41:8d:e0:e8:ee:bb:11:2a:d6:db:
06:23:a1:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6Ub1MfE6lzzz/aDQRuIfqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMDQwYmMyNTFmZTAyNjY5ZjU3ZmVhNTcyNzQzYTM3YWNm
YmQ1NTcwHhcNMjUwODA1MTMwMDMzWhcNMjUwODA2MTMwMDMzWjAzMTEwLwYDVQQD
EyhkYzNiOWFmNzliYmU5NDM3NTAwMzkwZjE1N2U5NDdkYzdhNjMwN2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZKkKPntYji3D+ALpFQWzD/8quh2
EcFhhH74hRvG9CsfgKF/XF9dMwqGR9YHYOW2Lotrkq8g10dgnX028vbDGuByG1J1
u25KAiJBxq8KTNdp5XnoXECEHaA6MtUGu5FYXnKFzYDQwpL8eJQp+iLVSHiho0vn
Cb2BhNcDSz25RuVHnWbQ9Vd0oI2SiGjrpeU0NzNWlo91u63gkgf+GFAvP0I8BuAy
UBtsgL1VSKrrXynGAHeIsoxNLLvnJjpuJCcTxyT0S1zoaChaci8R43awEAXWBnL+
VHjHy86fzL1KFRt80vi6q7rjnuLfipBC5B0lkSljmKUXxn5ov8GA/ryPrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNw7mvebvpQ3UAOQ8VfpR9x6YwfeMB8GA1UdIwQY
MBaAFLEEC8JR/gJmn1f+pXJ0Ojes+9VXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1FRTHdsSC1BbWFmVl82bGNuUTZONno3MVZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8xMzA1ZDctM2ExNi00NjIzLWI3NGUt
ZWVhZjIwZWJmOGVmLzEvc1FRTHdsSC1BbWFmVl82bGNuUTZONno3MVZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8xMzA1ZDctM2ExNi00NjIzLWI3NGUtZWVhZjIwZWJmOGVm
LzEvc1FRTHdsSC1BbWFmVl82bGNuUTZONno3MVZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEYL2uwcP
XlTEtGZqddDsoXwGM9VMhdGQO5LLIvMM42FVCF3Z5ST/kCreidzeyGac5H9LZU52
vWKvJYwyVwJmEluBLC5n9HEkf8TYr3RFsxiNI28LsWWADnrSMK3ncQK3bI4WaI7M
wf05EokZLsZ/FyLVjl0H1xpXCO8fKlcYSPkwdvXuLvxcRkwE+CO2C7AAsjBxsskD
s90I4sgckaZtzkxQWrdWYoXeaAb4XmkpprIy5eYwzJTm5aWQKznoahLf5/5P/Dfa
DzA4wqshRU0aUX/ZAOQVwEjjekX09zJ2dLWJKmWySKQiBtBpvwRVUI6yVgZBjeDo
7rsRKtbbBiOhCA==
-----END CERTIFICATE-----
Generated at Tue Aug 5 22:58:59 2025 by rpki-client