Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
File: S9Kz8xprCl18Bpijd5alHXsMtqQ.mft (raw, json)
Hash identifier: rgDFfMbtxYtLG1AvhkNeZudCzoAjEeJHHQd54x2nlMA=
Subject key identifier: 62:EE:41:FB:D3:4C:EF:3A:AE:AB:1A:15:EF:7C:9D:D3:FC:2F:A0:DD
Authority key identifier: 4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
Certificate issuer: /CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Certificate serial: 019848C0C2790D76E7345E40765FF2D92C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 22:00:48 +0000
Manifest this update: Sat 26 Jul 2025 22:00:48 +0000
Manifest next update: Sun 27 Jul 2025 22:00:48 +0000
Files and hashes: 1: Rdx8XfheQK9SaYz_CldryphH9T8.roa (hash: y/tJ0RmbT3dmGd7x3jwaVo6j1E4t/44CEGiNjsjlces=)
2: S9Kz8xprCl18Bpijd5alHXsMtqQ.crl (hash: 2Z+f4QSovRQ6U0s+d1s4lRrsXORlvEG4/qn893Vh4Vg=)
3: fUKc1eWdHmKeTh30S5pWd_dRf4M.roa (hash: GDoe187PYSy+m1pOUWwfwziOM1L2+4EiEEfpzL06VQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:c2:79:0d:76:e7:34:5e:40:76:5f:f2:d9:2c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Validity
Not Before: Jul 26 22:00:48 2025 GMT
Not After : Jul 27 22:00:48 2025 GMT
Subject: CN=62ee41fbd34cef3aaeab1a15ef7c9dd3fc2fa0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:80:62:fb:4c:86:da:56:2d:86:a7:d4:41:1f:
5b:fb:3e:8d:08:f4:4a:fb:ab:3a:01:89:2b:2b:05:
78:7c:ea:7b:df:52:7d:70:3d:95:66:28:e5:1f:64:
b2:e3:5c:14:be:8b:6a:54:83:4d:c7:0b:73:f4:df:
0d:73:b9:ff:ff:a5:08:a6:59:27:d5:92:15:20:7d:
89:31:3e:40:b8:62:7f:fc:68:ae:9f:cd:91:52:cc:
1b:a2:02:64:84:fe:ac:59:28:d1:5f:f9:97:a5:05:
08:2d:b3:de:9b:50:0d:0b:40:e1:c8:ee:01:fc:e8:
53:51:3f:88:bd:bd:f5:15:e9:89:f6:27:3e:4d:b5:
1a:99:80:1f:a5:9f:0f:bb:2b:da:66:a6:25:96:f3:
66:88:0a:0e:5a:a8:9c:09:e1:b9:e8:dd:10:44:c3:
41:25:5a:cc:e4:a8:f1:8b:ce:54:ed:bd:b2:75:c5:
c0:ad:05:fc:43:a3:c3:0f:1d:c4:e6:4c:57:ab:3f:
c8:f0:1c:33:07:72:75:3f:d7:7d:d0:79:d1:f8:ad:
52:a0:eb:a5:d1:6f:32:aa:4d:15:25:84:8b:0e:9c:
a3:44:e7:77:07:98:d3:5f:bf:f7:38:94:2f:1c:03:
e9:39:f6:ee:23:47:22:28:fd:d0:50:e7:d2:ec:32:
04:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:EE:41:FB:D3:4C:EF:3A:AE:AB:1A:15:EF:7C:9D:D3:FC:2F:A0:DD
X509v3 Authority Key Identifier:
keyid:4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:85:36:07:94:e7:60:fb:01:7e:59:fa:8b:15:28:75:09:e1:
50:ae:98:fd:db:dc:30:e1:33:3d:81:59:c6:6a:70:f6:60:8c:
0c:b8:cd:54:18:a0:a9:bc:68:f8:f2:df:0c:8d:8e:fb:d8:c1:
af:20:43:0d:4b:a5:ac:c7:a6:0d:49:fd:ec:01:db:a2:1c:1c:
e0:f8:23:98:2c:16:be:ac:fe:3f:45:ac:7a:61:55:8b:1f:e8:
b4:7e:0d:fa:00:71:27:5f:a8:6e:f5:64:88:ea:83:d1:2e:2d:
3f:01:40:72:71:49:5a:02:10:a7:20:f0:74:86:a3:40:4b:be:
f0:cf:57:d9:d3:d9:97:20:a4:31:da:38:42:bf:15:da:3a:b4:
37:4f:b3:4d:c9:a3:e5:99:dd:ab:4a:24:78:70:6a:a5:be:61:
6f:0c:f3:38:28:aa:70:07:66:f9:97:23:49:f0:af:74:ea:97:
59:2d:16:bb:44:5b:aa:2e:1e:c4:f6:b8:7f:0d:10:18:71:61:
82:5d:52:dd:72:f6:a7:b3:a4:f8:c0:25:d9:3f:41:87:ba:f4:
a2:82:3c:0c:d9:72:2e:e1:47:44:97:33:91:54:65:73:e6:5e:
d9:db:0c:76:5d:fa:4f:37:ed:65:7f:db:9d:f0:cf:f5:6e:6e:
a3:78:1b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:25:55 2025 by rpki-client