Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
File: S1KaTSL67yMTXW7_iRImZiPEklU.mft (raw, json)
Hash identifier: hwc0vKk8Zs0TBZ1EKufR4To4R/wAVfz08aUmcye8Z0o=
Subject key identifier: 38:F4:35:BB:99:96:D0:03:C4:0E:E7:C9:52:44:29:AB:44:3B:06:94
Authority key identifier: 4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
Certificate issuer: /CN=4b529a4d22faef23135d6eff8912266623c49255
Certificate serial: 019934928F7943C48D39A607AE2347A2260F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
Manifest number: 1698
Signing time: Wed 10 Sep 2025 17:00:44 +0000
Manifest this update: Wed 10 Sep 2025 17:00:44 +0000
Manifest next update: Thu 11 Sep 2025 17:00:44 +0000
Files and hashes: 1: 1-dpFpZ66BUopKTWddAy3aYd5Q58.roa (hash: a/nFyI+oVdi7douUuLnGlPqM2YOH9iXTA2Ltk7+EQUM=)
2: DL1hBwC058Ly5gbOYmTudqMnhLY.roa (hash: ZP95RnK2lnoKaBDaVLfKRWdtbqYZIJodq0FZ93fqmj4=)
3: S1KaTSL67yMTXW7_iRImZiPEklU.crl (hash: OLnTxbOkprlXwWucGeRX8LvFabbHf+59GmBHpBa1UiQ=)
4: TSdQZeiJv87sxq_OJ-PJSQE8GTQ.roa (hash: zeHI0YzPke/O83NDkRPiKpR8/sA4EMZWB7tgWAf8HNc=)
5: YG4GH2kbor4nZ_HdlU4bXsM_ISU.roa (hash: orPHPnq001m59xqGhWWhOTcNNv+UhgU5D7ZAydlYwJ0=)
6: _YciLAUMll_l6Ad-S-3jEr-WUP0.roa (hash: YLNVgwBOiutPhe7HbfVw0eYS7E9cfJJEs9zT8+FOZFI=)
7: ct-_W27EwoC0fOGDJoYPaUOCh1k.roa (hash: Ry7d3ypfHQ+1XBY6nTPep5IZIfXf1osPEMavue76/1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:92:8f:79:43:c4:8d:39:a6:07:ae:23:47:a2:26:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b529a4d22faef23135d6eff8912266623c49255
Validity
Not Before: Sep 10 17:00:44 2025 GMT
Not After : Sep 11 17:00:44 2025 GMT
Subject: CN=38f435bb9996d003c40ee7c9524429ab443b0694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:01:9d:16:f1:41:d8:8b:8d:a9:36:e5:c9:60:
4c:f2:7b:b5:d7:da:be:22:55:74:bb:79:4d:0d:16:
2c:34:1c:fe:8a:c7:64:ee:18:a4:57:fb:5c:f9:ad:
86:9f:f1:60:74:f3:63:8d:81:d0:bf:d3:c9:37:f1:
5d:33:a4:d1:3f:dd:01:9e:dd:a4:17:e3:b0:24:a2:
4c:05:96:be:b0:5e:cb:36:dd:86:73:b6:7a:41:c5:
0c:07:c8:15:09:7d:a4:22:26:fe:cb:44:93:34:46:
c1:d9:c6:5c:9c:21:aa:87:b3:6a:4e:13:cd:27:b8:
8c:2d:ec:60:16:cb:49:24:33:f0:eb:de:2c:b3:1b:
e0:1e:2c:86:51:55:cd:6f:6d:a9:1b:87:7b:12:9c:
af:61:1f:c1:44:9c:19:73:01:85:a5:e9:11:06:ea:
7c:7b:63:08:8b:9c:6f:eb:13:d7:3b:68:b0:cb:43:
c4:54:ba:af:7a:9d:72:a8:dc:02:72:3c:c2:9d:51:
e8:e1:28:23:28:07:f4:66:ec:49:ab:05:05:b2:03:
57:7c:5c:5b:3a:05:a2:6c:2d:87:47:71:5d:a3:45:
f3:b4:30:4f:5b:b7:c2:8e:79:45:4a:90:cb:38:90:
aa:5f:68:79:5e:eb:1e:c7:84:1a:fd:ca:4d:48:3e:
be:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F4:35:BB:99:96:D0:03:C4:0E:E7:C9:52:44:29:AB:44:3B:06:94
X509v3 Authority Key Identifier:
keyid:4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a6:49:84:78:22:dd:0e:5f:74:3e:00:dc:d7:7b:a3:53:86:
4b:83:56:ae:2c:06:b1:0b:e5:de:06:7a:29:9e:14:cf:b1:6e:
cc:90:ae:0a:f9:58:b5:c3:bb:97:25:9a:f4:2c:a9:06:fc:ea:
a5:74:3f:a7:a1:cc:bc:7b:67:60:d0:3b:0e:20:e4:2b:cd:a5:
9c:76:46:bb:60:47:3a:28:d4:90:98:d0:cc:04:b5:b9:e7:73:
c3:e8:5d:39:a3:ff:9b:74:1c:42:26:17:16:d6:21:56:60:af:
14:f7:5d:42:aa:cf:a3:e7:78:0a:ab:3f:09:64:a9:eb:bf:54:
fd:49:89:a4:5e:50:42:07:80:d1:13:65:20:bf:da:73:e3:b4:
cd:6e:9e:60:00:e8:a7:c5:b2:df:fa:ef:ec:14:9a:c6:74:58:
59:c9:18:51:02:cf:4d:91:3e:b5:e8:fb:99:7f:b8:24:52:46:
43:29:60:4b:b6:ab:22:33:7b:2b:0e:37:1c:d4:2c:63:ae:dd:
05:60:17:11:5b:d9:b9:05:22:d5:bc:7e:cf:3b:29:ea:a3:a7:
56:5c:cd:16:c1:8a:3d:69:0f:63:9a:40:40:db:b9:07:a2:31:
2f:88:e9:29:5f:2d:31:dd:30:4b:84:71:92:8d:dc:3e:2d:5e:
d1:88:07:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 19:49:08 2025 by rpki-client