Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft
File: S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft (raw, json)
Hash identifier: r27QCdVB9dQv2f6QgSJ4U1cyqVSWE09ALL8Yd/nYNsY=
Subject key identifier: 9D:2B:E9:94:D1:C5:92:5C:F6:FD:47:02:76:70:51:20:55:E6:49:4B
Authority key identifier: 4B:93:C6:A1:0D:14:1F:00:AE:FA:DE:01:BC:D3:49:2F:75:4F:4E:83
Certificate issuer: /CN=4b93c6a10d141f00aefade01bcd3492f754f4e83
Certificate serial: 019849D2C4852215E73110CD7D4EB9F49CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5PGoQ0UHwCu-t4BvNNJL3VPToM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft
Manifest number: 155A
Signing time: Sun 27 Jul 2025 03:00:06 +0000
Manifest this update: Sun 27 Jul 2025 03:00:06 +0000
Manifest next update: Mon 28 Jul 2025 03:00:06 +0000
Files and hashes: 1: S5PGoQ0UHwCu-t4BvNNJL3VPToM.crl (hash: hq50jCsuEhXcoMmvgBi67qiHDtxp9Bx3OLo6YbxLwFA=)
2: v6SZGiKR24BVvAjZdd8cz7dRNVo.roa (hash: SrmYXvyqUl8YVIgTkfPYRcexlIdDbvR6648X1c8kcVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5PGoQ0UHwCu-t4BvNNJL3VPToM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:c4:85:22:15:e7:31:10:cd:7d:4e:b9:f4:9c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b93c6a10d141f00aefade01bcd3492f754f4e83
Validity
Not Before: Jul 27 03:00:06 2025 GMT
Not After : Jul 28 03:00:06 2025 GMT
Subject: CN=9d2be994d1c5925cf6fd47027670512055e6494b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:03:48:18:1c:f9:79:c7:3a:ee:a8:78:31:9c:
be:35:ed:16:99:ba:57:99:d2:3f:52:f2:3a:eb:bf:
a7:a4:f9:3b:60:27:79:ab:5a:4a:d7:34:4f:5d:1c:
50:df:49:8e:7a:6c:ed:95:97:10:5f:0e:8a:ff:8a:
8f:31:17:58:2f:2e:28:73:eb:67:03:97:fb:28:90:
6d:19:6b:96:65:2f:f9:2e:a8:02:b0:88:47:d5:34:
0d:40:a9:e9:44:5d:3a:fa:b9:00:41:61:e7:a2:fd:
d8:1d:75:09:e0:a8:d7:1c:f9:f5:bd:9a:e1:c7:9e:
53:5f:ea:3e:d4:1e:f3:bc:14:08:22:f5:23:69:4c:
78:8e:03:3a:d1:ec:ee:97:a2:f7:25:62:dc:21:24:
6f:ba:27:d9:07:2c:e9:05:be:30:28:5f:26:48:4e:
95:05:1b:f3:fe:17:24:b4:58:3d:97:12:ce:62:20:
ac:45:d2:c5:eb:02:bd:15:65:db:90:4b:6a:fb:33:
82:b0:df:1a:d0:a5:60:41:c9:66:3d:c8:45:5b:39:
78:03:99:41:72:aa:9b:c1:0c:9d:6c:e3:f2:cc:7b:
02:df:61:61:40:1e:25:71:0a:20:5a:3a:b2:ef:c6:
3b:43:e6:af:0d:20:33:93:b6:db:e1:06:91:b3:d9:
4b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2B:E9:94:D1:C5:92:5C:F6:FD:47:02:76:70:51:20:55:E6:49:4B
X509v3 Authority Key Identifier:
keyid:4B:93:C6:A1:0D:14:1F:00:AE:FA:DE:01:BC:D3:49:2F:75:4F:4E:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5PGoQ0UHwCu-t4BvNNJL3VPToM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f9:c3:67:63:42:b8:e5:08:a7:0c:e2:84:a0:39:d7:8c:e5:
01:ac:e4:67:66:34:32:7a:c0:e6:bd:8c:1a:00:8b:95:34:81:
bb:0e:c6:39:7c:9e:62:c0:85:84:cf:74:6c:8d:fb:f2:0b:17:
00:b9:6a:d1:7a:e6:0e:ac:df:3c:75:96:bb:fc:bc:e4:20:36:
51:76:3b:79:6f:02:5a:00:ea:8b:1c:29:be:20:97:c6:6a:48:
69:73:b7:d9:51:f0:03:8e:98:b6:68:e2:86:b5:92:c5:3f:49:
c6:cb:cc:17:82:f0:7d:7f:6f:b6:d9:a9:cb:d5:48:59:23:2a:
0b:0a:0c:b1:53:f5:46:aa:c4:f0:41:67:81:5f:c9:6b:7a:fb:
d0:e0:71:22:22:52:b1:2f:00:39:e5:e2:d8:94:df:ab:30:c9:
c2:d3:06:06:e0:30:de:cd:83:f7:a6:c3:d6:21:4e:b2:8b:d1:
66:98:ba:f1:ce:7a:ea:5e:ab:a4:f0:dc:b3:64:64:f5:a9:8d:
a9:6c:7a:79:f1:a9:ff:85:c4:6f:9c:ee:58:89:9b:73:5b:2b:
65:0c:7d:de:2d:25:0f:82:49:ca:cd:bd:02:1e:e7:6f:84:40:
13:12:f6:50:ef:76:f5:c4:5a:be:3a:f1:dc:d2:f1:e3:27:ad:
5c:2b:ad:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:40:59 2025 by rpki-client