Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
File: S9ReWCBqG51Z7d-o-YizJxe_nGs.mft (raw, json)
Hash identifier: EgI8KFiEvCYKIcAUQYIcq9NJa6sTUako6ycaV5KpreU=
Subject key identifier: F1:82:02:E4:D2:B8:25:B3:6E:30:AA:C0:23:92:CA:C2:18:11:33:13
Authority key identifier: 4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
Certificate issuer: /CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Certificate serial: 01984BF84A2AF75625375C0FE992C04F24B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
Manifest number: 0743
Signing time: Sun 27 Jul 2025 13:00:19 +0000
Manifest this update: Sun 27 Jul 2025 13:00:19 +0000
Manifest next update: Mon 28 Jul 2025 13:00:19 +0000
Files and hashes: 1: S9ReWCBqG51Z7d-o-YizJxe_nGs.crl (hash: n+8RlXsRoy+SJsmjBCDrikt807q0BtFBKqokOhPnHuk=)
2: uNPxSzoBaXvBOJFQn-2SS8eLdrE.roa (hash: aQ7mvpV3ivI5FkoVAB6sSeBflcpGk3YWeApRgwYyH1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:f8:4a:2a:f7:56:25:37:5c:0f:e9:92:c0:4f:24:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Validity
Not Before: Jul 27 13:00:19 2025 GMT
Not After : Jul 28 13:00:19 2025 GMT
Subject: CN=f18202e4d2b825b36e30aac02392cac218113313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:01:c3:45:63:d7:65:a9:08:88:21:8b:41:af:
8c:4a:90:79:b4:82:ea:e9:5f:e0:b9:ca:8e:23:58:
03:e5:b1:21:3e:1b:fc:0b:47:3f:65:1f:27:bd:a8:
ff:13:f3:a6:ef:f5:19:55:d0:b7:8d:34:51:4b:22:
4b:24:b6:db:c6:00:ef:ce:c3:14:be:5b:79:38:ed:
17:3c:fa:50:b6:6b:b7:b1:2c:0a:63:45:59:6b:4e:
af:b5:fe:df:ad:58:4b:bf:72:8e:97:07:d9:9f:39:
41:5c:e0:45:72:81:f3:20:03:99:89:6d:1c:13:e5:
76:f1:18:61:77:5d:12:44:89:18:d5:77:89:ec:4e:
2c:d0:1f:9a:1d:70:85:ab:d4:2f:cd:bd:d6:cb:bf:
8a:44:fa:e9:b2:1b:b9:d4:85:bc:83:0d:65:fb:55:
ac:43:15:17:73:35:84:9e:1f:72:ce:1f:44:7e:fd:
f8:fb:ab:02:1a:0b:fe:9e:07:de:bd:96:ed:e7:7f:
8e:f9:41:96:ee:06:b3:4e:1f:ac:d9:fe:79:d9:ba:
ab:72:36:a0:5c:d5:81:a9:2c:04:fc:2a:90:83:6c:
f1:39:12:69:97:89:2d:bc:e7:ee:2c:4a:8c:69:43:
94:69:da:78:14:a6:80:34:3e:c4:82:04:b3:12:18:
69:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:82:02:E4:D2:B8:25:B3:6E:30:AA:C0:23:92:CA:C2:18:11:33:13
X509v3 Authority Key Identifier:
keyid:4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d7:67:f2:b6:48:dd:cf:e3:7a:55:99:1e:79:46:33:10:80:
de:cd:bf:40:e9:23:3a:37:67:b5:f3:f6:a9:d7:c4:24:86:24:
36:24:07:48:7c:04:f3:ab:b5:42:81:84:a1:e2:5a:a6:49:e8:
be:5c:17:8d:ae:f1:55:e4:b5:51:33:19:63:4a:38:23:7e:5e:
aa:5d:bf:fe:a0:c8:68:9f:42:98:cf:52:ab:e1:6a:60:2a:ad:
e5:9a:ce:cb:89:68:5a:4d:37:b9:21:ae:66:0b:9d:3d:1b:a7:
6f:55:e7:4a:2a:47:e7:44:98:0c:cb:f4:4e:96:1c:e4:0c:40:
cf:73:21:25:f7:b4:f8:66:6c:f7:40:98:c7:a5:87:de:1c:e3:
ea:fb:45:bd:2e:89:a4:cc:f8:4a:0b:05:e5:17:86:d8:4e:7b:
98:4f:50:4c:67:cf:f1:0c:a0:c1:96:f9:5d:1a:57:8b:a1:00:
81:4f:48:5a:56:86:cb:56:38:3a:c5:db:14:67:d9:03:c0:5f:
8c:9d:cd:36:ee:72:9d:06:63:6e:f2:5e:94:a9:77:78:15:6d:
5b:80:53:44:3c:69:f4:a4:b5:3b:79:e3:e0:f9:e9:dc:16:00:
16:5a:8d:f1:3c:6c:e1:07:62:85:c3:36:c3:d1:7d:ee:96:58:
b8:32:bc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 18:07:39 2025 by rpki-client