Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
File: S_asD7A5JnNFTDlH9DV-RZTtJm0.mft (raw, json)
Hash identifier: 90RFIsIzChTyTD6wkG1uYB+lybU3ur0iyQYAABExvzU=
Subject key identifier: 9E:CD:12:73:CD:09:BE:1C:41:C7:85:98:78:06:3C:25:91:4C:40:B6
Authority key identifier: 4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D
Certificate issuer: /CN=4bf6ac0fb0392673454c3947f4357e4594ed266d
Certificate serial: 0197507CAF7AAEB02B086F8F512807B47500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
Manifest number: 1582
Signing time: Sun 08 Jun 2025 17:00:37 +0000
Manifest this update: Sun 08 Jun 2025 17:00:37 +0000
Manifest next update: Mon 09 Jun 2025 17:00:37 +0000
Files and hashes: 1: S_asD7A5JnNFTDlH9DV-RZTtJm0.crl (hash: ylPtp0E125adwGAS+3LOtbVq9fdsPS9d+0QD3fDhn+o=)
2: VTOPr5cRplB2JyRppkTR7JFS0fo.roa (hash: s4FFCpaGghq+r1WTThyqyMnDAmNVSPddYtSZUOJOGf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:7c:af:7a:ae:b0:2b:08:6f:8f:51:28:07:b4:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf6ac0fb0392673454c3947f4357e4594ed266d
Validity
Not Before: Jun 8 17:00:37 2025 GMT
Not After : Jun 9 17:00:37 2025 GMT
Subject: CN=9ecd1273cd09be1c41c7859878063c25914c40b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8f:38:8e:4f:ab:19:e7:be:eb:f3:48:8a:0c:
70:f4:9a:91:45:45:9f:11:d2:9f:92:56:64:ce:2a:
68:3d:54:b7:d2:7b:f3:1e:7e:50:d1:d3:c1:b7:ee:
9c:2e:55:52:15:cc:26:37:e8:3e:a5:62:7b:84:e7:
a3:65:94:93:f0:36:69:56:c0:5c:2d:eb:8c:af:d2:
45:29:0e:6a:31:40:55:16:a1:7e:8a:f5:23:72:00:
62:a3:57:6b:89:a9:12:a8:85:da:69:a7:37:31:cc:
cf:fb:90:23:87:28:78:32:53:8d:58:f5:d2:ef:56:
c6:80:40:f7:cf:98:ea:2e:0e:3b:d3:82:d1:ff:38:
51:ce:2e:9d:eb:fb:07:8b:c0:71:f3:9d:e4:3c:de:
51:98:c4:8a:52:78:45:cf:99:b0:ba:47:ec:5b:db:
4b:0c:2f:55:68:df:d8:dc:f1:19:e4:b9:d0:39:ea:
24:a0:bf:13:19:23:52:b0:17:d1:4e:2d:2a:84:b9:
9d:d9:b6:95:c5:ff:9b:28:ae:d9:57:15:0c:d0:a6:
14:91:d6:f8:ac:7d:ec:66:e5:d2:c4:28:57:19:af:
e3:c8:07:2c:e2:01:54:fb:07:b9:2b:7f:5a:73:50:
97:19:a0:47:9c:de:6b:a8:13:7e:8e:b5:9c:32:07:
ab:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CD:12:73:CD:09:BE:1C:41:C7:85:98:78:06:3C:25:91:4C:40:B6
X509v3 Authority Key Identifier:
keyid:4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:fa:24:34:c6:6e:a4:7d:a2:13:3b:b8:d0:8f:4b:6f:3d:18:
f8:f2:45:8a:eb:c7:53:cd:a9:7d:95:78:7a:0d:fd:36:a6:95:
ed:83:35:93:4a:6a:97:cf:aa:63:37:b2:de:28:ec:90:be:5c:
02:c9:ed:75:4e:6f:8a:f2:60:fa:44:57:6f:e6:df:79:b9:f8:
dd:33:d3:32:e9:d4:04:c1:f8:6a:5c:ee:d2:b0:33:c8:57:53:
7e:bf:f9:cd:ca:06:fb:1a:cf:79:04:91:e0:83:5e:e2:f7:61:
9c:9c:bc:03:41:96:7f:0a:ad:cf:ed:14:62:8d:45:ee:ee:8e:
4b:13:9a:dc:eb:75:46:96:f1:c2:93:de:9a:bd:44:c3:26:ee:
89:39:bb:51:35:99:15:1f:7b:76:0b:95:e6:f0:a3:a2:6a:78:
cf:6b:3d:4c:01:b5:30:4d:b9:d3:89:71:a0:bd:07:37:fa:26:
fd:69:43:f3:65:48:8e:71:d1:e1:de:11:c8:e2:8a:04:a1:2a:
0f:9f:b1:55:31:88:31:86:95:60:98:d4:50:5f:a9:74:3b:ea:
95:b7:0d:ca:d1:0d:9f:ff:12:62:3a:6f:ec:b4:ea:0e:54:49:
57:a4:54:47:44:c3:3c:e0:e6:57:5d:cf:88:64:32:fe:d3:e2:
b1:b6:20:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:47:20 2025 by rpki-client