Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
File: S82iMJZ8_y7eIXfy0zKvCst-ULw.mft (raw, json)
Hash identifier: fDVjGSUuKumbp7sP5LAGw8OP8RCL1bAtwRQ1gCph8nM=
Subject key identifier: 40:EF:41:7F:A9:27:11:90:69:38:EF:05:72:A7:AA:42:DD:FB:D6:1C
Authority key identifier: 4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC
Certificate issuer: /CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
Certificate serial: 019922FA84A4DF29209DC910C459F8CA8534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 07:01:07 +0000
Manifest this update: Sun 07 Sep 2025 07:01:07 +0000
Manifest next update: Mon 08 Sep 2025 07:01:07 +0000
Files and hashes: 1: Fu8psE_bzNyJ-uC9sx-rTJ-3C5Y.roa (hash: reqjwr/lIQUNR5CfmDP6LbkF/9R8ba/CN2hm8CCraWc=)
2: S82iMJZ8_y7eIXfy0zKvCst-ULw.crl (hash: GIWJCqWeKATYWDL5cNPFF+2pCaQT7w8hXU9cPrP8on0=)
3: zxQl6jvGeb1c6IVFjqYVLDZ62L0.roa (hash: 1fee2j1QaONApl9ibC5gkmW09S49dKdtErXLxO2GvfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:84:a4:df:29:20:9d:c9:10:c4:59:f8:ca:85:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
Validity
Not Before: Sep 7 07:01:07 2025 GMT
Not After : Sep 8 07:01:07 2025 GMT
Subject: CN=40ef417fa92711906938ef0572a7aa42ddfbd61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:83:86:fa:40:9d:76:ef:1b:c5:f6:97:5b:fe:
a5:68:f0:10:a6:9c:f2:f6:5a:ec:6b:07:5b:9e:2b:
b5:4c:af:d8:8f:3e:4d:f4:dc:2d:7d:d0:a8:38:96:
ae:d6:b5:05:81:ca:be:e9:7d:ef:d7:df:5e:5f:f5:
76:50:8c:0b:92:d4:d9:67:70:a1:1d:89:07:64:ca:
ab:53:a6:f8:5c:27:a8:2b:dc:11:c1:85:83:2b:55:
6a:1d:6f:3d:2c:37:71:29:4a:80:c1:64:4d:94:3b:
7b:9a:95:d3:92:29:6f:d5:62:28:cc:2f:7d:22:37:
69:4d:f8:87:c8:b1:df:70:24:94:4f:ab:58:60:c8:
2a:9b:0d:5e:98:59:b0:38:e9:49:f1:eb:a5:28:af:
db:d9:de:51:3f:b0:c3:69:11:9c:fe:a6:e9:c5:e7:
0f:33:88:f7:35:40:a5:e7:70:e0:4d:86:c0:16:2d:
8a:2b:00:97:91:02:24:2d:1e:39:40:47:e9:4f:a7:
4a:b0:a1:54:18:c0:96:86:02:6a:48:72:1e:fb:50:
f8:16:92:57:fd:db:54:7f:a8:fa:8b:78:f1:8a:d4:
75:1c:c6:9f:aa:7b:15:29:c2:bd:4a:2b:8a:84:77:
b9:c5:32:65:f0:35:1a:ab:bd:b9:e1:57:95:f8:3d:
6f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EF:41:7F:A9:27:11:90:69:38:EF:05:72:A7:AA:42:DD:FB:D6:1C
X509v3 Authority Key Identifier:
keyid:4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:4e:ef:ab:69:a7:6d:9e:c5:cd:89:92:90:6b:24:76:ff:45:
43:8d:33:25:59:5a:78:f7:ab:21:a8:ed:98:3a:ff:08:98:b2:
38:df:97:d4:5d:e6:39:2b:ed:e0:a1:d7:a9:e9:be:b3:89:a2:
37:b2:ff:a3:31:98:3c:f1:b0:4f:ea:ee:d8:fe:7a:af:2f:98:
8f:6e:8a:b4:95:6c:40:e5:41:0c:6c:dd:ce:85:25:db:66:b6:
7d:7a:40:3c:56:ed:68:ff:a9:bb:c3:32:80:b7:c1:5c:d3:ee:
ac:00:5e:e2:b3:e6:f2:fb:c0:fb:1f:d0:54:eb:a4:78:f0:c6:
42:42:fc:65:53:06:fa:07:02:40:36:60:c0:b3:df:e2:5b:fc:
dc:99:69:11:94:73:34:cd:7e:0e:24:1b:bb:9a:5b:ba:45:b7:
e5:4e:f9:e9:25:36:90:e4:44:2e:e3:fe:43:1b:0d:71:c3:df:
8c:f0:55:e1:ba:8d:5d:6f:51:42:5b:6d:b8:ae:63:79:9b:3c:
3a:8d:2e:c1:18:26:a6:e3:cb:a0:a9:97:af:01:8a:76:9b:e2:
05:fa:c3:55:25:fb:d3:ac:87:44:58:e9:e5:73:8d:02:4c:5f:
8e:45:1a:1b:98:5c:c9:1c:a8:31:1c:c6:05:b6:21:48:ba:46:
93:20:79:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:50:46 2025 by rpki-client