Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
File: S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft (raw, json)
Hash identifier: ZlVSNFynIyZTP0/5sZFZlfBBMMGJKrx9JkcUqgZV5ng=
Subject key identifier: D4:42:BB:E1:B6:38:30:49:60:12:80:7E:5E:BF:71:46:C0:D9:92:E6
Authority key identifier: 4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A
Certificate issuer: /CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a
Certificate serial: 019849656F48531E514C983C12581FAB4D42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
Manifest number: 12EE
Signing time: Sun 27 Jul 2025 01:00:41 +0000
Manifest this update: Sun 27 Jul 2025 01:00:41 +0000
Manifest next update: Mon 28 Jul 2025 01:00:41 +0000
Files and hashes: 1: S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl (hash: 9tT2EqGDdqGOoM2pIUxQnKvpDOHffvfv88GZBaGsjD8=)
2: v45LP4AF3yoZv3u_cLa6vnH8FvU.roa (hash: wIRAiX/f/YijUEe8NVGZoMtagmreVjKidBvqPjwb7Tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:6f:48:53:1e:51:4c:98:3c:12:58:1f:ab:4d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a
Validity
Not Before: Jul 27 01:00:41 2025 GMT
Not After : Jul 28 01:00:41 2025 GMT
Subject: CN=d442bbe1b63830496012807e5ebf7146c0d992e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:85:8b:a9:fb:53:49:f7:83:f1:7e:c6:8b:e9:
ee:bd:d2:35:1b:13:49:b9:ca:2e:3e:ea:7f:ef:34:
c3:46:e6:4a:df:e8:7d:c5:de:94:27:34:5a:b2:a6:
a8:87:8a:be:78:76:14:70:72:a2:76:dd:8c:8d:af:
63:0f:7d:f7:96:8e:21:74:ad:d3:d5:92:d9:cc:20:
22:f5:a4:7f:1a:d1:33:9a:d5:2c:93:1d:e2:42:0a:
12:87:66:8d:23:95:7f:09:84:d3:23:7f:a1:e8:8a:
5e:57:a0:7c:69:c3:f5:4d:7f:59:c5:a6:ea:86:5a:
9d:9e:c5:38:44:f4:f8:b0:4a:40:aa:a3:4a:00:fb:
59:a4:c8:76:f5:19:3c:39:e4:db:98:dc:fe:ab:3f:
c6:83:bf:5a:70:5e:cf:a1:d5:cf:a5:02:c0:f6:8b:
69:3e:da:3f:94:e1:b9:dc:55:5d:d7:55:14:4c:18:
86:81:7c:09:75:b7:25:04:84:e4:75:bb:40:0f:2d:
7a:f8:a2:d2:0f:52:4d:fa:89:13:ec:93:26:d9:3c:
f0:f1:6e:13:ea:7c:3b:b4:c1:ca:61:84:29:f3:07:
a6:38:20:cb:8b:0c:0a:2c:38:e5:0d:2a:a0:20:e2:
87:47:ec:47:ac:74:0c:14:f1:06:aa:ca:57:13:de:
6c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:42:BB:E1:B6:38:30:49:60:12:80:7E:5E:BF:71:46:C0:D9:92:E6
X509v3 Authority Key Identifier:
keyid:4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:32:22:a8:ec:56:be:4b:fa:2a:67:73:df:cb:f5:23:1c:53:
2c:09:bd:48:f9:4e:d9:81:dc:ce:6a:c5:4e:bc:0c:2c:59:99:
b3:25:94:ac:01:1b:a5:66:fc:f5:e2:25:66:4a:53:59:ee:7e:
bc:65:29:c1:64:da:3a:ad:b2:81:a4:f2:56:f4:cd:8a:e0:ce:
f5:b8:63:fe:bd:52:5c:f1:ba:b4:bb:83:c5:53:ef:2d:3c:35:
36:d5:9d:90:e6:f6:4e:42:da:9d:10:e6:9c:bf:cc:e4:ca:c6:
46:cb:20:fd:ef:ab:b9:ba:5c:cd:e7:fa:5c:1c:9a:c5:67:f5:
04:6f:26:dc:9f:af:98:96:7d:4a:10:f2:25:d5:04:c7:45:69:
4f:8e:58:87:e9:31:a7:8a:df:e0:9c:b1:93:1e:09:3f:64:3d:
66:b2:a4:d8:71:ff:c4:a2:0e:32:bb:c6:54:76:38:b3:23:43:
1b:9a:b9:26:f9:6f:d9:54:ce:ac:6b:5e:e7:53:9b:c1:c1:7b:
d0:d7:9d:a2:8f:ab:54:13:55:e7:cd:de:f4:49:f7:c5:85:67:
09:ad:b5:11:50:ab:34:bd:fe:0f:f9:c3:82:64:63:97:6f:b3:
46:ec:fa:62:03:4c:da:d8:86:3a:ba:fd:05:ce:5d:2f:c4:4d:
d6:9f:1b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:21:29 2025 by rpki-client