Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
File: S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft (raw, json)
Hash identifier: G+T8DTPCMqOPRzzoruWwSxGNDDFkRcmamh49WhqeI/M=
Subject key identifier: 6F:8A:73:AE:1E:6E:62:44:E3:09:80:19:56:9E:2E:97:29:F3:FC:30
Authority key identifier: 4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A
Certificate issuer: /CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a
Certificate serial: 01974A7B966CFDC00C6620E259E72BB2F325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
Manifest number: 126A
Signing time: Sat 07 Jun 2025 13:01:42 +0000
Manifest this update: Sat 07 Jun 2025 13:01:42 +0000
Manifest next update: Sun 08 Jun 2025 13:01:42 +0000
Files and hashes: 1: S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl (hash: jVI5yZoSF0uAuAeomdyKfjT6+mE7kROEunOTMPxb96Y=)
2: v45LP4AF3yoZv3u_cLa6vnH8FvU.roa (hash: wIRAiX/f/YijUEe8NVGZoMtagmreVjKidBvqPjwb7Tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:96:6c:fd:c0:0c:66:20:e2:59:e7:2b:b2:f3:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a
Validity
Not Before: Jun 7 13:01:42 2025 GMT
Not After : Jun 8 13:01:42 2025 GMT
Subject: CN=6f8a73ae1e6e6244e3098019569e2e9729f3fc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5d:80:75:49:6f:4a:a1:73:42:81:c1:e9:f6:
06:57:7e:97:d2:63:51:b4:bb:ca:e9:c6:27:6c:07:
32:57:75:23:77:33:b6:92:da:09:c9:8e:39:72:c2:
5a:90:4d:e7:d8:b2:85:6b:34:26:3c:25:60:f0:c7:
81:00:dc:c7:85:11:0e:14:47:dc:c1:1a:bb:06:20:
81:b5:09:c2:88:f5:4d:88:ca:43:17:26:ba:61:07:
f1:fa:fc:fa:c2:56:dc:65:31:5c:90:92:2e:46:dd:
91:80:13:67:bb:89:f2:93:a8:af:4a:d6:82:34:fa:
96:6a:e7:55:aa:e7:96:e7:16:e3:29:7f:8e:26:9b:
31:d9:82:29:c2:a2:28:6a:49:f4:6d:32:87:1a:01:
b4:7e:5b:4a:92:fb:b1:98:fb:f3:c8:00:7b:81:5f:
72:75:ae:1b:c8:db:3e:4c:ab:1a:12:62:06:e5:4b:
08:7a:81:78:60:62:ea:91:ca:93:c3:10:db:df:ef:
de:9b:50:89:ef:89:4b:59:a1:f7:c4:d9:23:12:0a:
1b:39:1d:42:57:3f:57:02:4b:22:9c:b9:94:1a:67:
c2:15:22:7b:89:2c:8b:ff:cb:f0:50:dc:0d:cd:f9:
5c:57:b5:4e:30:7d:4a:0c:de:4e:ce:e7:ae:88:63:
54:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8A:73:AE:1E:6E:62:44:E3:09:80:19:56:9E:2E:97:29:F3:FC:30
X509v3 Authority Key Identifier:
keyid:4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:65:fc:80:02:72:d5:1a:9e:db:59:e0:8e:cc:6f:e1:c8:62:
1e:3f:66:7b:bf:6d:7b:e3:bc:94:00:e7:73:88:c9:e1:47:59:
4e:ab:40:98:ca:94:16:b4:21:ee:37:e7:eb:4e:ba:a6:74:82:
35:23:f4:bb:79:5c:cf:75:ea:a5:ba:5c:d2:f6:65:d9:1e:ea:
9c:d0:92:e2:82:e8:8b:25:5b:12:ee:f0:20:82:75:97:3c:29:
e6:1f:c7:33:6d:cb:ee:86:49:a2:9a:21:2b:2e:00:17:c5:48:
59:ca:1c:37:c7:01:3a:e0:a6:30:b1:a9:f5:d0:fd:e0:09:88:
f5:8b:5b:a1:91:c7:f4:99:bf:43:65:d4:75:75:fd:ef:ad:be:
5f:21:50:8e:75:3f:63:b0:fe:73:a9:71:61:78:8a:06:dc:df:
84:e5:4f:e7:bf:87:1b:f6:04:cf:a0:eb:92:2a:64:c7:56:c4:
fe:a4:2f:ff:32:c8:9f:bd:3c:fb:c0:f7:34:db:8b:51:90:be:
cc:a0:cb:45:31:18:e1:8f:9d:a1:4c:2b:18:76:62:97:ac:7f:
27:08:c5:0f:d3:c1:a4:04:92:86:14:af:15:00:ca:4a:92:89:
16:d8:27:09:02:38:81:4e:a4:ca:78:33:d5:ae:97:25:bd:ab:
86:a0:4d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:06:49 2025 by rpki-client