Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
File: s2DwCXvkgcIbsdUchdRPZXQViqk.mft (raw, json)
Hash identifier: BIPhAwhUcfx3k26HfWRWM2yNWKTcy/zzi6t9l94eYDs=
Subject key identifier: 3B:8D:47:F7:F5:1A:7D:39:15:84:8E:3D:89:1C:37:00:5B:68:15:8E
Authority key identifier: B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
Certificate issuer: /CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Certificate serial: 019827EC9525E2AFC9F493A6D06235CD2966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
Manifest number: 0661
Signing time: Sun 20 Jul 2025 13:01:12 +0000
Manifest this update: Sun 20 Jul 2025 13:01:12 +0000
Manifest next update: Mon 21 Jul 2025 13:01:12 +0000
Files and hashes: 1: 0FvyRdwuNrCgMP49Gm05_Jf24wo.roa (hash: VrNtxHJD5r4AAcIekiYzDFEjX0OLNvQVaPqP96ejauo=)
2: XJdcwddEgs-q78gmSagWMovn85I.roa (hash: Je76MM+YNyOi1CdfvkLH4QNZ11rGS/XGNeifQiQFCLA=)
3: eRE1hc1OAUXn9B2yIqa6q1KtEng.roa (hash: 2kkOJHVByX9Ad1TRTPwMrwhabgTLNmB9YR0YC04Cis4=)
4: s2DwCXvkgcIbsdUchdRPZXQViqk.crl (hash: pUHCvqA8Qn2ANvvOmZPJhI4Pul6PYTthu++AFktHSmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:ec:95:25:e2:af:c9:f4:93:a6:d0:62:35:cd:29:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Validity
Not Before: Jul 20 13:01:12 2025 GMT
Not After : Jul 21 13:01:12 2025 GMT
Subject: CN=3b8d47f7f51a7d3915848e3d891c37005b68158e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f7:f3:12:0a:f3:90:f1:0f:d6:02:07:19:b2:
5f:01:ce:e8:8e:fe:0b:3b:8a:da:d5:1c:a5:82:4b:
61:7d:37:11:59:9d:e4:29:cb:e5:fd:69:be:c6:cd:
ce:bb:71:06:c1:50:97:37:79:9c:1e:18:54:71:4d:
4c:be:56:af:a9:d2:7e:ea:23:b1:02:08:46:6b:99:
b7:2c:3e:aa:73:d5:fe:9c:02:a3:15:8c:e4:38:c8:
c8:29:e9:7d:46:39:2d:de:5b:ce:69:59:a0:f3:7d:
44:cf:7c:6d:c4:f1:1e:d2:65:4e:e8:96:e7:28:f8:
d9:91:68:bd:84:56:2c:c4:c9:2e:61:09:18:66:e3:
30:02:29:b1:b4:78:40:de:78:ef:01:7d:58:dd:be:
06:b6:7d:69:9b:e9:59:bc:4f:0a:e2:0b:a1:ec:02:
5c:8b:40:c3:71:b2:bd:06:43:dc:06:0b:f8:27:ab:
ef:cf:62:60:a4:40:b2:5c:0e:ca:0d:2c:36:3a:ee:
6b:13:43:fb:4b:57:50:ef:e1:0c:c9:65:65:45:99:
9d:14:a5:e4:45:b4:ff:d2:d1:b9:c6:44:74:f4:44:
1e:92:b9:9f:a1:8f:7d:3c:6f:10:33:65:7d:cd:70:
fd:2c:d9:03:64:70:42:58:17:12:94:65:28:27:8c:
ca:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8D:47:F7:F5:1A:7D:39:15:84:8E:3D:89:1C:37:00:5B:68:15:8E
X509v3 Authority Key Identifier:
keyid:B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:70:09:9a:b2:2f:fe:6b:e7:5e:25:6d:16:09:ee:8e:91:2d:
51:21:c9:e5:3d:98:55:1c:81:70:47:9e:48:c7:fb:a1:2b:e0:
0f:b6:72:d6:e4:7a:3b:fd:d1:27:4d:c5:db:35:bd:83:eb:b6:
35:b3:b3:ac:10:d6:da:e2:56:1a:2c:b3:e0:6a:4f:c7:08:c0:
4a:f0:6f:01:24:9f:ce:b4:01:7f:6d:3a:f5:48:34:85:41:c6:
83:de:9a:40:d4:c6:b1:1e:99:f2:4f:33:d4:fc:f6:e1:a0:dd:
65:bd:d0:f0:48:5a:dc:1c:81:ad:5f:c0:18:4e:5f:d2:6a:55:
24:0c:eb:1c:d0:2d:51:df:1b:dc:a6:e6:12:68:a0:d9:38:07:
ef:8a:3d:d5:74:42:37:2a:88:9b:32:ff:14:98:e0:2d:cd:a9:
81:a9:87:ca:8a:44:2b:eb:a8:a2:f6:98:de:41:83:6b:92:d6:
56:47:a7:22:48:b9:b8:61:8b:42:83:78:26:ea:4a:49:f3:2b:
7d:f7:10:ab:1e:de:73:25:fe:8b:29:4b:17:06:0a:6e:ec:d9:
4b:c2:f6:87:31:87:12:e9:ae:27:61:f3:3b:93:d2:27:95:ad:
cd:07:38:bc:49:15:c8:9d:8f:0b:f9:6f:0e:77:2d:bb:3f:50:
d6:8f:2f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:22:31 2025 by rpki-client