Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft
File: S2HMijZcxAOCox2tVPbLcj9YdYo.mft (raw, json)
Hash identifier: kuBU/AAwRqjxhdw+lfr16j7fs3JXsmyt9yuegOrZ8lY=
Subject key identifier: 04:88:31:78:BE:33:A0:86:0D:4D:B1:33:00:72:A1:FC:C5:B7:AF:C2
Authority key identifier: 4B:61:CC:8A:36:5C:C4:03:82:A3:1D:AD:54:F6:CB:72:3F:58:75:8A
Certificate issuer: /CN=4b61cc8a365cc40382a31dad54f6cb723f58758a
Certificate serial: 01974CD7598F884FB10FCA94FCECD1C33AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 00:01:10 +0000
Manifest this update: Sun 08 Jun 2025 00:01:10 +0000
Manifest next update: Mon 09 Jun 2025 00:01:10 +0000
Files and hashes: 1: 5dOeHmReGHpglp9CPLficnPxbRA.roa (hash: u/adm8/lzLOzXE337fHeCi8QttPIgGUNVZ/GPwCUh0o=)
2: S2HMijZcxAOCox2tVPbLcj9YdYo.crl (hash: aibVJmoUAefV2awLHlaEsRnX47sgKCN6SQiQ6QKcfJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:59:8f:88:4f:b1:0f:ca:94:fc:ec:d1:c3:3a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b61cc8a365cc40382a31dad54f6cb723f58758a
Validity
Not Before: Jun 8 00:01:10 2025 GMT
Not After : Jun 9 00:01:10 2025 GMT
Subject: CN=04883178be33a0860d4db1330072a1fcc5b7afc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a6:80:54:4d:85:4d:bc:48:fa:94:c4:ca:78:
86:35:91:00:01:b5:21:bd:2e:a6:5d:0a:c8:5d:9a:
cc:f9:2d:d2:22:79:d9:e4:fd:40:7a:ae:2b:62:4a:
8c:e7:41:64:28:e0:fb:c9:21:6c:b3:c8:e5:0f:8c:
47:fc:e5:54:54:b0:30:2f:e8:5f:3f:3e:b4:2a:5c:
84:30:d8:6f:7c:b4:f7:bf:9b:cf:01:1c:af:c1:98:
5c:d6:cd:99:00:bc:66:6e:da:e9:fc:73:ea:77:fa:
f6:ac:78:ec:74:7a:1d:18:0c:2f:f1:a9:f2:38:48:
9e:b2:56:2b:09:a4:53:68:cb:3a:c7:d4:0c:7c:95:
65:cb:3a:77:31:e7:26:a3:a4:b3:98:c3:0a:9b:cf:
4d:e3:b8:22:29:a2:08:88:48:40:a0:f7:b6:0a:d0:
85:14:0c:be:8f:6a:5e:95:25:55:76:db:68:3f:04:
84:b7:99:59:cb:7e:07:b2:1a:9c:a7:ca:00:1d:b7:
35:9a:6b:19:4c:b7:f0:38:00:7b:75:db:d5:bc:07:
d7:74:82:84:1b:06:26:eb:7a:97:0e:15:08:17:c6:
67:46:03:3b:d1:63:5a:c2:d6:71:10:58:47:03:c5:
ed:79:7c:c8:a3:82:90:67:c7:d4:94:81:04:00:c1:
5c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:88:31:78:BE:33:A0:86:0D:4D:B1:33:00:72:A1:FC:C5:B7:AF:C2
X509v3 Authority Key Identifier:
keyid:4B:61:CC:8A:36:5C:C4:03:82:A3:1D:AD:54:F6:CB:72:3F:58:75:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:db:e0:04:93:4b:5d:1a:b0:a1:57:4b:0e:38:dd:78:d8:b8:
c1:fe:a6:69:79:65:9f:02:30:e3:34:b1:be:97:af:5a:ee:4a:
c0:4a:b4:2d:e4:4b:47:93:ae:da:09:9e:57:d9:ac:57:37:22:
5c:7c:12:9f:fc:4e:d0:7c:33:c2:cb:4b:ae:ea:0f:ff:fe:09:
6a:f6:8f:1f:06:d5:fe:fc:97:a1:b1:41:fa:8a:c3:8f:8b:57:
51:74:58:25:7a:4a:4a:a1:1b:7c:a6:32:95:c2:51:0f:c9:06:
48:63:32:3e:53:30:ba:f3:cb:8a:e7:da:89:84:3b:9d:54:8a:
97:fc:9b:27:ba:db:aa:e0:1f:5e:03:3e:37:92:04:ce:ef:d2:
e7:74:d9:70:2e:72:66:93:b9:fa:90:3c:35:e8:38:17:29:9f:
d6:e4:f7:6e:99:55:74:bb:ff:c6:1e:f4:10:8d:a7:da:b5:15:
46:53:f9:56:d2:88:c6:67:fe:77:c6:0d:58:49:c1:da:89:91:
f8:07:90:39:e0:84:12:3d:6d:51:1e:d0:81:89:0b:56:0a:97:
6e:bc:b0:c7:4e:c4:ad:10:58:6b:d8:f2:f7:87:f8:da:49:05:
0d:da:38:a0:a5:c7:a3:0e:f4:04:72:ba:44:12:50:16:a2:5e:
a3:59:5f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:30:41 2025 by rpki-client