Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
File: S2jh-6e0SntmYjayElPX1jYtDYM.mft (raw, json)
Hash identifier: Bz4Z9fYh5Cp0wwNf6q2IHeVzTlS0dFWiw0523S3CRXw=
Subject key identifier: 90:F4:E0:4A:88:DA:63:67:DF:7E:01:89:52:41:54:60:E0:07:A9:6F
Authority key identifier: 4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
Certificate issuer: /CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Certificate serial: 01984AAF16865EF419F154C1FABBEE5861E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
Manifest number: 0346
Signing time: Sun 27 Jul 2025 07:00:45 +0000
Manifest this update: Sun 27 Jul 2025 07:00:45 +0000
Manifest next update: Mon 28 Jul 2025 07:00:45 +0000
Files and hashes: 1: A3eZlYEypGjwef6ovVTvAMEG2Sc.roa (hash: itiiU42XBZajUxpH3eQ5BL8/j+cYwxjPvYG7bJxrjyA=)
2: S2jh-6e0SntmYjayElPX1jYtDYM.crl (hash: VbQ2XXPR+ap3UI7H3gvgrBStvpan4jHJyogdFXhdHMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:16:86:5e:f4:19:f1:54:c1:fa:bb:ee:58:61:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Validity
Not Before: Jul 27 07:00:45 2025 GMT
Not After : Jul 28 07:00:45 2025 GMT
Subject: CN=90f4e04a88da6367df7e018952415460e007a96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fb:87:88:e1:cc:63:05:2f:1e:36:26:fa:73:
aa:72:2f:79:bb:ee:28:ba:85:fd:4a:99:c9:c7:3b:
60:60:3b:81:b5:37:7c:67:4b:f0:e6:aa:d2:47:84:
fb:d1:73:4a:22:74:4e:b2:b2:a2:43:d1:5d:b4:3b:
d4:b2:98:c1:de:c3:3b:ad:02:8d:27:a3:ca:92:56:
1b:ff:62:92:ce:8d:ed:74:62:f5:04:95:10:83:72:
86:ad:d1:3f:80:68:52:a4:0f:ec:bc:d3:8f:b6:06:
58:95:6e:8b:bb:ed:26:26:c6:f0:53:d8:ab:d2:42:
16:17:29:4a:77:33:82:c8:b2:f3:19:c5:e4:16:d7:
d1:d2:ac:44:8c:4a:4f:d2:1f:84:54:4d:f3:1b:04:
9b:0d:44:8d:12:af:4f:a6:7b:c5:68:1f:46:91:88:
50:ee:8f:78:97:83:30:0f:c8:69:ca:9b:9b:31:d5:
42:d0:fa:6e:8e:3e:8a:8b:d5:6b:06:dc:f2:66:bb:
72:4b:1f:22:6c:8e:15:72:e1:00:79:de:95:95:9f:
d6:27:69:5e:83:82:5e:eb:85:4d:dd:41:c4:f8:fc:
07:7d:56:e7:42:ea:55:e1:e9:98:e7:33:56:20:35:
92:a0:19:26:27:a3:74:fb:7c:a5:cb:3f:27:c6:19:
43:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F4:E0:4A:88:DA:63:67:DF:7E:01:89:52:41:54:60:E0:07:A9:6F
X509v3 Authority Key Identifier:
keyid:4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:7d:31:95:b6:2a:82:d1:73:cf:5c:af:8d:70:24:b2:1c:af:
0a:62:1c:8b:32:8d:3f:5d:9c:26:77:d4:d1:d2:e0:af:98:37:
d1:23:85:20:00:d7:e1:cd:0c:0a:56:c9:fc:a3:42:a6:0f:e9:
fa:1d:74:20:c3:8c:03:1a:50:d0:ac:1b:a7:8c:92:cb:43:4a:
08:d3:f8:5e:7b:35:b5:a4:00:73:e9:67:ac:a0:6d:48:67:f2:
6c:2f:6e:17:c5:18:e9:ff:77:b7:90:3f:59:2b:ec:2d:68:96:
66:25:4a:98:e7:b1:f8:c7:f6:67:55:9c:50:cf:d6:ca:5e:9e:
76:10:c3:6b:b6:ba:f7:d4:56:e4:a2:3b:83:0e:2f:72:ac:9d:
fb:4a:ca:ba:b6:28:cf:9a:a0:42:6c:af:3c:48:30:88:16:4a:
44:f2:b2:bc:f2:ee:ed:cb:6b:96:1b:63:83:98:4b:a3:75:7c:
db:60:14:11:d2:c0:7f:7b:6f:00:40:da:83:74:fc:b0:ce:bf:
e9:71:35:d3:de:a8:a6:b7:47:d5:c4:49:af:0c:df:1d:f3:37:
29:5b:8d:b5:d4:50:ee:8a:2c:da:d3:16:40:ee:ee:de:6c:15:
9f:5f:92:38:35:ff:04:88:c9:04:c5:16:25:a7:38:36:a5:eb:
27:54:9d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:11:23 2025 by rpki-client