Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft
File: S5nNYSQguFk0kdhobOTEr4W5CtU.mft (raw, json)
Hash identifier: Wd3oiLNAnMLtA2OkohgA7ebpT4smXKUn3IEK0zCsGt4=
Subject key identifier: 6E:B0:FA:01:E3:3B:47:DF:AF:72:78:CB:0E:CA:5D:76:72:E8:E9:5C
Authority key identifier: 4B:99:CD:61:24:20:B8:59:34:91:D8:68:6C:E4:C4:AF:85:B9:0A:D5
Certificate issuer: /CN=4b99cd612420b8593491d8686ce4c4af85b90ad5
Certificate serial: 019827EC6292186131B74FDBA49534471B22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5nNYSQguFk0kdhobOTEr4W5CtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft
Manifest number: 20
Signing time: Sun 20 Jul 2025 13:00:59 +0000
Manifest this update: Sun 20 Jul 2025 13:00:59 +0000
Manifest next update: Mon 21 Jul 2025 13:00:59 +0000
Files and hashes: 1: 4qD1Oc9Rkwf3nkPKdA3PqgFhBVg.roa (hash: FAYdaSueDZBgvCYn8/TIySq6P0JIfXLy0IlKcRVzUNU=)
2: S5nNYSQguFk0kdhobOTEr4W5CtU.crl (hash: TEGZAH7LqFI7t9NjrYO/n5UlEu4dmh5ld8s0051iEMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5nNYSQguFk0kdhobOTEr4W5CtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:ec:62:92:18:61:31:b7:4f:db:a4:95:34:47:1b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b99cd612420b8593491d8686ce4c4af85b90ad5
Validity
Not Before: Jul 20 13:00:59 2025 GMT
Not After : Jul 21 13:00:59 2025 GMT
Subject: CN=6eb0fa01e33b47dfaf7278cb0eca5d7672e8e95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c6:f5:7e:ae:55:01:b5:30:36:77:07:32:1e:
13:e7:66:97:53:bc:d9:9b:e4:ad:c6:a3:3c:b0:92:
71:91:87:89:28:ea:62:1b:54:55:7d:92:ad:33:86:
3f:73:ab:63:be:b6:88:c8:af:9a:b3:63:d9:1f:f1:
e3:39:93:84:11:0b:4c:7d:07:69:54:15:e5:66:fa:
27:f7:62:95:12:e0:e6:79:0a:84:85:17:be:1b:77:
c9:e7:90:13:0e:df:0b:08:47:86:e9:d0:5f:86:b7:
e2:3b:84:88:ce:eb:67:db:b6:64:54:fb:bf:a9:e7:
1c:2a:54:48:0e:8a:0a:9e:d2:85:05:51:b9:ea:a8:
69:ac:d5:85:a2:05:b2:85:13:40:b3:29:a8:0a:04:
eb:a6:00:e0:8c:9e:cf:5b:61:6d:15:7f:c0:c3:fc:
65:13:84:0f:8a:7b:30:e4:9b:b0:65:eb:ff:10:93:
0b:07:d2:b4:5f:1e:e6:1f:e7:f8:ef:e0:74:15:ec:
7b:3f:77:6c:ee:71:f9:ca:6a:f4:5a:e5:95:5b:8a:
c0:70:49:8d:3f:38:55:a1:cd:3c:0b:03:e5:b1:59:
b9:f1:fc:0f:f6:7d:e6:e0:03:db:c7:6c:4c:34:78:
7a:19:44:e5:5c:8f:5e:2e:e0:0d:cf:de:9b:87:f8:
3b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B0:FA:01:E3:3B:47:DF:AF:72:78:CB:0E:CA:5D:76:72:E8:E9:5C
X509v3 Authority Key Identifier:
keyid:4B:99:CD:61:24:20:B8:59:34:91:D8:68:6C:E4:C4:AF:85:B9:0A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5nNYSQguFk0kdhobOTEr4W5CtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a0:27:6c:d1:74:90:ce:cf:37:6f:8e:17:6f:2f:40:66:72:
ec:f7:f2:dc:41:0a:65:58:61:12:04:51:30:6b:32:29:68:7f:
11:ec:48:6b:57:5d:ba:1c:1e:21:35:bd:e6:36:99:09:65:0b:
5c:0c:46:5e:c0:4c:0e:b6:8e:3b:fa:5c:07:70:3e:be:ad:c3:
06:c6:ff:fa:e1:03:94:a4:21:17:d2:df:ee:95:9f:bf:0c:57:
7f:00:b5:7c:6f:cc:f6:ef:ad:7a:5f:91:f8:d8:af:df:c9:d6:
dd:6c:cf:7f:72:18:e9:de:03:b2:f1:f7:a7:4e:86:5a:1e:dd:
9c:93:96:5e:a7:99:b7:20:60:3d:5c:00:31:7a:be:a6:af:42:
53:70:fa:30:95:40:de:3a:9c:10:61:e9:37:60:d3:ea:43:2c:
b6:97:12:b9:f3:43:1a:a0:ef:2a:0b:90:59:a3:4a:9c:b0:1f:
1b:30:2b:a2:36:24:4f:0a:74:b0:63:89:ef:ad:a2:82:90:a7:
80:3e:1f:a4:c5:db:cf:1f:bf:91:99:6d:97:ae:71:08:66:e4:
68:89:f1:46:36:d5:8c:8b:9c:ad:df:55:61:38:81:ea:95:b9:
91:35:f1:ae:3f:7f:d4:5b:42:05:7f:fc:16:c3:e9:0f:0b:e3:
9c:2d:38:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:23:38 2025 by rpki-client