Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
File: S-zMnRp26RRpy2OxK_cl1966-xs.mft (raw, json)
Hash identifier: XNlmNtGS6pcn2KrBVHodcEylt47ZAi6ug656ynSzB+k=
Subject key identifier: E7:EC:75:32:87:8E:9A:5F:63:40:84:CB:92:B6:FE:F7:02:64:3E:BF
Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
Certificate issuer: /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Certificate serial: 01974DB2B269FFBFC1E75FF4BD3D22F54FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
Manifest number: 0B86
Signing time: Sun 08 Jun 2025 04:00:46 +0000
Manifest this update: Sun 08 Jun 2025 04:00:46 +0000
Manifest next update: Mon 09 Jun 2025 04:00:46 +0000
Files and hashes: 1: 7fSgZ-LQDYvguJzdZ14V0z0FUCE.roa (hash: bUjKLDflZP/Ln3EKUyE+zKMongCT5xOF2uDWHet5S9I=)
2: DiRUXj-wMeKTJD3aUfG_fU2alsE.roa (hash: C8nsHrwSkn8Gd1JmzSYSfUzGZSwYITwrUGRtmf3pI4s=)
3: Ru-jgtHHtk22zU2Iz9obbyyNqtA.roa (hash: JK2Fg/eBJyup1fiSh8xdKaGSDAo/evkcOv83dZLvh1k=)
4: S-zMnRp26RRpy2OxK_cl1966-xs.crl (hash: bhNidOeBf/eMqUzUJrmSkzH5ukajODl7zjDLLqgVw8g=)
5: WzBH8kAZVhitfGs3LpWEVIaX2DU.roa (hash: yyE311L3mhjCKLl6ozIj/e45U2t4pgo+mFiZj5vWZ9E=)
6: vTYkTnZMEaqfhCdiY5ia6c9viZw.roa (hash: m5F7OL9Eo2LVurzs6A9iXzsVS70f86h9K1zL5V462Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:b2:69:ff:bf:c1:e7:5f:f4:bd:3d:22:f5:4f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Validity
Not Before: Jun 8 04:00:46 2025 GMT
Not After : Jun 9 04:00:46 2025 GMT
Subject: CN=e7ec7532878e9a5f634084cb92b6fef702643ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ba:96:33:ef:37:37:d4:3b:71:01:bb:f0:5e:
d7:56:11:ec:df:ee:ed:c6:aa:00:26:21:12:f2:89:
62:34:2a:62:64:6c:cd:25:f5:a3:e7:4c:2f:f5:29:
fb:21:78:44:d3:63:62:eb:67:3c:29:7c:ac:03:24:
39:12:2e:66:d2:c5:a7:ca:16:df:da:18:bd:82:b1:
53:7f:02:1a:a4:80:12:ce:b8:9f:17:2f:05:58:72:
ad:46:98:51:5a:68:81:ce:6a:20:ed:52:57:65:c5:
bf:63:20:fc:e3:66:39:cb:c9:20:10:36:ab:cd:76:
ba:27:64:17:c5:c3:08:7e:dd:69:2d:45:e8:97:41:
8a:1b:9b:4a:9a:b9:5f:04:cc:77:e4:e5:bb:84:ce:
57:9e:7b:45:7c:e3:1c:43:0b:7d:8e:21:84:76:fc:
fa:58:f3:f4:ff:83:a8:d8:be:cb:d0:32:81:21:01:
de:33:8e:79:4a:6e:89:2d:c3:3f:3c:94:ec:4d:7a:
56:21:7e:16:1f:94:61:a7:d8:e0:6b:20:f8:93:66:
e3:e0:7f:de:48:c6:ff:7b:3c:f2:fc:61:d9:19:7a:
3f:b0:1b:23:6a:7e:2c:e8:7f:62:55:58:38:26:93:
af:68:b4:f7:50:83:6b:ae:a3:e7:27:6d:ed:86:2c:
91:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EC:75:32:87:8E:9A:5F:63:40:84:CB:92:B6:FE:F7:02:64:3E:BF
X509v3 Authority Key Identifier:
keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:7a:91:c3:16:4f:51:4b:cf:15:8a:0f:a1:56:e3:df:de:b9:
2e:cd:08:f2:42:aa:af:e7:3c:9c:6e:b5:5a:e9:5c:1f:a7:c8:
2b:0d:ec:f7:1a:0a:87:25:57:f5:86:ff:fc:1e:39:30:19:84:
e6:e1:d1:39:ef:e7:46:2e:90:18:c0:7c:9d:9b:57:31:7d:14:
46:d0:1b:6f:43:f6:98:2e:06:60:53:5c:b6:b7:51:e4:c4:cc:
f8:84:f2:0d:0b:fa:49:3a:05:5f:44:ac:e2:8a:e9:e8:67:8c:
4b:3c:17:72:11:48:1b:0f:52:c2:b3:a9:63:c0:d2:ef:f9:45:
57:2e:2e:50:74:3e:b9:ea:c8:f2:fb:b6:a2:24:1e:83:dd:8e:
30:56:c2:85:a5:6e:df:ee:36:47:b1:1d:f1:b6:d9:27:cc:ab:
d0:87:68:96:10:dd:94:98:11:a1:ad:3e:74:d1:35:e1:2d:13:
6e:0b:59:1d:2c:5f:b7:ae:b2:33:61:d5:55:16:6d:5e:2b:f8:
51:e1:f3:5f:aa:09:b1:f8:ad:59:dd:86:b7:1b:f3:07:8f:6c:
21:74:d8:0c:6b:e4:2a:27:20:96:72:7c:d6:74:93:46:07:ba:
bb:13:3f:79:8a:91:e4:b5:53:ec:a6:45:27:98:98:e7:e7:aa:
d1:c2:cf:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:16:47 2025 by rpki-client