Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
File: S4x70MRIa6Bzzi3lO6B01w5Ftec.mft (raw, json)
Hash identifier: a0qqohxHqWV5d+f/20qEIvOUVuKQviLHPrhxT/xLNiM=
Subject key identifier: C1:9E:92:45:A9:94:29:E2:C1:1B:00:8B:67:EE:45:03:BC:1E:C8:44
Authority key identifier: 4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7
Certificate issuer: /CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
Certificate serial: 0198537ABFF14E09203E2D493A8FAE976294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
Manifest number: 1604
Signing time: Tue 29 Jul 2025 00:00:10 +0000
Manifest this update: Tue 29 Jul 2025 00:00:10 +0000
Manifest next update: Wed 30 Jul 2025 00:00:10 +0000
Files and hashes: 1: 3JM1DqiUyjfx5MdpsDwZLHS0SmA.roa (hash: q6Ea605SgtRXxY5NI/ZcpQt4PK8j0Kx+z2u5Y/QaL0k=)
2: S4x70MRIa6Bzzi3lO6B01w5Ftec.crl (hash: F3wk6l2pSHXcwUVbEuN6ajzyINum5oShttQPKgVftq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7a:bf:f1:4e:09:20:3e:2d:49:3a:8f:ae:97:62:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
Validity
Not Before: Jul 29 00:00:10 2025 GMT
Not After : Jul 30 00:00:10 2025 GMT
Subject: CN=c19e9245a99429e2c11b008b67ee4503bc1ec844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:84:77:be:14:3f:2b:60:31:23:7d:eb:8e:7b:
4a:d5:64:98:c3:8c:18:d4:a9:20:72:e7:08:3a:3d:
4d:ce:e7:45:de:02:79:a7:e2:fa:bd:09:33:db:78:
d3:9f:e9:a2:bc:91:73:10:77:db:9d:7a:54:72:42:
58:00:cd:37:8c:83:6b:7d:0b:ac:07:66:08:b2:09:
77:38:62:ba:4f:e9:07:8a:aa:6c:4b:8f:72:7a:f7:
9e:a0:1e:d6:7b:31:ce:f2:30:f3:db:3d:37:65:0e:
d4:65:bd:4e:3f:83:97:58:75:d6:93:dd:e8:cf:6a:
1a:b8:15:9e:a9:e2:5f:1f:7f:a0:17:ae:f7:34:56:
b2:87:cc:55:20:4c:3f:4b:b3:bc:c4:08:d2:5b:91:
9a:1f:a4:f9:c9:31:17:97:19:d2:83:4c:4e:0b:b3:
d7:68:bb:03:7e:d6:68:f1:d3:be:ab:58:66:ef:5a:
fe:ca:f0:09:5f:a9:69:51:7e:d1:f1:dd:66:ee:6c:
59:d3:84:b6:d4:e9:98:a7:63:3a:f8:bb:fb:99:a9:
42:74:08:69:5c:1a:1d:50:3d:db:72:e2:51:e0:f9:
e1:fc:f5:f3:b3:0e:6d:bd:8a:1a:32:b9:df:de:ca:
92:60:43:4f:3a:5c:db:51:d8:25:11:0f:6d:47:d7:
9e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9E:92:45:A9:94:29:E2:C1:1B:00:8B:67:EE:45:03:BC:1E:C8:44
X509v3 Authority Key Identifier:
keyid:4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9e:0d:12:85:04:61:de:b1:46:57:36:f0:e5:cd:20:5e:34:
bd:a2:d0:40:0b:18:1f:8a:0e:33:62:c0:fc:78:7c:3f:e3:61:
98:6a:69:ce:04:c8:ba:6e:99:95:8c:f7:fe:18:6a:50:df:7f:
d4:39:32:94:2f:d7:28:3a:cd:14:e7:03:48:7f:bb:7e:25:51:
ca:9b:3e:41:e5:1c:05:30:21:7c:29:18:35:07:ad:aa:98:f2:
e9:9c:0d:32:0d:90:57:20:d7:66:7a:76:13:06:bf:78:79:be:
7b:81:ae:0e:79:98:71:2a:c8:e9:bc:54:53:28:92:d2:f9:21:
8e:68:19:87:6f:3d:57:2b:f5:c0:ad:3d:c0:6d:7c:e2:cb:70:
20:69:78:6a:eb:a3:90:a0:33:05:da:cd:2d:e8:f4:f8:a8:e3:
86:16:28:d3:d5:26:08:c1:e7:23:d2:41:a0:69:f2:6d:a7:79:
58:f8:91:40:47:7b:bf:f5:0b:02:26:0f:af:4d:87:e7:59:91:
ac:7f:e2:3d:0c:3b:fb:7d:39:6e:ec:79:51:d2:3c:90:c1:66:
32:88:18:fc:4f:58:29:53:fa:c9:60:b7:bf:38:a6:56:26:06:
38:93:fe:46:96:ce:28:16:ee:db:ad:3d:0d:0e:cd:e7:e8:ff:
03:ad:a8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:02:13 2025 by rpki-client