Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
File: S2MqdYtZMJ6GEInWVTruBnprNT8.mft (raw, json)
Hash identifier: ItSPqmO7eynNWYDXeyNLJSA3iCXjxUsoTw5MHv8Sa30=
Subject key identifier: 8D:3D:C8:1D:F9:90:9E:66:C4:E1:AA:11:4B:CE:1D:4C:21:5B:BB:25
Authority key identifier: 4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F
Certificate issuer: /CN=4b632a758b59309e861089d6553aee067a6b353f
Certificate serial: 0198564606941822C9119A14BC75102C67E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
Manifest number: 1609
Signing time: Tue 29 Jul 2025 13:01:26 +0000
Manifest this update: Tue 29 Jul 2025 13:01:26 +0000
Manifest next update: Wed 30 Jul 2025 13:01:26 +0000
Files and hashes: 1: BFmKhRFnCi2AJyutOk-Yxml708c.roa (hash: 30fgE+QkDlz/nOmXI9WzL3BXCW8rLDMyhnps4H9jCSs=)
2: S2MqdYtZMJ6GEInWVTruBnprNT8.crl (hash: a33XeNkDQzyJnJNTHvQHHZMxVpargf6l2oZ2eezoQZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:46:06:94:18:22:c9:11:9a:14:bc:75:10:2c:67:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b632a758b59309e861089d6553aee067a6b353f
Validity
Not Before: Jul 29 13:01:26 2025 GMT
Not After : Jul 30 13:01:26 2025 GMT
Subject: CN=8d3dc81df9909e66c4e1aa114bce1d4c215bbb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f4:77:7a:a3:22:53:61:da:51:ba:1f:28:89:
8e:4b:31:57:02:d5:52:54:ce:cd:dc:87:e5:f6:20:
7d:b2:3a:d6:d7:b4:ef:5a:cc:30:8c:d8:c7:b9:15:
54:68:e6:d4:2b:c4:f1:d5:77:75:a8:88:06:c0:dc:
fc:20:05:0c:90:d8:a1:24:23:df:8f:db:33:52:92:
b3:44:ff:fe:04:65:34:86:6f:2d:34:49:f3:cb:61:
66:68:79:31:c3:b7:19:9d:92:9c:5a:7d:cc:ea:e2:
04:76:5f:6d:ea:9f:ad:f0:29:5f:57:b9:a4:bc:06:
d7:57:e9:f8:1e:f0:c2:5b:0b:02:27:b1:34:df:e2:
27:ca:47:d1:ab:aa:c1:9a:f3:86:70:ae:dd:e2:00:
ef:a5:42:de:65:41:44:bc:9d:ed:1c:3f:ca:e2:a2:
9f:2f:d2:d3:56:61:18:be:59:cd:30:47:a7:67:87:
97:b7:93:b2:56:e1:bc:5d:d3:55:0a:d8:a2:68:72:
1f:3b:85:79:05:c4:8d:59:7e:60:4c:d8:b6:bf:36:
1b:03:eb:16:74:03:1d:dd:34:1d:13:ce:42:41:46:
42:ec:80:6d:42:c8:e1:80:7f:5f:1d:ef:14:0a:c9:
f1:bb:6b:df:6b:65:07:e2:09:57:b8:3b:cd:ca:49:
16:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3D:C8:1D:F9:90:9E:66:C4:E1:AA:11:4B:CE:1D:4C:21:5B:BB:25
X509v3 Authority Key Identifier:
keyid:4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:0a:fd:b8:f3:34:f6:10:00:39:f8:23:17:3f:a3:6d:39:c5:
c7:4d:27:3f:94:07:3b:44:ee:ad:0f:7a:b5:f1:8e:e7:2c:40:
8e:07:fc:04:98:d5:11:81:42:c6:fe:b4:2f:e9:fa:9b:00:50:
d4:15:63:1b:f4:30:94:5c:9f:3d:5a:7b:27:50:c3:58:41:80:
2d:21:91:6b:f2:1e:bd:af:1d:69:91:ab:48:45:8b:3d:cf:4a:
04:76:68:3b:69:99:d8:6e:ee:e3:58:37:3f:5b:1b:b8:a7:c8:
0d:b5:6d:8c:2a:a7:5b:68:7d:33:67:c9:15:1f:88:be:c8:1c:
e6:c8:47:65:18:f5:c5:b6:39:a3:e4:14:76:3a:9e:de:86:13:
32:a9:88:2c:0f:01:2f:79:bd:74:5c:a1:81:5d:14:ba:07:e1:
ca:5e:c2:37:57:5c:68:70:91:a8:02:30:71:4e:87:77:74:14:
5f:02:6e:b5:5b:72:0e:cf:c4:01:fa:50:58:79:0d:29:af:b1:
c3:ad:3b:0c:98:02:44:0c:b1:af:94:c9:38:0e:11:c9:f1:c6:
63:ad:fb:1a:79:d8:32:5c:17:72:3b:16:03:23:94:2e:f1:28:
91:02:71:18:c2:99:57:10:9e:af:fe:5f:ba:17:5a:fd:f0:2c:
da:94:0d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:42:54 2025 by rpki-client