Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
File: S1ejnbXHqja-gs11HlDLkCMDPco.mft (raw, json)
Hash identifier: oLl915eCNuQrriHjWbrMj795GobRZCH50GusB9JsLJY=
Subject key identifier: C1:61:13:EE:CB:EF:39:F2:C6:AD:1A:8C:6B:96:09:EF:55:75:63:10
Authority key identifier: 4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
Certificate issuer: /CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Certificate serial: 0198439B546B461C87484AA78F7F82C7A094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
Manifest number: 01C3
Signing time: Fri 25 Jul 2025 22:01:49 +0000
Manifest this update: Fri 25 Jul 2025 22:01:49 +0000
Manifest next update: Sat 26 Jul 2025 22:01:49 +0000
Files and hashes: 1: S1ejnbXHqja-gs11HlDLkCMDPco.crl (hash: +5JqSRT7MkEKnrGYAMPdQ0Al2N+R8ITRn+8rxFdVSqU=)
2: zO8Iwb0BsWTcNVLMLIiP_wo8DJM.roa (hash: OPJwqPTjOpu2TkWSPAK04GvaPgxXe8e980q4NWTbl0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9b:54:6b:46:1c:87:48:4a:a7:8f:7f:82:c7:a0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Validity
Not Before: Jul 25 22:01:49 2025 GMT
Not After : Jul 26 22:01:49 2025 GMT
Subject: CN=c16113eecbef39f2c6ad1a8c6b9609ef55756310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:3a:88:fe:85:c6:a2:fc:8a:00:cb:4a:4d:
de:dd:44:3d:2a:70:76:22:61:2d:fb:99:51:67:47:
d2:2f:86:bb:31:68:71:7c:59:91:14:46:4a:a1:b4:
08:aa:5d:e0:f7:f4:1a:96:74:8e:d7:66:85:13:1f:
f8:e1:78:ec:cb:9c:e5:d0:61:59:4a:ae:6c:94:3f:
5d:4b:b1:ba:bc:a0:83:d9:9d:1e:2c:0d:ff:dc:fd:
92:d6:4f:a8:c3:b1:0a:a5:9d:d0:3f:d0:0a:71:26:
5b:f5:d9:86:9f:da:d3:b1:61:d9:ec:fd:0b:f8:75:
f5:4d:10:e0:09:f8:ff:cc:0b:13:fb:c8:d4:42:05:
6a:d1:d4:1f:cf:50:ec:3b:15:95:f2:b5:8e:c6:61:
6b:4c:dc:f9:57:35:fc:f9:00:06:0c:ae:00:ab:8f:
d5:7b:cc:56:91:54:eb:de:c3:36:e6:0d:9e:3d:e0:
6d:1d:f3:3c:0c:c0:10:b4:62:2d:e5:9d:03:c7:79:
5a:03:ac:97:5e:e1:04:cf:a0:43:53:23:da:e9:9d:
5c:f5:48:97:fd:2c:86:d8:3c:1d:62:7d:29:92:f8:
82:33:c3:b7:57:cb:e1:6a:69:e9:c0:62:05:59:e4:
c0:4a:f2:11:f1:d1:9a:0b:4b:99:41:96:1b:9a:64:
0f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:61:13:EE:CB:EF:39:F2:C6:AD:1A:8C:6B:96:09:EF:55:75:63:10
X509v3 Authority Key Identifier:
keyid:4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:49:66:39:73:62:71:cb:af:ea:6f:cc:37:d6:28:2b:be:ae:
3e:c1:ee:ea:6c:58:57:2a:a8:d6:a2:69:d2:34:d7:22:0d:f3:
