Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
File: S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft (raw, json)
Hash identifier: 6W02vDCrpVgysmMbcnXdImTBIxvbh6os6S6zHenbqyw=
Subject key identifier: 51:37:FF:DE:DE:C7:58:0B:A9:F4:2A:7B:52:DC:FC:AE:5A:F7:B8:24
Authority key identifier: 4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD
Certificate issuer: /CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
Certificate serial: 01991CC1D14ED39A45F64A9E182F8E131B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
Manifest number: 0347
Signing time: Sat 06 Sep 2025 02:01:27 +0000
Manifest this update: Sat 06 Sep 2025 02:01:27 +0000
Manifest next update: Sun 07 Sep 2025 02:01:27 +0000
Files and hashes: 1: N2ivlz1wZCpdYYLO1Jxljykvn4c.roa (hash: qYmGGsXcI2a1eHN7AFVSkBu0axGqB7MkOzzu5zM+aAU=)
2: S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl (hash: NwfIPtTrBim8hipyyMkG/y4Tf7det0GvDTXL9+r9A78=)
3: y-thR2-wOGxjUF2dmavWMwBsUm0.roa (hash: WQLO7IU5V5iq1uzzyryZYM1QGfm/WLluTpgcnyQ2D8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1c:c1:d1:4e:d3:9a:45:f6:4a:9e:18:2f:8e:13:1b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
Validity
Not Before: Sep 6 02:01:27 2025 GMT
Not After : Sep 7 02:01:27 2025 GMT
Subject: CN=5137ffdedec7580ba9f42a7b52dcfcae5af7b824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:65:fa:38:bc:c7:22:7c:8b:0a:91:26:31:36:
3c:61:43:ea:98:d0:1b:eb:64:e1:ef:21:7e:08:d8:
4b:6a:61:8d:44:d4:8e:c7:2c:5a:da:5f:34:32:2d:
de:c5:59:0c:cc:8f:e3:d1:e7:f6:4b:15:fa:52:71:
a9:c6:8a:79:ce:e7:4f:e8:63:f0:4d:bc:90:eb:26:
dc:86:ec:46:d6:e2:f3:08:f1:1b:3d:6f:a6:15:12:
00:91:ce:89:9c:ca:09:c1:0c:8a:94:f0:92:14:a9:
db:09:04:26:64:80:ac:f1:29:8f:ec:11:2d:96:38:
31:09:ed:9e:eb:9a:a3:99:13:60:9a:7d:2c:53:26:
2a:4b:a6:b2:2c:00:3c:47:df:cb:f5:45:d8:cb:22:
ca:d2:73:e5:0a:ca:93:c3:bd:82:1a:04:5c:3c:be:
8e:2b:77:5b:af:7e:79:61:fe:eb:e3:c8:4b:a0:63:
42:21:db:4b:d5:35:32:df:44:af:cf:cb:3b:c5:69:
fc:84:11:71:34:c0:a8:de:fe:7e:7a:ad:09:11:b6:
1f:b2:9c:04:92:26:b1:cd:fc:4f:46:71:a9:b9:bc:
a3:ec:24:91:4a:26:f8:d5:2c:20:9f:9e:96:cc:0b:
30:91:63:5c:4b:1f:d6:94:87:0a:cc:c5:ca:68:07:
62:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:37:FF:DE:DE:C7:58:0B:A9:F4:2A:7B:52:DC:FC:AE:5A:F7:B8:24
X509v3 Authority Key Identifier:
keyid:4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b2:94:d6:17:1c:a3:3a:9b:46:15:2f:93:42:a9:75:cc:fa:
24:53:6a:a9:cb:d0:20:d6:8b:8e:0b:84:96:1f:d9:28:8c:a5:
64:62:99:ee:76:39:eb:be:ac:8f:77:57:ab:7a:b4:80:c8:82:
e7:3d:9f:87:2d:49:db:b3:1b:8b:40:89:e1:f7:82:49:0b:ed:
e3:9b:f2:36:da:9b:da:09:8d:25:02:90:a7:a1:d8:36:0a:a5:
3b:fd:96:ee:4b:c1:21:31:71:ee:5e:75:7a:9e:b5:23:23:61:
a2:ed:51:36:93:ca:a2:57:b5:be:03:82:e0:c8:1c:fd:c5:d0:
5e:30:6b:d0:ea:86:1d:20:2d:ab:ac:3b:ad:8c:72:33:36:63:
6b:7f:90:71:e6:d8:08:82:60:93:85:b3:2e:4e:a0:89:93:30:
d0:a8:89:ec:ca:d8:5b:97:22:cf:fb:b6:bf:b3:33:92:6c:8b:
b0:c2:7d:bc:8d:80:7e:bc:02:74:4f:bd:6f:e1:ea:45:37:58:
68:c5:85:48:ac:ac:f5:38:b0:01:d8:26:67:ff:4a:c6:d7:12:
b8:f1:f6:69:d6:ca:95:e0:bf:6e:02:ca:7f:fc:f8:b7:76:4f:
6e:c4:3a:02:f1:64:bf:97:0c:ad:6c:39:e5:48:2d:3b:d9:ce:
c9:f9:82:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 12:27:50 2025 by rpki-client