Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.mft
File: S-G7vlQAedK38nC5LOrzsqgW6Po.mft (raw, json)
Hash identifier: q2PkchUJuG/iW2DrojhpctYqpot7ZHl86dBEzmJiCMk=
Subject key identifier: A4:D2:F6:86:34:D5:17:E5:F5:F0:0D:AC:E6:7B:5B:3B:89:7A:BC:82
Authority key identifier: 4B:E1:BB:BE:54:00:79:D2:B7:F2:70:B9:2C:EA:F3:B2:A8:16:E8:FA
Certificate issuer: /CN=4be1bbbe540079d2b7f270b92ceaf3b2a816e8fa
Certificate serial: 01984A09BBB20318163B37F156A587859261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.mft
Manifest number: 0C1D
Signing time: Sun 27 Jul 2025 04:00:08 +0000
Manifest this update: Sun 27 Jul 2025 04:00:08 +0000
Manifest next update: Mon 28 Jul 2025 04:00:08 +0000
Files and hashes: 1: 9hr0RxcMrr0PdZUeFGL7xFCCX6M.roa (hash: c+l8O2VvW8FmRNHxjGZmeZsqcY4y9njJ0XhuiOI82Ig=)
2: S-G7vlQAedK38nC5LOrzsqgW6Po.crl (hash: Ziu+ka83QWp6PD50j3Dx9ZfdytKZGRoi/KX3k71yho8=)
3: Wo69R9wkZdSu2YDZamu1cwfnvYY.roa (hash: M7Dkgn12kNJ0G/XHeqGYMOBhXYTKj/x9/fg1DkcC9rY=)
4: Yz-y591eNOrcrLSkt7bX4CY92Hg.roa (hash: oW3oUBZKt4uL8vuRz0uNo1Cj56FiYIaWKe1rVvQOsZY=)
5: sxzxRsYpVJ4N1lToM8Cy5xPqMsU.roa (hash: g5PD0lSPsiV5TiY4CJ8jfV/ckG/Bc1/ChU4XFCIeK1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:bb:b2:03:18:16:3b:37:f1:56:a5:87:85:92:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be1bbbe540079d2b7f270b92ceaf3b2a816e8fa
Validity
Not Before: Jul 27 04:00:08 2025 GMT
Not After : Jul 28 04:00:08 2025 GMT
Subject: CN=a4d2f68634d517e5f5f00dace67b5b3b897abc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fc:e8:97:bc:24:fd:ff:ab:26:08:d4:18:33:
61:a0:1d:59:2c:73:0e:fe:ab:41:ae:29:9f:91:e1:
68:02:e1:f9:eb:99:c5:ed:b4:e2:3e:95:42:2a:40:
ad:cf:75:86:26:8e:b6:29:4d:b8:00:85:76:a2:bd:
0b:e7:44:f6:96:f2:c1:ba:a2:b5:b8:0c:39:58:d8:
fb:f3:44:f4:a2:aa:d9:bc:0b:5d:49:e7:b3:75:b5:
32:a1:f9:54:2e:7a:e9:1a:10:4a:14:b4:f0:5f:c1:
79:66:9d:01:85:af:bb:13:78:7f:e7:b8:88:64:a9:
96:7c:d8:cd:49:ab:ed:8f:2d:a4:e7:aa:3b:5b:39:
bb:a7:20:b0:77:14:cb:fe:ed:9b:23:1f:2d:6b:8b:
cd:e8:b3:20:cc:ef:80:74:5b:e3:5f:95:a4:e0:fb:
50:54:a2:18:16:28:9a:e8:d6:1b:b3:89:c6:1d:e5:
7c:86:7f:85:c0:24:a9:94:2a:8c:e3:ea:dd:ba:0e:
9c:e9:e3:9d:f4:df:38:0f:c1:20:8f:fe:bb:cf:31:
10:fb:76:1a:5e:33:c0:01:08:a8:01:1b:8b:e1:65:
96:f5:e6:20:1f:f9:0e:42:a0:b7:ef:98:44:8b:2e:
ae:7e:db:15:20:ad:57:84:50:23:61:d6:cd:9e:6c:
5d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D2:F6:86:34:D5:17:E5:F5:F0:0D:AC:E6:7B:5B:3B:89:7A:BC:82
X509v3 Authority Key Identifier:
keyid:4B:E1:BB:BE:54:00:79:D2:B7:F2:70:B9:2C:EA:F3:B2:A8:16:E8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:15:4f:ce:fa:01:7a:f3:78:87:6f:6c:61:6a:bb:ff:8b:db:
7f:e9:5b:a5:8b:4c:69:5c:ce:cc:22:b1:a8:05:a1:25:d1:29:
32:9c:cb:f9:a8:28:5b:d7:a2:ce:44:8d:37:ba:76:c3:7c:23:
af:b5:3b:45:00:f7:4e:db:db:0e:34:67:f6:4b:f1:d1:7e:95:
ea:09:2c:41:e5:fe:19:1a:36:1f:f8:b6:cd:5d:41:cf:61:27:
90:9a:66:30:ae:73:96:72:a3:8b:92:f7:46:43:54:52:78:3c:
e4:7d:94:1b:58:52:13:c5:d1:83:34:53:bb:04:4c:34:e0:54:
20:54:4b:1e:6f:1e:56:cf:7e:17:6a:f0:c1:1b:3b:ff:44:9d:
8b:bc:b0:1b:2c:36:1a:d6:d5:37:6e:75:c5:20:10:e4:17:27:
ec:f5:5c:46:f2:55:03:7a:9d:55:03:9e:55:84:c7:b1:df:14:
df:c1:f5:f7:f5:05:02:0d:09:e2:cd:31:72:28:05:f5:ce:83:
6a:5d:6d:cc:79:14:ad:74:cd:80:db:1a:ea:97:10:db:42:9b:
ca:88:b1:5c:ae:39:8f:70:b3:58:1c:d1:7c:7b:ba:2a:ef:ac:
f2:24:22:c2:fe:4e:e9:d4:50:b3:04:69:69:14:bd:04:0d:eb:
3b:dd:24:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:36:15 2025 by rpki-client