Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
File: S-zMnRp26RRpy2OxK_cl1966-xs.mft (raw, json)
Hash identifier: V2X3XAAlNs0ZoMnWkSavL/AlYOh6aGeeVz9Sn87Et1I=
Subject key identifier: 4B:F7:C5:3A:7D:87:93:C4:95:6C:EC:72:B7:D6:5E:BA:FE:90:85:4B
Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
Certificate issuer: /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Certificate serial: 01984106A1309B66AA2C9F24885FABF48CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
Manifest number: 0C04
Signing time: Fri 25 Jul 2025 10:00:10 +0000
Manifest this update: Fri 25 Jul 2025 10:00:10 +0000
Manifest next update: Sat 26 Jul 2025 10:00:10 +0000
Files and hashes: 1: 7fSgZ-LQDYvguJzdZ14V0z0FUCE.roa (hash: bUjKLDflZP/Ln3EKUyE+zKMongCT5xOF2uDWHet5S9I=)
2: DiRUXj-wMeKTJD3aUfG_fU2alsE.roa (hash: C8nsHrwSkn8Gd1JmzSYSfUzGZSwYITwrUGRtmf3pI4s=)
3: Ru-jgtHHtk22zU2Iz9obbyyNqtA.roa (hash: JK2Fg/eBJyup1fiSh8xdKaGSDAo/evkcOv83dZLvh1k=)
4: S-zMnRp26RRpy2OxK_cl1966-xs.crl (hash: hFtKqdE+ajvU1IhOKWzNrDAzaZ6RTBd9vKdfJvPhnSg=)
5: WzBH8kAZVhitfGs3LpWEVIaX2DU.roa (hash: yyE311L3mhjCKLl6ozIj/e45U2t4pgo+mFiZj5vWZ9E=)
6: vTYkTnZMEaqfhCdiY5ia6c9viZw.roa (hash: m5F7OL9Eo2LVurzs6A9iXzsVS70f86h9K1zL5V462Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:06:a1:30:9b:66:aa:2c:9f:24:88:5f:ab:f4:8c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Validity
Not Before: Jul 25 10:00:10 2025 GMT
Not After : Jul 26 10:00:10 2025 GMT
Subject: CN=4bf7c53a7d8793c4956cec72b7d65ebafe90854b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3e:67:50:a4:fb:97:00:65:e1:10:d4:e1:86:
85:ac:5e:50:01:77:74:93:fa:f9:e4:79:8f:d5:b8:
b7:b9:2c:00:b7:3a:67:1b:51:4d:84:4c:93:e1:d0:
80:3f:14:0a:cb:15:9e:46:c7:b0:aa:b7:86:78:66:
81:6d:ef:7b:4d:e6:b2:e0:c4:3d:41:7d:43:95:f5:
7d:1e:e0:56:9d:ff:52:6d:e8:7f:4a:26:4d:ea:67:
ae:02:f9:2f:53:b5:03:70:c4:9a:6b:cf:65:b9:74:
7e:93:77:67:19:fc:06:f0:d0:2f:58:5e:27:5e:7f:
ac:ee:eb:42:d5:c0:e0:b9:70:20:04:b3:50:2e:75:
3f:04:52:e3:41:29:d8:5c:d4:c8:59:08:b2:41:72:
dc:e0:1d:21:74:42:4a:6b:33:42:58:09:81:62:08:
08:b3:47:ff:2c:61:b7:19:cc:39:9b:8f:52:8a:a3:
20:ca:c7:cb:95:e0:35:9f:7c:4c:7d:d4:3d:4f:6b:
6d:7a:30:d9:86:d0:54:65:56:df:9f:86:c1:b0:fb:
95:e4:ae:75:94:0c:3f:9d:2f:f7:bc:2e:14:02:fc:
e8:1b:87:56:08:ed:e3:0b:3f:92:43:6d:ea:b3:19:
03:10:82:42:4a:82:9f:cd:86:a0:f0:15:68:fe:f0:
6f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F7:C5:3A:7D:87:93:C4:95:6C:EC:72:B7:D6:5E:BA:FE:90:85:4B
X509v3 Authority Key Identifier:
keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:58:aa:2b:14:17:83:88:7f:2a:d2:6c:89:05:2e:9e:49:d4:
d8:1c:e0:1b:bb:9d:88:6e:3d:20:30:ea:a2:e9:b9:f1:cb:91:
29:8b:c0:c0:23:40:80:b9:a9:f0:90:ae:3e:41:f6:9a:e8:04:
35:81:58:06:ac:49:c0:e4:a4:1a:7a:fa:0a:72:82:23:77:bc:
0b:3d:cb:9e:e6:fd:39:8a:86:eb:75:45:c8:72:70:c7:c3:e7:
96:7b:fa:a0:76:6c:ab:94:d4:48:ff:4a:cb:4f:ff:91:0c:f0:
0e:22:13:8e:ef:89:3e:20:8f:f1:53:9e:f7:fb:98:0f:e5:ae:
0f:9d:36:f8:43:47:c4:30:02:c5:19:94:ed:0c:2e:3f:5b:d3:
15:bb:8f:5d:41:c8:9e:9e:a9:77:71:de:fb:32:d7:47:97:d0:
58:cc:00:72:5b:5a:4a:b8:29:22:e9:00:49:83:73:ce:30:3f:
ff:1a:a8:1b:1f:d2:76:d7:ab:26:b1:b9:3c:29:22:bd:0a:03:
76:5f:c0:cc:33:ed:03:04:5b:ce:c6:1e:f9:af:c7:bd:27:94:
e1:01:95:3a:4c:f9:fd:e4:86:ff:a3:4a:c9:a8:79:43:0f:22:
6d:0a:be:7e:a8:71:61:c6:78:8c:ce:30:8f:df:6a:fc:ba:b7:
09:50:aa:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:45:26 2025 by rpki-client