
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
File: S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft (raw, json)
Hash identifier: 6Djo/MjynGrr+mAxdd9C5VbrB4CVdFWiqm0wptmG0qk=
Subject key identifier: 9D:5B:99:D7:CE:0C:49:25:51:DE:5D:5E:1D:D4:9E:B1:F3:8F:1C:28
Authority key identifier: 4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED
Certificate issuer: /CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed
Certificate serial: 0199301130F577D268E06750EFC3D25CB109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
Manifest number: 1678
Signing time: Tue 09 Sep 2025 20:00:56 +0000
Manifest this update: Tue 09 Sep 2025 20:00:56 +0000
Manifest next update: Wed 10 Sep 2025 20:00:56 +0000
Files and hashes: 1: S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl (hash: Sz/kr0A0u7VkNhiN8rTLljsN1hH6DH18P0azDXb3aMM=)
2: gFxIm0EvZb8E8gIGHvo_aeEdfcc.roa (hash: 9yJ9gvi6b9QCclOd8XC4YqzlpMyCr1+KDE8Ku24SaCU=)
3: yQgmgvQc_zoWSzqSU_Jv0P1q3MI.roa (hash: 5+4u/xRZxAnli4CKdBW1paOkXTRYuiJAT5ksmVQ4GNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:11:30:f5:77:d2:68:e0:67:50:ef:c3:d2:5c:b1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed
Validity
Not Before: Sep 9 20:00:56 2025 GMT
Not After : Sep 10 20:00:56 2025 GMT
Subject: CN=9d5b99d7ce0c492551de5d5e1dd49eb1f38f1c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3a:9a:56:9c:dd:75:8d:c2:bb:e6:af:f0:c7:
02:99:5e:10:40:05:ba:e2:d1:cb:c1:13:79:ae:59:
b0:81:dc:bb:39:90:04:08:8d:ce:8f:df:a7:3e:8e:
07:ae:29:97:3f:ff:1b:51:99:d0:fd:4d:d8:20:07:
10:0e:2b:f9:81:44:bc:db:3b:ca:ef:40:d8:b0:f7:
a0:83:24:7e:57:e3:2c:bf:5e:63:a4:d1:fb:88:ac:
53:9c:17:f9:75:cf:28:b2:82:1e:67:72:3e:e0:23:
f7:51:1c:6c:aa:61:f5:94:9b:d3:3e:a1:f9:f5:22:
19:57:7a:89:3c:b7:30:df:f6:a6:bc:6d:5c:b5:90:
ae:0d:8c:ea:f4:30:92:87:25:02:84:f5:9c:a1:29:
15:e5:e0:c9:ab:83:69:d3:53:07:50:70:19:43:a5:
80:eb:45:fc:ee:94:b3:82:66:a0:aa:03:69:97:ee:
28:31:02:12:3b:06:9d:50:a4:2d:bb:9a:90:54:47:
8a:ff:9f:bb:e6:bf:44:9c:83:08:85:12:a1:10:c3:
9e:78:1a:28:05:f5:37:7c:19:50:38:8d:86:cd:53:
04:8f:0b:8e:e6:48:a6:6d:ab:e8:dc:2a:2f:04:79:
bc:1d:bd:3c:5e:02:c2:3c:1a:13:a7:62:a6:2b:a6:
81:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5B:99:D7:CE:0C:49:25:51:DE:5D:5E:1D:D4:9E:B1:F3:8F:1C:28
X509v3 Authority Key Identifier:
keyid:4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e4:02:54:fb:b1:0d:ed:43:cc:86:ef:e0:03:e0:4a:e0:d1:
df:8c:7f:70:d3:3b:75:4b:21:45:2f:d3:d3:4b:2a:0a:19:db:
da:af:df:73:ea:32:42:1c:26:0d:49:bf:c5:49:f8:3b:5a:56:
e9:e4:31:da:0e:07:5b:c2:82:a3:a9:0e:32:90:96:d2:8b:c5:
95:ad:46:2a:29:d0:94:af:9f:6f:92:de:25:20:a3:72:4e:72:
4b:d6:a5:a9:c0:19:d9:4a:37:5b:e0:52:45:e3:44:ee:4c:48:
23:05:c3:47:0f:0e:b8:34:fc:99:7e:0d:97:98:9d:a1:92:d7:
9e:93:69:16:5a:e5:31:8b:f0:af:ba:a6:52:f3:7c:5e:20:c4:
8f:66:99:be:5d:e6:05:c4:4b:f5:d9:0c:84:70:46:c1:5c:0b:
a0:78:1a:a7:d1:97:22:69:86:66:a6:e1:04:42:73:37:02:8c:
4a:47:52:57:72:aa:d7:38:b8:59:7d:24:1b:16:50:e0:c1:14:
3f:f2:07:a2:07:3f:64:0f:89:17:25:45:be:65:c7:a2:2a:80:
b3:01:a2:b4:ab:c1:44:91:e5:74:00:0b:49:b6:77:1c:9a:3b:
2f:f5:dc:86:4f:0b:96:76:43:97:60:13:bf:58:3f:ea:56:6c:
55:04:4c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:17:48 2025 by rpki-client