Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
File: S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft (raw, json)
Hash identifier: OsQy3Q8/ww8Nij/mOd/dEOa93qfF4LPsIA5P8rGUUzk=
Subject key identifier: 8A:9B:A8:1C:F2:30:E4:66:19:0C:5E:64:74:85:B8:55:08:66:CD:9A
Authority key identifier: 4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED
Certificate issuer: /CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed
Certificate serial: 01975CB813AC129AEE784C120DD71034753E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
Manifest number: 1586
Signing time: Wed 11 Jun 2025 02:00:56 +0000
Manifest this update: Wed 11 Jun 2025 02:00:56 +0000
Manifest next update: Thu 12 Jun 2025 02:00:56 +0000
Files and hashes: 1: S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl (hash: HTCB706vJYY4EiPwo/UouwAYWABQgFzdvI/ZfFG4qNM=)
2: gFxIm0EvZb8E8gIGHvo_aeEdfcc.roa (hash: 9yJ9gvi6b9QCclOd8XC4YqzlpMyCr1+KDE8Ku24SaCU=)
3: yQgmgvQc_zoWSzqSU_Jv0P1q3MI.roa (hash: 5+4u/xRZxAnli4CKdBW1paOkXTRYuiJAT5ksmVQ4GNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:b8:13:ac:12:9a:ee:78:4c:12:0d:d7:10:34:75:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed
Validity
Not Before: Jun 11 02:00:56 2025 GMT
Not After : Jun 12 02:00:56 2025 GMT
Subject: CN=8a9ba81cf230e466190c5e647485b8550866cd9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:22:73:3e:09:7e:07:b8:63:a7:b6:ad:42:2b:
7f:eb:37:39:3b:38:e9:59:ba:00:21:82:c3:97:71:
eb:49:e6:12:09:8f:d6:61:93:66:cf:53:6e:20:e8:
cf:a0:61:b1:9a:87:31:f3:77:f9:02:67:b8:47:e1:
57:fd:7a:69:8d:1b:03:95:92:7f:73:18:66:70:60:
39:de:16:29:3b:81:92:3d:eb:9e:23:2c:97:0f:91:
c4:42:17:c0:b0:6a:2a:1e:a8:1b:59:a2:73:bc:b1:
75:c3:51:c3:c6:d1:af:37:80:c0:53:0c:ca:40:c0:
06:90:0e:10:ec:2c:dc:2a:ec:55:66:3b:48:2c:98:
0a:15:8b:e2:74:52:54:3d:05:7e:b6:ce:7e:6c:1a:
69:1d:df:bf:b2:a0:a7:d6:2e:91:c8:dd:91:66:67:
ca:7e:58:e2:99:a9:2e:0e:6e:37:81:93:12:91:9c:
d8:6e:e6:53:aa:c5:81:25:b5:66:f5:11:19:74:cb:
b7:1d:8e:de:ee:04:56:0d:cd:98:ad:a6:c6:c6:86:
a6:35:88:1b:06:c8:37:55:2c:fd:8f:21:c3:ca:e7:
62:72:30:5c:b3:b1:a7:0d:01:3f:d3:e2:21:aa:fd:
7c:c4:d0:0f:81:77:d2:e2:85:f7:fe:f9:fb:fb:bf:
7b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9B:A8:1C:F2:30:E4:66:19:0C:5E:64:74:85:B8:55:08:66:CD:9A
X509v3 Authority Key Identifier:
keyid:4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:ea:32:3e:0a:2b:06:a6:72:41:2c:d4:8f:1b:59:64:65:46:
5a:98:26:d9:00:e1:b8:58:13:eb:c0:98:05:2e:cc:3d:e2:55:
b2:2e:20:e5:db:36:f7:a8:f3:3d:ee:f2:19:3c:ff:bd:e6:0f:
e7:a3:87:ff:02:0c:fa:fb:50:72:5a:58:02:cc:72:63:e8:53:
96:b7:89:5d:92:2f:22:4c:19:91:8b:30:6b:6d:ff:94:fe:e4:
eb:f1:f9:4d:4e:66:9d:06:e7:92:a0:e0:59:22:14:1f:ea:68:
1d:e5:ea:ea:9b:b8:69:a8:77:7b:ca:68:3f:1f:04:16:4a:d7:
99:42:a5:09:05:af:84:fb:92:af:77:29:9b:d0:2e:43:09:70:
32:47:90:ff:ea:a7:46:e4:89:0e:29:58:a8:bc:8a:06:5f:2d:
9b:c7:1e:df:6c:c1:53:ce:75:ac:53:51:92:71:6a:68:49:78:
1c:74:c6:25:be:49:46:8b:f5:51:5a:d8:67:27:4e:fe:5e:26:
6c:bc:2b:27:df:48:d7:1a:df:85:f3:7e:09:c3:f9:a0:be:df:
9d:8d:ff:f1:0a:b2:b3:3a:44:5c:18:93:58:a1:79:0f:4b:dd:
71:87:f8:de:97:ff:4a:16:81:b1:c2:a9:48:99:78:5d:9f:15:
69:3f:f9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:47:37 2025 by rpki-client