fa:23:42:85:61:82:bd:58:b5:3c:0a:ff:6c:f7:a3:e3:b5:6b:
7a:59:42:c7:4f:92:4e:de:32:63:42:e4:a0:3c:e1:0c:cf:c1:
8d:94:9c:c4:01:ea:e8:ce:63:51:d6:77:bb:83:65:25:f0:8d:
23:48:a6:a3:4d:83:28:63:0f:83:b2:a8:c6:0a:40:5f:48:68:
16:bd:de:33:93:49:fd:d6:63:b5:43:ea:67:94:ef:f3:d8:b6:
5f:aa:1c:04:d8:f0:98:63:69:c9:69:7f:9c:c1:97:ed:64:28:
8e:d1:5a:5c:3a:3b:b8:c4:18:c1:cd:06:f4:e9:17:cf:8c:20:
21:08:4b:90:f4:86:70:b4:cb:21:cc:82:76:ed:83:88:3a:2d:
6c:34:45:32:50:dd:58:dd:4b:76:8a:e3:ff:84:5e:75:16:58:
28:e2:91:dc:f6:10:a9:b7:a2:cc:48:b8:d2:18:8a:39:d6:96:
f1:91:d2:e7:e2:c1:8c:14:5c:87:d3:5d:76:d8:99:0c:6b:e4:
1f:8d:59:5b:d6:a4:5a:af:5e:06:a8:f7:33:45:c6:8d:f5:ec:
c1:ec:c0:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhDm1RrRhyHSEqnj3+Cx6CUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNTdhMzlkYjVjN2FhMzZiZTgyY2Q3NTFlNTBjYjkwMjMw
MzNkY2EwHhcNMjUwNzI1MjIwMTQ5WhcNMjUwNzI2MjIwMTQ5WjAzMTEwLwYDVQQD
EyhjMTYxMTNlZWNiZWYzOWYyYzZhZDFhOGM2Yjk2MDllZjU1NzU2MzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbI6iP6FxqL8igDLSk3e3UQ9KnB2
ImEt+5lRZ0fSL4a7MWhxfFmRFEZKobQIql3g9/QalnSO12aFEx/44Xjsy5zl0GFZ
Sq5slD9dS7G6vKCD2Z0eLA3/3P2S1k+ow7EKpZ3QP9AKcSZb9dmGn9rTsWHZ7P0L
+HX1TRDgCfj/zAsT+8jUQgVq0dQfz1DsOxWV8rWOxmFrTNz5VzX8+QAGDK4Aq4/V
e8xWkVTr3sM25g2ePeBtHfM8DMAQtGIt5Z0Dx3laA6yXXuEEz6BDUyPa6Z1c9UiX
/SyG2DwdYn0pkviCM8O3V8vhamnpwGIFWeTASvIR8dGaC0uZQZYbmmQPZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFhE+7L7znyxq0ajGuWCe9VdWMQMB8GA1UdIwQY
MBaAFEtXo521x6o2voLNdR5Qy5AjAz3KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzFlam5iWEhxamEtZ3MxMUhsRExrQ01EUGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83YTY5YjUtMmJmYi00ODFhLWIzZmIt
YjNkMTg5NmYzNjlmLzEvUzFlam5iWEhxamEtZ3MxMUhsRExrQ01EUGNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi83YTY5YjUtMmJmYi00ODFhLWIzZmItYjNkMTg5NmYzNjlm
LzEvUzFlam5iWEhxamEtZ3MxMUhsRExrQ01EUGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWElmOXNi
ccuv6m/MN9YoK76uPsHu6mxYVyqo1qJp0jTXIg3z+iNChWGCvVi1PAr/bPej47Vr
ellCx0+STt4yY0LkoDzhDM/BjZScxAHq6M5jUdZ3u4NlJfCNI0imo02DKGMPg7Ko
xgpAX0hoFr3eM5NJ/dZjtUPqZ5Tv89i2X6ocBNjwmGNpyWl/nMGX7WQojtFaXDo7
uMQYwc0G9OkXz4wgIQhLkPSGcLTLIcyCdu2DiDotbDRFMlDdWN1Ldorj/4RedRZY
KOKR3PYQqbeizEi40hiKOdaW8ZHS5+LBjBRch9NddtiZDGvkH41ZW9akWq9eBqj3
M0XGjfXswezAiA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:03:59 2025 by rpki-client