Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft
File: S2HMijZcxAOCox2tVPbLcj9YdYo.mft (raw, json)
Hash identifier: IwY1mKEfTVrXWBvuE0JxPrbS5jv5PN8DKTsRu+uX3lA=
Subject key identifier: 7A:50:28:1A:53:2E:72:00:7B:81:07:3F:47:4D:4B:14:1C:53:EE:97
Authority key identifier: 4B:61:CC:8A:36:5C:C4:03:82:A3:1D:AD:54:F6:CB:72:3F:58:75:8A
Certificate issuer: /CN=4b61cc8a365cc40382a31dad54f6cb723f58758a
Certificate serial: 019849D3218E4C88D3D966D5B9BDC1B2A036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 03:00:30 +0000
Manifest this update: Sun 27 Jul 2025 03:00:30 +0000
Manifest next update: Mon 28 Jul 2025 03:00:30 +0000
Files and hashes: 1: 5dOeHmReGHpglp9CPLficnPxbRA.roa (hash: u/adm8/lzLOzXE337fHeCi8QttPIgGUNVZ/GPwCUh0o=)
2: S2HMijZcxAOCox2tVPbLcj9YdYo.crl (hash: vzf4tYcazpEUJXQDcHXH3uA/km9w9HUvBZ/lksW0wZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:21:8e:4c:88:d3:d9:66:d5:b9:bd:c1:b2:a0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b61cc8a365cc40382a31dad54f6cb723f58758a
Validity
Not Before: Jul 27 03:00:30 2025 GMT
Not After : Jul 28 03:00:30 2025 GMT
Subject: CN=7a50281a532e72007b81073f474d4b141c53ee97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a9:2d:66:70:44:e3:1c:98:a6:0e:31:f3:5c:
92:3a:1a:1b:65:d2:95:30:a9:ef:1a:24:52:5b:5b:
9a:82:2b:6e:1d:87:80:69:e9:bf:37:88:bc:f6:aa:
29:2f:b2:a6:61:e3:f5:e4:56:dd:c9:8f:a6:b2:62:
24:7d:c5:33:ce:e2:59:ef:00:0f:da:f6:c0:4c:18:
10:bd:2d:b9:7b:2c:09:76:43:67:78:23:3d:13:43:
ee:b5:cb:ce:5d:90:99:e5:7c:ed:b0:07:c8:66:95:
d8:cb:e2:95:2b:ee:90:5c:6c:40:23:c1:13:4c:a4:
90:4a:9a:46:cf:84:0b:88:3f:32:08:f7:8e:4e:64:
f8:77:f4:55:d5:4e:fd:88:c1:66:ca:d4:c6:b3:37:
d5:39:c4:ad:bf:4c:0b:9b:fa:4b:ba:88:bf:dd:76:
5b:a0:5f:07:10:a8:50:15:e9:05:fb:0b:d3:46:65:
7a:f3:49:e4:7c:12:ac:1f:5a:fd:b5:83:bf:c1:92:
c1:4a:52:a3:b4:6e:60:1f:68:6d:9e:8f:ad:cf:8b:
eb:bb:49:08:2b:41:1d:2a:43:af:97:c7:97:c4:80:
0d:24:07:2d:e3:71:c4:f9:d2:13:c2:b5:d0:2d:ed:
f7:11:17:c0:b7:12:43:af:7e:99:e3:48:8d:93:93:
db:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:50:28:1A:53:2E:72:00:7B:81:07:3F:47:4D:4B:14:1C:53:EE:97
X509v3 Authority Key Identifier:
keyid:4B:61:CC:8A:36:5C:C4:03:82:A3:1D:AD:54:F6:CB:72:3F:58:75:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:00:f2:2b:68:8e:76:ff:80:ee:58:a4:83:c3:2a:4b:a4:3e:
20:be:8c:0d:dd:0f:cc:db:ab:6e:ef:94:da:01:c7:47:ea:96:
a3:c3:ba:7a:7a:f3:7c:92:37:c5:34:45:d6:4e:d3:d1:c4:49:
c7:e9:b3:ee:1a:e6:15:a9:79:c4:bf:c6:c3:fa:b5:4f:43:1a:
0a:e9:97:fb:d7:dc:37:70:0b:01:bd:7f:91:72:f7:34:9c:1c:
6d:31:5f:7c:72:6f:80:36:61:81:e3:91:3b:eb:9e:dc:1e:57:
52:80:19:63:8b:50:85:aa:b8:c1:99:c7:d0:28:94:9a:8a:5e:
76:3a:1d:04:83:e0:7f:8e:af:e5:cf:32:9e:1d:7c:81:d5:ee:
5d:0a:93:56:0d:a1:c1:18:e7:f6:e5:8e:1b:ca:ef:ca:cf:25:
b0:30:0e:83:73:88:77:ab:e8:21:22:a5:dc:fc:7a:8d:0d:9b:
29:f1:02:16:9d:79:9b:ad:c2:0f:f2:66:a5:67:41:83:f3:02:
7c:f2:fb:98:f9:aa:0a:f5:75:44:d5:69:ef:cb:34:05:84:43:
68:6e:8e:1a:e8:91:37:58:89:73:81:ec:1d:27:bd:c4:83:b4:
cd:9c:6f:85:b5:02:8e:73:39:b1:79:d3:b1:f0:b3:c4:f1:a2:
ad:73:7c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:38:01 2025 by rpki-client