Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.mft
File: S2z_dGdTNBC5_aL3ACCMGo8MBCM.mft (raw, json)
Hash identifier: bO6j1nBf4vJ4PlwqtceABxWgSb/mQxXNNB1zN/iwLJo=
Subject key identifier: 5A:32:65:04:80:6E:9D:80:1D:D6:0C:D5:71:C6:16:E4:BD:61:18:D6
Authority key identifier: 4B:6C:FF:74:67:53:34:10:B9:FD:A2:F7:00:20:8C:1A:8F:0C:04:23
Certificate issuer: /CN=4b6cff7467533410b9fda2f700208c1a8f0c0423
Certificate serial: 0198469B3492B6A2E224FDC0EDDDBB9F7DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2z_dGdTNBC5_aL3ACCMGo8MBCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.mft
Manifest number: 02F4
Signing time: Sat 26 Jul 2025 12:00:33 +0000
Manifest this update: Sat 26 Jul 2025 12:00:33 +0000
Manifest next update: Sun 27 Jul 2025 12:00:33 +0000
Files and hashes: 1: 1-Lt9NLCsO-0O5Dj-v2US9jmxXIQ.roa (hash: LmWlQzcgikgQeSr2EvN/FytTaYSjoQdRmrdKGtmELxE=)
2: S2z_dGdTNBC5_aL3ACCMGo8MBCM.crl (hash: lE0hI18yYl/QqrZu66rKWjfgXCkleHeDXz69EsvE/Vo=)
3: hrzuIDRF15oBIKXIQfgIQbF1zzc.roa (hash: JpHqRzFezYOCJs0/enWH8I+qI+ye32fJxiyuYohDsJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2z_dGdTNBC5_aL3ACCMGo8MBCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:34:92:b6:a2:e2:24:fd:c0:ed:dd:bb:9f:7d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b6cff7467533410b9fda2f700208c1a8f0c0423
Validity
Not Before: Jul 26 12:00:33 2025 GMT
Not After : Jul 27 12:00:33 2025 GMT
Subject: CN=5a326504806e9d801dd60cd571c616e4bd6118d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:3d:9c:be:99:58:8f:66:0c:99:dc:8f:d4:
bb:dd:fe:f0:30:91:32:2a:b5:4d:d5:fa:2b:59:1e:
68:00:d9:c6:5c:7b:4a:07:ce:ca:01:bd:ba:f3:c6:
12:93:2c:46:ab:41:ab:c8:ab:2f:33:97:32:e0:80:
a6:ab:5d:eb:e4:f7:cc:fd:ef:6c:9d:bf:20:bf:5d:
37:1a:15:3c:af:e4:19:08:49:07:fa:58:b3:c2:cb:
df:50:49:c1:e3:6e:7d:48:2c:2a:db:67:c0:27:93:
53:64:45:90:96:11:4e:e8:5a:0a:b8:ba:98:73:71:
c1:53:68:3e:e9:0d:1b:3b:f9:e3:6d:79:cd:93:29:
76:1d:cd:64:17:b8:21:54:19:55:4a:72:1c:1e:83:
55:ad:a9:38:8b:13:19:6d:fb:09:f1:3c:cb:a9:74:
01:b1:25:0f:f4:86:32:de:18:5e:31:6e:ee:51:54:
04:6f:33:c4:01:30:df:b3:bd:cd:2b:9f:67:ea:7c:
52:45:7a:a3:e5:01:ae:e8:8d:7c:b7:7c:3c:d4:c3:
b5:35:0b:c8:3e:96:fc:3d:46:51:f1:9f:d8:86:83:
72:72:69:60:1e:b4:ef:c2:38:7f:f7:64:32:1b:ee:
02:5f:a8:b0:45:ae:09:c1:a3:b2:46:55:fc:94:12:
b3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:32:65:04:80:6E:9D:80:1D:D6:0C:D5:71:C6:16:E4:BD:61:18:D6
X509v3 Authority Key Identifier:
keyid:4B:6C:FF:74:67:53:34:10:B9:FD:A2:F7:00:20:8C:1A:8F:0C:04:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2z_dGdTNBC5_aL3ACCMGo8MBCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:06:ad:90:a0:78:0e:69:93:92:f5:f0:88:e1:bb:ed:03:6c:
23:f9:86:33:c8:bc:01:24:b6:bc:fd:2f:26:62:22:5a:d6:00:
11:91:2b:97:d7:7c:36:ef:0c:3d:95:46:b5:7c:21:8e:d5:ef:
0b:21:7c:c3:d4:59:92:16:71:6f:23:f4:a0:d1:03:5d:a5:46:
1b:3b:40:ae:a5:49:82:7a:71:cd:7c:ea:90:e7:2e:60:6c:87:
82:bc:ae:ca:0f:72:54:dc:3e:6d:cf:05:23:d1:50:d8:4d:54:
7e:f3:5c:23:55:63:f5:14:6c:6a:6d:0b:de:10:47:4d:66:35:
5d:cf:8d:6a:38:bc:cd:52:0c:0d:5b:6b:99:f6:c9:3c:3a:99:
89:c2:fe:a3:85:fd:3d:20:d0:d1:c9:6a:25:bd:24:ae:2c:c3:
cc:43:67:3c:22:60:42:ad:5c:e9:e0:59:b0:0b:2d:d2:81:a2:
4d:5b:02:81:dc:8d:87:7f:7b:c2:ad:9d:23:34:2c:28:05:85:
40:f6:8f:f1:89:b7:2f:1b:59:a7:c3:5d:7a:21:a1:9d:bc:c3:
83:27:21:bf:a1:f7:31:87:93:bd:6c:bd:bf:56:23:e4:ea:d5:
ef:7f:6a:22:91:f3:d6:6d:0a:a9:a4:d3:53:80:6c:51:fc:ff:
49:7c:a6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:43:18 2025 by rpki-client