Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
File: S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft (raw, json)
Hash identifier: ZeEbU+zbwEwpAejdhw0PhbbQ9BMWbHUKXqm0PtyXXjk=
Subject key identifier: F4:02:97:C0:20:D8:29:E9:D0:D5:0E:AD:92:BE:06:C7:72:2D:BE:88
Authority key identifier: 4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD
Certificate issuer: /CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
Certificate serial: 0197496859066C1B5606A109AC9256CDCC42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
Manifest number: 0255
Signing time: Sat 07 Jun 2025 08:01:04 +0000
Manifest this update: Sat 07 Jun 2025 08:01:04 +0000
Manifest next update: Sun 08 Jun 2025 08:01:04 +0000
Files and hashes: 1: N2ivlz1wZCpdYYLO1Jxljykvn4c.roa (hash: qYmGGsXcI2a1eHN7AFVSkBu0axGqB7MkOzzu5zM+aAU=)
2: S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl (hash: QzRDl1QZLPz1Q9DvTXE+tiIQQZuoqWDn82g1naH1lnM=)
3: y-thR2-wOGxjUF2dmavWMwBsUm0.roa (hash: WQLO7IU5V5iq1uzzyryZYM1QGfm/WLluTpgcnyQ2D8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:59:06:6c:1b:56:06:a1:09:ac:92:56:cd:cc:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
Validity
Not Before: Jun 7 08:01:04 2025 GMT
Not After : Jun 8 08:01:04 2025 GMT
Subject: CN=f40297c020d829e9d0d50ead92be06c7722dbe88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b5:de:30:37:19:19:eb:3b:a4:18:0c:02:96:
d5:80:bc:ef:d8:4d:a4:79:84:c5:59:16:41:17:f0:
78:11:81:12:10:f0:1d:e7:2f:3f:af:11:7d:36:65:
4b:91:a6:59:0f:76:41:1c:96:7c:c6:3b:7b:52:75:
69:f9:cc:ca:3d:d6:16:7e:3e:70:0d:a0:ca:27:f3:
8e:81:71:4d:0f:ec:e9:67:97:9e:94:fa:2e:69:1a:
a7:1f:78:e6:50:30:0f:9b:6f:f9:4d:49:60:50:f5:
3e:20:f0:2f:16:82:05:68:45:d0:eb:0c:89:30:9d:
95:81:f2:5c:72:c7:18:18:12:47:0e:2e:8d:a5:ee:
99:c8:40:25:42:16:4e:5c:ee:63:62:05:fa:cf:30:
0b:64:e0:4c:f9:f4:e9:07:3e:21:cd:04:12:5c:b8:
b1:f5:7c:29:d9:90:68:bc:45:7a:5b:31:20:99:f9:
fc:9c:e3:fd:da:f6:a8:91:a5:b3:1c:11:40:ec:41:
a2:8b:3d:79:6d:9e:d3:1a:6f:3e:f7:c3:d4:a2:51:
9c:b1:ce:2c:23:8e:3b:80:f9:1f:74:d9:c9:a0:0a:
ed:89:66:2f:3c:ce:36:be:9d:93:15:ee:48:34:68:
94:db:02:68:0c:9d:b2:fd:1c:6c:e0:bd:b0:83:76:
f6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:02:97:C0:20:D8:29:E9:D0:D5:0E:AD:92:BE:06:C7:72:2D:BE:88
X509v3 Authority Key Identifier:
keyid:4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b0:28:4f:b0:ef:88:7c:7d:4f:bc:af:ff:0c:1c:12:4c:10:
3a:e1:a1:6d:8e:64:ff:86:53:17:8f:12:40:1b:38:4a:9d:c7:
45:fc:16:e3:d6:f5:e6:b1:17:00:2c:84:40:c4:2f:3e:f1:d0:
1b:24:c3:ae:28:0c:0a:b5:a8:f8:2b:7e:37:8d:9e:55:9b:f6:
da:6d:24:79:f9:4e:d6:a7:fe:d7:03:c1:1f:7e:4d:90:4b:c9:
5d:2c:97:b0:9b:ca:66:8a:ba:b5:5e:54:52:f8:c2:88:61:01:
8b:28:94:da:2c:68:7a:90:f8:3d:9c:c4:bc:78:a5:5a:aa:94:
60:48:7a:f1:9e:29:a7:1d:f9:6b:fc:eb:5a:67:4a:15:1f:6c:
3d:ef:64:11:0e:fc:09:8e:61:8d:3c:ca:05:bb:f9:da:5b:9b:
b7:ea:9a:85:82:20:12:58:5a:29:06:ae:58:d9:1e:0d:6e:b7:
a5:35:77:41:5b:43:28:12:8f:f7:74:eb:f7:8f:80:4b:08:a2:
d5:1b:07:60:c6:75:8d:d9:2c:17:fe:d8:af:b7:c1:0e:47:3f:
c7:5e:18:e8:51:7a:c4:b7:95:f0:4c:b7:f9:bc:56:57:4c:fa:
fb:3f:e5:17:36:7c:1e:76:ba:7e:c0:05:24:c8:3f:89:2d:f5:
2b:be:6b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:33:38 2025 by rpki-client