Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
File: S-kZqE4aIp94nZOdGqpxKk08OZ0.mft (raw, json)
Hash identifier: 0O+hHxhDDnl4VMtqM1iQmiuQ/VlMVKCQpmuhSDBmB2M=
Subject key identifier: 4E:F5:53:0B:AB:80:B7:8A:E3:93:AE:5F:47:13:28:EF:A0:C3:44:5D
Authority key identifier: 4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D
Certificate issuer: /CN=4be919a84e1a229f789d939d1aaa712a4d3c399d
Certificate serial: 019847780A2312CE97F2DEC7ABB50F88611E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
Manifest number: 045E
Signing time: Sat 26 Jul 2025 16:01:45 +0000
Manifest this update: Sat 26 Jul 2025 16:01:45 +0000
Manifest next update: Sun 27 Jul 2025 16:01:45 +0000
Files and hashes: 1: FE9TisHKbwT-TG7WXc-HdjPStqc.roa (hash: pRwsqMoq8wG5C6fvp0aFlXXk9XmPop41EHqaLEOgfSc=)
2: S-kZqE4aIp94nZOdGqpxKk08OZ0.crl (hash: MjYF4YDjhbiCgfHhVCw06U7X1pqVDKfUAN7JSPw98Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:0a:23:12:ce:97:f2:de:c7:ab:b5:0f:88:61:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be919a84e1a229f789d939d1aaa712a4d3c399d
Validity
Not Before: Jul 26 16:01:45 2025 GMT
Not After : Jul 27 16:01:45 2025 GMT
Subject: CN=4ef5530bab80b78ae393ae5f471328efa0c3445d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:19:e0:26:6f:bb:2f:0f:bc:93:d6:6f:79:12:
6e:98:e7:24:62:b2:63:c1:ac:ca:c8:3a:01:5e:24:
0b:d8:1c:fa:a5:bb:fd:40:35:38:b8:81:87:d9:be:
eb:c6:c1:f7:70:a7:c0:e1:2c:ad:ef:c9:91:24:06:
d3:e9:14:9f:2d:f3:af:d9:b8:06:7b:20:70:ef:de:
19:eb:30:7e:a8:e6:1f:cd:1e:ba:89:99:0c:05:35:
30:4e:b4:6a:a4:e8:f2:4b:ba:12:02:62:70:ab:af:
6c:60:71:83:89:0c:74:17:f7:b6:e6:27:96:7b:fa:
14:92:48:b4:c5:80:78:ba:0e:b1:f3:96:e5:67:3b:
3d:bd:26:3b:f1:c3:ea:84:da:2d:af:50:31:f5:06:
ab:56:2d:dd:1a:1d:99:bd:0c:18:bf:39:7d:f4:ce:
1c:85:05:4d:49:97:3c:4d:0a:65:43:ea:a9:e8:d9:
0f:61:05:90:ec:70:73:10:1d:9c:6a:8d:27:9a:36:
ed:ba:88:45:07:7a:22:a0:19:51:a0:48:27:9c:b9:
d2:36:9e:f4:07:db:31:5e:34:d3:c3:16:af:f9:f7:
2e:d3:a1:21:7f:08:c8:66:b9:30:87:dd:c5:58:4a:
ef:a2:02:75:33:cf:42:62:c3:24:a0:bc:bf:b4:d9:
1a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F5:53:0B:AB:80:B7:8A:E3:93:AE:5F:47:13:28:EF:A0:C3:44:5D
X509v3 Authority Key Identifier:
keyid:4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:06:6c:74:09:47:83:af:b8:5f:3d:17:10:a4:11:e0:7b:53:
ea:e2:c1:33:53:50:47:c1:85:b2:2e:b8:eb:fd:78:8e:0b:d2:
eb:be:31:c3:ea:b9:1f:36:ab:d4:2f:05:64:c1:02:20:e0:9f:
c8:cb:0f:76:32:39:c3:75:ed:a3:64:0a:a0:4f:d7:4f:87:75:
7a:6b:4c:d1:35:f4:97:33:8f:4c:79:fb:6b:ed:54:17:28:2f:
e5:48:b3:8b:ba:0c:95:5f:03:74:da:3f:8a:0a:33:69:1c:38:
31:e2:df:f0:71:25:3a:85:7c:32:e4:98:cc:7c:20:2a:93:2c:
f1:93:03:b4:a3:7f:29:8e:b8:b9:13:7f:7b:6f:86:2f:44:9c:
3d:b6:68:4b:f5:ee:62:78:a1:26:9d:8c:34:b7:67:63:29:59:
9f:b8:5d:74:ff:a8:a2:d2:7b:27:b7:ee:af:ed:ab:b8:57:b1:
ab:5d:41:d5:25:04:f3:be:13:ab:fc:67:73:dd:a4:c1:75:3c:
46:02:e1:3a:1f:bb:f5:43:5c:79:6a:57:ba:c1:75:00:eb:20:
73:ca:02:fa:9e:91:bb:6b:33:a2:8c:bc:ca:7e:62:a6:f1:29:
c6:26:e6:19:c4:c7:c8:7f:22:56:6c:fd:26:d4:61:b4:f0:ae:
f1:89:a7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:23:20 2025 by rpki-client