Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
File: S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft (raw, json)
Hash identifier: sEbBEZpd9ZRuzU3hehBgnek1qJ2HCeWVAWeikw5/2OQ=
Subject key identifier: 35:65:BE:B3:C7:D8:3B:71:32:E8:D5:3F:AF:99:E8:2E:0F:AE:0D:96
Authority key identifier: 4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED
Certificate issuer: /CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed
Certificate serial: 0197531043F4AF8FBDF6E1D03C1FA7617D31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
Manifest number: 1581
Signing time: Mon 09 Jun 2025 05:01:04 +0000
Manifest this update: Mon 09 Jun 2025 05:01:04 +0000
Manifest next update: Tue 10 Jun 2025 05:01:04 +0000
Files and hashes: 1: S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl (hash: t+E2mKIlvvnhMDq8E1bLm7Z+RvresuEe6wQTS8f6KXc=)
2: gFxIm0EvZb8E8gIGHvo_aeEdfcc.roa (hash: 9yJ9gvi6b9QCclOd8XC4YqzlpMyCr1+KDE8Ku24SaCU=)
3: yQgmgvQc_zoWSzqSU_Jv0P1q3MI.roa (hash: 5+4u/xRZxAnli4CKdBW1paOkXTRYuiJAT5ksmVQ4GNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:10:43:f4:af:8f:bd:f6:e1:d0:3c:1f:a7:61:7d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed
Validity
Not Before: Jun 9 05:01:04 2025 GMT
Not After : Jun 10 05:01:04 2025 GMT
Subject: CN=3565beb3c7d83b7132e8d53faf99e82e0fae0d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c9:ed:b8:eb:c7:aa:9b:95:eb:e1:48:69:0f:
28:17:36:0a:5c:a3:e2:16:89:2b:ee:b1:60:e4:f7:
fe:92:01:71:f0:34:6b:8b:f2:97:8a:12:e5:db:fe:
18:ac:35:12:c7:c4:44:6f:46:c7:c2:c0:fe:60:1e:
76:2c:6c:a5:78:a5:de:20:34:fb:33:5f:ba:95:66:
a2:00:47:08:cb:af:c4:bd:5d:73:55:ae:19:8a:66:
66:f0:e2:eb:77:df:ff:31:98:8b:e8:bd:ce:eb:de:
62:59:d8:64:fa:55:b3:b5:87:d9:a2:14:6f:e7:c7:
5c:ac:1b:b5:62:ff:f7:c5:74:01:8a:88:5e:bf:01:
62:ff:ca:ab:3d:60:e7:8e:7d:b6:9d:a9:45:86:1a:
f7:bb:08:04:80:9f:da:9c:96:ba:85:2c:6d:e3:ed:
1c:48:3f:4e:65:36:47:c5:dd:aa:fd:af:9d:52:ad:
14:04:b2:b4:dd:02:eb:00:72:20:5e:d0:23:b5:77:
d5:ce:25:a5:78:64:6a:bc:b9:7d:d8:09:f8:bb:dc:
d1:88:75:6f:65:e8:0d:08:a7:92:fb:37:27:b8:bb:
6b:52:e3:df:c0:8a:bf:3c:8e:e8:b9:0d:c9:e3:c2:
e2:44:c8:dc:29:0a:0a:42:bf:4e:12:23:2c:b8:53:
c0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:65:BE:B3:C7:D8:3B:71:32:E8:D5:3F:AF:99:E8:2E:0F:AE:0D:96
X509v3 Authority Key Identifier:
keyid:4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:26:f5:2a:21:ed:5c:bf:04:72:6e:eb:73:0d:71:39:05:8a:
9d:64:d1:72:8c:e1:a9:5d:f0:b8:04:df:a7:17:c2:57:e5:a7:
fb:91:08:83:8d:3c:c0:f8:30:7f:2f:c1:73:fa:c5:23:a6:d5:
1a:a0:6a:84:9d:43:22:59:af:9c:5a:3b:04:95:fc:ed:6e:25:
2a:d2:de:01:28:1b:90:52:2c:d8:f5:61:f9:7a:d8:c5:4a:2a:
7a:db:77:96:3a:a4:3e:1d:ba:a1:b2:f0:13:0e:1d:21:a8:4f:
74:30:86:40:f2:17:89:ca:82:f1:46:47:fa:36:47:85:44:73:
91:82:17:f2:ed:8e:d5:51:7a:5a:39:d4:ea:bb:99:3e:fa:85:
7a:dd:c3:73:fb:0f:6a:5f:1a:20:60:2c:d3:c9:e7:59:6d:fa:
c9:c6:d2:7b:d4:ee:65:e8:9a:a9:2b:43:4f:67:8d:4f:e5:e4:
3c:13:45:2e:b8:9d:eb:1e:84:25:ac:61:cd:04:6f:0e:d7:91:
67:b9:fd:6e:ea:0d:de:33:0d:98:8f:04:ce:b0:78:ad:a5:88:
26:ed:a8:bc:c6:5f:9f:e1:8a:67:b4:ae:cc:2a:28:01:00:61:
b4:c3:a5:b0:ee:10:2d:12:13:76:0d:dd:7d:37:73:2a:bd:52:
07:47:a5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:58:04 2025 by rpki-client