Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
File: S70EYZouForJV1Iu3_Ai-QvApN8.mft (raw, json)
Hash identifier: h6C9uXXj91gjYcGPk74fDmKsvpXmQ51Q61fZvHMfV4w=
Subject key identifier: 61:92:F6:03:6B:8C:AA:47:72:F5:B4:8D:37:55:0D:C1:16:F6:AD:83
Authority key identifier: 4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
Certificate issuer: /CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Certificate serial: 0199239F4C00BDE3BC0FBD0220E803B6E736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
Manifest number: 0E0D
Signing time: Sun 07 Sep 2025 10:01:06 +0000
Manifest this update: Sun 07 Sep 2025 10:01:06 +0000
Manifest next update: Mon 08 Sep 2025 10:01:06 +0000
Files and hashes: 1: Fg5ya9jEENzzvmGwH2Ykprm5YIM.roa (hash: o09Ogu5nR2BkFMd5V+jfaqfvdxmKcg813astixFQ7Wo=)
2: S70EYZouForJV1Iu3_Ai-QvApN8.crl (hash: QS2De8By9zK5xdiRR8B/+BArCjaB1j8vjm5US0qy/wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:4c:00:bd:e3:bc:0f:bd:02:20:e8:03:b6:e7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Validity
Not Before: Sep 7 10:01:06 2025 GMT
Not After : Sep 8 10:01:06 2025 GMT
Subject: CN=6192f6036b8caa4772f5b48d37550dc116f6ad83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dd:9f:9e:51:19:32:b9:31:d1:6a:df:d3:e4:
10:e0:72:58:a0:cd:85:46:5b:58:e8:b0:49:e7:56:
3b:2c:5c:43:4d:12:1e:ab:99:79:7c:24:ee:42:7a:
19:ec:11:c2:9d:07:43:ec:26:1b:88:7e:54:e1:f5:
a9:ad:ec:d0:1f:3b:e8:e3:4f:c5:a2:d5:fe:8b:5f:
19:7f:29:11:8f:93:75:f8:e5:9b:6a:86:54:64:8f:
73:9a:df:64:bd:3e:98:c1:99:92:73:0b:8b:27:86:
8d:ba:45:9f:4e:e7:bd:b8:a5:5a:97:cc:02:5b:0a:
ff:64:5c:a8:8f:fc:ae:bb:59:54:f7:1d:d9:58:44:
27:14:0f:65:57:fe:57:f0:8d:57:60:2a:f4:34:9f:
1c:57:ab:b3:b5:0c:b8:87:03:8c:44:d5:29:37:1d:
f8:98:9b:fa:55:41:75:bd:4c:4b:6f:8a:80:d5:10:
4a:62:d2:b2:28:9b:b5:80:3d:6e:b6:be:1d:58:2c:
0b:74:9f:1a:db:fe:a1:a5:7d:42:bb:77:d2:46:e7:
db:2e:48:e5:5b:00:65:98:3b:fa:bd:08:67:df:cc:
4f:c9:03:b3:df:bc:7c:e4:6c:32:23:47:8a:c2:01:
2e:57:f8:35:e7:85:7f:0e:f3:69:fd:68:1e:5a:b9:
d3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:92:F6:03:6B:8C:AA:47:72:F5:B4:8D:37:55:0D:C1:16:F6:AD:83
X509v3 Authority Key Identifier:
keyid:4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c2:ca:53:6e:b3:81:93:4e:fd:dd:bc:52:6a:e5:73:5e:4e:
8d:80:cd:a6:94:63:8f:3f:86:66:a7:6a:ab:86:b9:ad:96:8a:
f4:0d:e2:c4:c6:26:93:12:f8:44:1d:61:41:28:71:06:29:96:
b4:03:b0:1f:12:21:e3:8d:6e:86:b9:71:5d:e8:f6:45:25:19:
01:48:8f:65:bc:74:c3:85:42:55:66:e8:1c:fe:d4:33:d6:08:
60:0a:ed:3a:2d:04:4e:c2:a6:71:7b:4d:64:e5:b3:e3:cb:a4:
15:04:c9:69:48:dd:b6:a9:9f:6b:94:41:0c:c3:7b:4e:d0:5e:
93:10:a4:91:8a:dc:cd:6f:b6:b2:43:5f:e2:bd:40:59:2b:09:
09:4c:8b:93:94:96:f1:ef:91:0a:48:5e:5a:59:c4:94:60:49:
28:a9:e2:b2:84:e4:ed:1c:d6:81:b0:c3:cf:12:36:e9:8a:13:
2b:d0:ec:e1:81:42:b7:0e:d3:b5:30:96:68:f7:3f:2f:15:43:
58:b7:51:8f:61:9c:17:1f:23:d2:eb:2e:55:9e:65:91:f0:11:
8b:d1:da:b2:08:56:36:a5:64:e9:c8:60:ed:8a:72:2e:c4:6f:
1f:42:68:00:e1:42:e2:92:e8:5f:65:35:61:76:82:31:ca:57:
e0:09:c8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:05 2025 by rpki-client