Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
File: S3CjpsSoVyUDdZizkT4hhp29040.mft (raw, json)
Hash identifier: AeFu6wKidLsRZ7OEz/rWWIkWqzYVyotOILOkCCpsWPw=
Subject key identifier: 9E:4C:CC:25:B3:76:0D:E7:0D:16:CE:B7:DF:2B:46:AA:89:DA:36:B2
Authority key identifier: 4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
Certificate issuer: /CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Certificate serial: 019A725C78862CEF29B196598F7226B0AD51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
Manifest number: 0B7D
Signing time: Tue 11 Nov 2025 10:00:53 +0000
Manifest this update: Tue 11 Nov 2025 10:00:53 +0000
Manifest next update: Wed 12 Nov 2025 10:00:53 +0000
Files and hashes: 1: 3jlhu43nFTAqKx4et3eHcMKKL3Y.roa (hash: BH64yszlx12crGfEJXHUgBhMmAPFBIBZrSlJaldUjes=)
2: S3CjpsSoVyUDdZizkT4hhp29040.crl (hash: Y/waBuuxsQn2jUWZakrWxsEzRxQdv0WhYrPxvZL+bNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:78:86:2c:ef:29:b1:96:59:8f:72:26:b0:ad:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Validity
Not Before: Nov 11 10:00:53 2025 GMT
Not After : Nov 12 10:00:53 2025 GMT
Subject: CN=9e4ccc25b3760de70d16ceb7df2b46aa89da36b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:12:d7:78:fa:be:b5:d9:85:ff:20:62:c4:3a:
ac:57:aa:53:9a:bc:09:eb:49:08:53:4e:0a:8e:35:
f6:9c:3d:59:45:ff:e9:14:b1:56:69:cf:72:70:05:
9a:e7:24:1e:30:80:9c:05:c2:22:7a:4b:ac:25:21:
d7:20:04:19:1f:66:3b:87:5d:3f:d3:e5:0d:0d:9e:
2a:57:72:36:35:94:8f:97:56:d9:96:25:6e:bd:3e:
ee:2f:a5:3d:e1:5a:aa:0a:75:e7:a9:ab:be:91:2d:
bc:1c:fe:16:a8:a9:75:13:2f:4f:2c:64:75:4d:6a:
d2:ee:4b:d1:12:85:88:f7:b9:6a:aa:0f:c0:cc:14:
e1:fa:22:d8:2c:1e:23:51:70:b0:dc:b9:44:a9:0f:
22:cc:e3:c3:69:58:a1:30:4b:91:cb:45:0f:47:b4:
7f:a5:03:9d:2f:e9:bc:3d:95:71:d6:60:ae:68:c6:
03:a1:33:f8:15:23:05:b1:9f:b8:a5:65:50:5a:21:
38:d2:b0:f9:66:49:91:e9:8f:62:02:a2:d0:99:ef:
f8:2b:ae:f4:f1:25:c7:41:b1:09:00:86:2d:d0:92:
9f:49:25:46:6a:b4:c4:1a:35:d6:e1:bf:30:5f:62:
11:dc:9d:78:80:d7:d0:8c:47:1a:dd:55:97:91:bf:
fd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4C:CC:25:B3:76:0D:E7:0D:16:CE:B7:DF:2B:46:AA:89:DA:36:B2
X509v3 Authority Key Identifier:
keyid:4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:91:5d:5c:1f:75:cd:b9:7f:1c:47:d5:87:f5:79:6b:96:83:
7c:24:c6:82:26:a2:a1:b1:3a:16:4c:a9:53:93:cf:62:f4:e4:
