Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
File: S3CjpsSoVyUDdZizkT4hhp29040.mft (raw, json)
Hash identifier: PGeYfj369eAf7Nh2Xb0k+NDZjraSJwXABtmNAooc0WU=
Subject key identifier: 6D:6F:8D:5F:18:9B:2B:CE:0E:A2:68:3D:CF:B3:2E:6E:D1:F8:BB:33
Authority key identifier: 4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
Certificate issuer: /CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Certificate serial: 01974742A2EAE300A77DA08F3D6FF7043587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
Manifest number: 09D9
Signing time: Fri 06 Jun 2025 22:00:38 +0000
Manifest this update: Fri 06 Jun 2025 22:00:38 +0000
Manifest next update: Sat 07 Jun 2025 22:00:38 +0000
Files and hashes: 1: 3jlhu43nFTAqKx4et3eHcMKKL3Y.roa (hash: BH64yszlx12crGfEJXHUgBhMmAPFBIBZrSlJaldUjes=)
2: S3CjpsSoVyUDdZizkT4hhp29040.crl (hash: DOAVICVHkw1QyASRMkAE3vtfrFXxhn+Uwzgun7f9++I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:a2:ea:e3:00:a7:7d:a0:8f:3d:6f:f7:04:35:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Validity
Not Before: Jun 6 22:00:38 2025 GMT
Not After : Jun 7 22:00:38 2025 GMT
Subject: CN=6d6f8d5f189b2bce0ea2683dcfb32e6ed1f8bb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e8:be:44:8a:17:95:f3:46:1d:03:24:1c:5f:
0a:47:f8:9d:e5:08:d6:83:bc:a4:04:fc:78:0c:b6:
ef:48:94:8c:37:7f:2f:cc:df:4a:c0:38:84:5e:7f:
79:45:a3:7a:a4:10:8f:5f:ba:1f:96:25:58:b0:ab:
3b:ba:a2:a7:29:4a:ef:66:49:0a:1c:9d:22:ba:e6:
3c:24:82:8e:f0:91:d3:97:26:07:41:be:3d:25:ef:
53:46:2f:2b:4e:c7:5d:02:54:1b:76:f4:e5:fe:ce:
dd:a1:77:5a:fb:99:1c:d8:64:39:6f:85:0f:81:09:
2c:86:e7:d7:10:4c:fb:ac:24:a8:cb:19:97:56:33:
dd:13:c9:64:5d:12:e0:c7:e2:8c:5e:f3:7f:d3:95:
94:46:7e:99:93:75:15:2a:eb:f6:47:9a:08:6a:0d:
2e:48:73:40:ba:b1:ba:f8:f9:ec:27:d3:4c:01:56:
eb:d8:39:82:99:36:ae:2e:95:36:68:6f:f9:11:aa:
26:27:bd:28:73:23:f9:06:87:c0:64:94:2e:d5:44:
56:49:67:b0:49:ea:48:92:c5:01:3c:ff:51:20:79:
50:6e:e6:5f:39:80:59:9c:ed:7a:16:61:97:a7:0f:
b2:c9:9b:58:b1:39:01:ba:04:ab:82:f7:8b:04:ad:
52:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6F:8D:5F:18:9B:2B:CE:0E:A2:68:3D:CF:B3:2E:6E:D1:F8:BB:33
X509v3 Authority Key Identifier:
keyid:4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:41:6e:20:08:e9:4c:bf:6c:0b:40:db:2a:63:61:9c:61:4f:
d8:66:da:62:cf:f9:e2:15:63:6e:45:81:38:fb:ef:d0:8e:89:
ab:a3:78:cb:36:b6:9f:15:0e:b0:aa:b8:9e:ad:c7:41:69:12:
f1:36:9b:30:5c:d5:f0:e5:ca:56:73:b5:a5:d0:f0:02:2d:26:
34:b2:d0:aa:f2:df:6b:be:15:1f:6b:1a:e3:09:c1:eb:32:f0:
c1:e2:33:23:59:c0:8a:ef:0f:52:8a:f4:14:88:06:62:6e:ea:
75:9a:01:2e:49:76:79:84:89:f6:58:66:c7:c8:ad:97:74:2d:
ea:45:3b:c4:d2:07:d6:85:96:a9:e2:89:51:73:75:24:7e:02:
81:8a:bc:15:b2:6f:75:fb:35:84:2d:ee:72:59:dd:c5:94:a9:
24:d3:17:74:57:dd:b2:48:fb:86:6d:37:ff:19:0a:ae:bd:d6:
86:e4:7a:f6:00:e1:92:9d:55:16:23:37:24:eb:79:8b:b6:e8:
18:db:60:32:5a:82:8c:c4:9a:63:5d:28:6b:ec:40:76:fc:e2:
b1:bd:c1:aa:28:17:f9:01:55:03:64:85:12:d7:0d:42:d8:f6:
c1:8d:ee:54:a5:d2:43:41:b7:9f:32:77:99:85:bc:fa:36:02:
80:46:7b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:16:33 2025 by rpki-client