Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
File: S_asD7A5JnNFTDlH9DV-RZTtJm0.mft (raw, json)
Hash identifier: BPfCnJEBKfcg1KyPCF49JbBTGkCNfXryqefbymV1xOQ=
Subject key identifier: 6A:E6:A4:C5:7D:1C:E2:BB:A7:88:72:AC:E2:38:E3:D7:80:69:BC:85
Authority key identifier: 4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D
Certificate issuer: /CN=4bf6ac0fb0392673454c3947f4357e4594ed266d
Certificate serial: 019921E8037BE05267A5AC72D113DF08EE92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 02:01:17 +0000
Manifest this update: Sun 07 Sep 2025 02:01:17 +0000
Manifest next update: Mon 08 Sep 2025 02:01:17 +0000
Files and hashes: 1: S_asD7A5JnNFTDlH9DV-RZTtJm0.crl (hash: +AQM5GHdfoDRgpdGlfSYZbJCOi6gv79OjyLgb62+oYQ=)
2: VTOPr5cRplB2JyRppkTR7JFS0fo.roa (hash: s4FFCpaGghq+r1WTThyqyMnDAmNVSPddYtSZUOJOGf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e8:03:7b:e0:52:67:a5:ac:72:d1:13:df:08:ee:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf6ac0fb0392673454c3947f4357e4594ed266d
Validity
Not Before: Sep 7 02:01:17 2025 GMT
Not After : Sep 8 02:01:17 2025 GMT
Subject: CN=6ae6a4c57d1ce2bba78872ace238e3d78069bc85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:61:f8:92:94:4d:4e:c1:59:80:2c:bb:d2:b0:
13:7d:8c:70:5d:e4:7b:ce:b5:50:46:c1:17:d5:d3:
b9:40:16:00:96:1b:5b:dc:da:81:3c:f8:50:ab:c6:
0b:55:ea:72:37:19:4d:df:76:e6:78:fa:2a:21:0a:
8d:be:98:2a:0d:71:08:7e:5f:ec:03:7e:ac:6d:ac:
67:45:ac:7a:f9:fd:a0:00:ac:71:5b:75:90:e6:ca:
83:5d:0d:9d:51:47:43:75:63:58:83:ee:12:84:7f:
a4:e7:46:c7:64:42:b6:5a:5e:60:c6:ce:c5:d6:91:
41:51:c7:73:eb:a4:a4:35:88:f2:97:14:58:88:70:
3b:be:b8:df:cc:a6:66:f5:e0:5c:48:49:33:8b:d6:
f8:66:e3:4e:e0:7a:f4:cd:0c:23:e3:63:57:7a:c3:
8e:fe:31:40:08:3a:86:4f:ec:21:ba:20:a9:c8:3a:
2e:27:f1:da:7c:cf:0d:c5:00:44:28:69:fa:37:b6:
e2:7d:0c:bf:4c:ef:b0:d2:69:f3:d0:f5:b5:4a:33:
7a:c9:87:b4:23:04:c1:ff:f9:79:f6:40:72:6c:4e:
5f:b4:be:36:eb:cd:ea:31:6c:82:fa:c8:b6:3c:a8:
c5:23:98:da:72:61:e7:99:e2:73:73:db:fe:9b:76:
f6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E6:A4:C5:7D:1C:E2:BB:A7:88:72:AC:E2:38:E3:D7:80:69:BC:85
X509v3 Authority Key Identifier:
keyid:4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:09:a7:c5:8c:41:d8:4a:39:cf:53:f5:1c:0c:73:fc:b7:81:
04:ed:45:33:82:80:f4:88:33:d8:f2:97:ea:14:49:ee:ea:c3:
cd:6e:30:96:e2:2b:07:18:8b:56:8d:0d:38:bf:09:d6:38:93:
53:ff:76:fb:60:27:43:33:81:83:6d:d2:16:3c:fe:11:21:1c:
0b:d6:6b:42:27:fb:27:32:bf:41:e0:7f:51:a1:8e:12:d9:b0:
8a:92:02:7f:75:e5:f8:a1:92:de:34:d0:42:2a:ef:b6:01:ca:
35:f1:04:57:3e:0b:33:96:6b:2f:dd:f3:34:a6:4e:6f:c4:a7:
81:11:72:31:a0:e9:07:3c:e1:3c:c3:3e:49:dc:93:44:60:28:
37:5f:91:53:f0:ad:1a:bb:a2:24:0a:3c:ba:fb:17:c7:24:15:
cb:d9:08:f6:54:93:65:3d:ed:eb:8d:e5:7e:01:eb:20:ee:e4:
d4:da:30:19:4e:c2:a5:a3:13:da:f6:e6:6b:c9:4b:b9:4b:0e:
89:e1:08:75:ac:ee:d1:2f:17:ea:c1:f9:a8:93:85:29:18:9f:
5d:80:0f:4d:f2:9d:75:b6:9c:13:47:40:a0:9b:7a:07:23:4c:
90:41:91:6b:a6:ed:a2:36:07:1b:97:d1:f9:52:d8:16:2b:d1:
bb:3e:3f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:03 2025 by rpki-client