Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
File: S6mv0hy4--a4UIAM1LSfJWLJK6A.mft (raw, json)
Hash identifier: abvr62ZoWQFFj/niluREEAHHQ8+SxFnRd/qELd7a6sI=
Subject key identifier: BB:66:8D:63:99:4A:54:F0:3D:92:65:3C:E0:18:EE:34:E4:49:21:07
Authority key identifier: 4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
Certificate issuer: /CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Certificate serial: 019848531313506F7A86D247C62AF2DDF0E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
Manifest number: 09E3
Signing time: Sat 26 Jul 2025 20:01:00 +0000
Manifest this update: Sat 26 Jul 2025 20:01:00 +0000
Manifest next update: Sun 27 Jul 2025 20:01:00 +0000
Files and hashes: 1: 7qAkcUK8ZlpOQk4HP0uuF0lhspY.roa (hash: ZilTYghFnWRS/ebtjdIbZ9Dk7wTzY0JMcLcLjLJ+fE8=)
2: S6mv0hy4--a4UIAM1LSfJWLJK6A.crl (hash: E5G5VfrexwfcsjUj3VLMDDy/msAKyPGeJEZR+oZGCxE=)
3: vrYtR17Us0uRR4gxZn7liWGR4no.roa (hash: iPAbeEWSZ9JV1k70IoKGFIA+pbF0zGakCFdiJ4Nxk/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:13:13:50:6f:7a:86:d2:47:c6:2a:f2:dd:f0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Validity
Not Before: Jul 26 20:01:00 2025 GMT
Not After : Jul 27 20:01:00 2025 GMT
Subject: CN=bb668d63994a54f03d92653ce018ee34e4492107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:37:17:cc:5f:32:ab:55:7d:12:c1:df:1c:db:
69:77:47:b7:76:ef:23:2e:45:87:19:dc:82:68:00:
80:e3:c5:f0:2e:ea:5b:35:6f:f6:16:07:0c:73:fc:
03:fc:a5:21:43:0d:0d:f5:48:8c:ee:80:16:fa:43:
9b:c6:76:64:0c:9d:a1:54:af:ea:b9:26:11:6d:17:
b4:35:41:12:a5:8e:7c:a8:f9:eb:32:7d:31:d0:86:
96:37:6d:50:d1:27:72:0a:66:88:db:95:e0:0b:43:
15:14:92:85:b0:b7:6f:2d:7e:1c:6d:09:e7:74:5c:
50:65:28:dd:e1:5c:2e:1f:01:c9:60:97:59:d0:20:
77:d8:67:09:57:67:1c:58:e9:a0:55:76:ce:a3:39:
9d:fd:a5:93:11:65:f7:50:70:cf:e9:99:65:ed:0a:
7b:89:6e:4b:88:a7:8d:95:01:1f:3e:e0:25:f7:99:
9e:2b:bb:02:20:4c:40:f0:22:4c:73:bf:ff:b7:14:
9e:ea:f7:3e:f8:cf:cd:e8:30:88:f0:3b:25:7f:6d:
2d:3e:24:26:a7:d2:48:e7:5a:6a:39:21:05:a3:9d:
55:fb:38:1d:74:40:0d:a8:c2:d1:a8:73:4b:68:04:
b7:6b:8e:0c:8d:f9:2b:f7:f5:5f:7b:d8:e0:a8:40:
3b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:66:8D:63:99:4A:54:F0:3D:92:65:3C:E0:18:EE:34:E4:49:21:07
X509v3 Authority Key Identifier:
keyid:4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:29:f9:d4:5a:a0:21:cd:53:5d:89:9d:22:b8:d3:54:95:d1:
db:33:c5:b8:4d:f9:67:6c:6e:bb:b5:99:37:88:ba:2e:da:39:
a2:73:91:4e:6c:4e:67:18:70:c6:1a:89:97:8f:a3:b1:13:1c:
85:65:2e:e9:e4:64:f4:3e:53:ae:94:53:ba:b1:50:55:48:8d:
3a:c5:31:4d:47:6a:3e:90:66:7b:a5:d1:12:23:ef:2c:3c:4b:
6e:0d:76:19:8b:1c:38:9c:bb:ac:48:bd:41:fe:b6:c5:66:0d:
49:6d:f3:34:83:e2:9c:86:11:03:fe:f9:69:1e:16:fe:4a:8e:
6c:b8:95:55:95:71:1d:31:a9:72:98:b5:27:02:c1:88:a6:73:
ac:c6:57:a7:ab:5b:a4:69:7c:77:4a:e1:73:f7:61:31:52:26:
f6:5c:05:ca:7e:da:d3:77:a7:e8:39:c9:7f:d9:bb:59:c1:2f:
6f:f6:a3:bc:27:18:e1:b3:12:ad:4f:68:c0:78:d8:c2:0b:78:
c6:20:22:4c:86:c3:32:9a:b0:74:46:19:47:f3:a9:04:1f:53:
a0:93:83:16:0f:9a:89:69:b8:bd:f7:cc:9c:4f:5e:71:dd:af:
3c:2d:95:26:cc:eb:c7:33:7c:51:e5:cd:4e:e1:e3:5f:9d:9f:
4c:3b:c2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:14:13 2025 by rpki-client