Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
File: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft (raw, json)
Hash identifier: G8cUHo++dWI7etpBnsGW9BWmU2r3WRq07Igwgzhv7qY=
Subject key identifier: 46:80:7C:1F:FB:3C:DE:0C:46:6C:0B:71:FB:92:91:19:A1:32:60:D2
Authority key identifier: F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
Certificate issuer: /CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Certificate serial: 01984966093FE775EB51C2091070AB5259F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
Manifest number: 0665
Signing time: Sun 27 Jul 2025 01:01:20 +0000
Manifest this update: Sun 27 Jul 2025 01:01:20 +0000
Manifest next update: Mon 28 Jul 2025 01:01:20 +0000
Files and hashes: 1: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl (hash: 2NgkhmaB1XnFETGGGn9yfLddZuF2dqB+2u6icD9ny7s=)
2: OCedJE5LkoowQn54mjjrBJCuPJI.roa (hash: nw4YWjZiCna7KJhUNUrep5sUi3EwU231+kVKK+38ws8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:09:3f:e7:75:eb:51:c2:09:10:70:ab:52:59:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Validity
Not Before: Jul 27 01:01:20 2025 GMT
Not After : Jul 28 01:01:20 2025 GMT
Subject: CN=46807c1ffb3cde0c466c0b71fb929119a13260d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:10:0b:b5:ad:fe:3c:1a:fa:45:a9:1e:06:
2b:56:bb:06:4a:99:de:47:de:59:3c:da:05:e5:cd:
49:67:07:4f:19:22:ee:de:cb:32:8d:99:3b:77:02:
c8:02:6e:c6:1e:63:f8:ac:c8:a0:38:e8:98:06:d7:
9c:6c:8e:a9:8c:99:ad:cb:e1:82:12:d6:0d:67:44:
7a:6e:a4:9b:b9:b5:1b:64:01:0c:13:34:3f:ae:07:
b1:bc:5b:5c:71:fc:bc:5d:99:a2:7a:9e:c2:29:42:
14:86:36:29:eb:c2:46:67:6c:84:bc:b3:f9:d3:83:
5f:6b:41:62:10:5c:ca:df:9a:7e:49:3f:71:16:3f:
a5:42:b2:55:d6:d9:9a:e1:fb:f1:e8:30:63:da:77:
94:f2:a5:5a:9c:f2:5b:69:8e:1f:a8:f5:f3:32:60:
b0:11:8e:84:c8:18:73:52:ed:2a:73:31:66:ea:79:
63:2c:2b:84:60:93:5b:a1:12:40:0c:42:c5:97:47:
c4:4f:3b:be:b7:00:7f:35:03:47:e8:1c:6c:47:59:
54:bf:19:1a:cf:b6:bb:31:86:ec:3b:94:c2:b3:28:
48:3d:8d:f6:cb:00:18:d5:f4:2e:b4:7e:12:de:68:
c4:51:7b:a8:62:23:57:92:bf:31:2d:67:7f:14:6c:
27:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:80:7C:1F:FB:3C:DE:0C:46:6C:0B:71:FB:92:91:19:A1:32:60:D2
X509v3 Authority Key Identifier:
keyid:F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:2c:f5:fc:3f:24:57:5d:f8:38:c7:bf:ed:b4:24:e2:72:f3:
71:e9:c5:f0:19:03:6d:8a:9b:14:9e:0c:0b:13:0f:05:1c:14:
51:a4:75:ba:4b:77:31:cf:4e:1a:47:ff:22:c0:d9:d1:49:e2:
ad:18:9d:82:da:d1:6c:2c:3a:79:d4:c1:2c:d6:39:c2:11:cf:
5f:8c:c2:9d:e9:b8:2f:2b:a5:12:68:96:9e:e6:f0:67:9a:2d:
e0:4d:5f:3f:8c:a2:a7:86:38:11:cd:07:7e:17:68:5d:39:d3:
8f:b7:7b:68:e2:bd:96:77:2c:99:8a:36:3f:2e:31:56:4a:bd:
2b:1c:20:6b:07:4c:dd:b8:ba:68:b8:15:dc:4e:a4:53:56:38:
ff:fb:ba:2d:98:2d:bc:0f:10:aa:f0:e0:95:36:1a:75:5d:ca:
9a:7c:c1:94:8e:47:71:72:38:e0:d0:5a:82:22:54:98:94:71:
55:59:8f:2d:68:6a:10:40:ed:c0:b1:48:23:82:85:01:31:2e:
41:e7:7a:39:34:8c:11:9b:16:35:83:88:f3:28:e6:46:cc:c9:
77:a6:14:df:70:8e:b8:3a:50:05:66:ce:f0:89:95:f7:05:af:
e5:dc:f2:ef:f4:04:dc:b7:b2:a7:30:31:e7:90:8c:df:bb:5d:
79:78:21:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:22:37 2025 by rpki-client