db:33:ad:ca:a3:60:57:19:83:5f:7c:f3:ba:0e:99:68:bc:5e:
a3:3c:2d:65:5b:c2:95:56:02:07:75:c0:21:7b:15:c5:9b:7d:
03:77:4e:90:64:92:36:55:cc:58:5e:6e:49:06:cb:38:32:1e:
0c:6f:9a:b0:8a:31:1b:3b:e3:17:3f:07:65:49:ef:6e:c8:1d:
4d:91:b9:5d:76:06:1d:5b:71:4d:6d:5c:a5:c7:62:5a:10:bb:
93:21:7f:75:e0:7a:4f:f0:54:41:8a:e4:ab:af:a0:22:21:73:
86:10:aa:57:df:7c:a3:33:8f:e2:da:79:c9:38:ed:99:a8:a3:
d9:b5:d6:ad:33:f8:d7:4d:3c:5a:f3:f9:f4:19:a2:1c:10:96:
35:96:5a:79:63:73:26:49:c5:46:56:f6:56:dc:2f:94:c7:ab:
67:0c:c9:7c:fe:cd:69:98:9e:c4:19:66:44:23:69:a8:1f:b9:
47:42:cd:69:d0:f2:2b:65:df:5c:e1:a1:01:48:db:4f:95:9e:
1e:be:3b:14:bf:25:7d:c4:15:80:27:f1:f5:ad:82:45:48:dd:
44:8f:3d:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXHiGLO8psZZZj3ImsK1RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNzBhM2E2YzRhODU3MjUwMzc1OThiMzkxM2UyMTg2OWRi
ZGQzOGQwHhcNMjUxMTExMTAwMDUzWhcNMjUxMTEyMTAwMDUzWjAzMTEwLwYDVQQD
Eyg5ZTRjY2MyNWIzNzYwZGU3MGQxNmNlYjdkZjJiNDZhYTg5ZGEzNmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRLXePq+tdmF/yBixDqsV6pTmrwJ
60kIU04KjjX2nD1ZRf/pFLFWac9ycAWa5yQeMICcBcIiekusJSHXIAQZH2Y7h10/
0+UNDZ4qV3I2NZSPl1bZliVuvT7uL6U94VqqCnXnqau+kS28HP4WqKl1Ey9PLGR1
TWrS7kvREoWI97lqqg/AzBTh+iLYLB4jUXCw3LlEqQ8izOPDaVihMEuRy0UPR7R/
pQOdL+m8PZVx1mCuaMYDoTP4FSMFsZ+4pWVQWiE40rD5ZkmR6Y9iAqLQme/4K670
8SXHQbEJAIYt0JKfSSVGarTEGjXW4b8wX2IR3J14gNfQjEca3VWXkb/9PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5MzCWzdg3nDRbOt98rRqqJ2jayMB8GA1UdIwQY
MBaAFEtwo6bEqFclA3WYs5E+IYadvdONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzNDanBzU29WeVVEZFppemtUNGhocDI5MDQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kYzcwMTAtMTlmOS00NzY4LWE2MTUt
NDgyNWIyOWRkNTcyLzEvUzNDanBzU29WeVVEZFppemtUNGhocDI5MDQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9kYzcwMTAtMTlmOS00NzY4LWE2MTUtNDgyNWIyOWRkNTcy
LzEvUzNDanBzU29WeVVEZFppemtUNGhocDI5MDQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxpFdXB91
zbl/HEfVh/V5a5aDfCTGgiaiobE6FkypU5PPYvTk2zOtyqNgVxmDX3zzug6ZaLxe
ozwtZVvClVYCB3XAIXsVxZt9A3dOkGSSNlXMWF5uSQbLODIeDG+asIoxGzvjFz8H
ZUnvbsgdTZG5XXYGHVtxTW1cpcdiWhC7kyF/deB6T/BUQYrkq6+gIiFzhhCqV998
ozOP4tp5yTjtmaij2bXWrTP41008WvP59BmiHBCWNZZaeWNzJknFRlb2VtwvlMer
ZwzJfP7NaZiexBlmRCNpqB+5R0LNadDyK2XfXOGhAUjbT5WeHr47FL8lfcQVgCfx
9a2CRUjdRI89ww==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:36 2025 by rpki-client