Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
File: S3CjpsSoVyUDdZizkT4hhp29040.mft (raw, json)
Hash identifier: LoT4zKgf5XGnoHlQ2+KfbqilIV0U1oV9xmiWt+ly8os=
Subject key identifier: C6:63:58:AF:8E:A5:64:B1:80:1A:70:94:89:17:A3:35:0C:B5:2A:5D
Authority key identifier: 4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
Certificate issuer: /CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Certificate serial: 01992255400978BC4D1EA8525E27A5CCA334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
Manifest number: 0ACF
Signing time: Sun 07 Sep 2025 04:00:36 +0000
Manifest this update: Sun 07 Sep 2025 04:00:36 +0000
Manifest next update: Mon 08 Sep 2025 04:00:36 +0000
Files and hashes: 1: 3jlhu43nFTAqKx4et3eHcMKKL3Y.roa (hash: BH64yszlx12crGfEJXHUgBhMmAPFBIBZrSlJaldUjes=)
2: S3CjpsSoVyUDdZizkT4hhp29040.crl (hash: 14GhpL0G5B8qH6znsqXhcj9lVFpMfoDXzADxALLqtz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:40:09:78:bc:4d:1e:a8:52:5e:27:a5:cc:a3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Validity
Not Before: Sep 7 04:00:36 2025 GMT
Not After : Sep 8 04:00:36 2025 GMT
Subject: CN=c66358af8ea564b1801a70948917a3350cb52a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3a:b5:60:a0:a6:6c:bb:4c:94:21:67:cf:24:
f4:e8:c8:47:b6:a6:6d:8a:f2:37:51:43:4f:37:ad:
56:46:b7:26:ef:20:b4:62:e1:89:93:a3:cd:e4:2a:
a3:66:05:74:14:00:7e:c6:91:6f:9a:37:6a:cd:e9:
be:67:12:fe:39:09:1f:dc:7b:25:70:45:60:bc:a7:
81:cb:7f:89:bf:98:37:0c:24:bf:bb:71:ce:7c:96:
9d:07:9d:66:3c:e1:c3:2f:07:0a:36:6c:69:ec:26:
cc:dd:48:e9:ae:fd:5b:d5:49:c5:b3:ec:e9:b7:a3:
0a:b2:8f:77:fe:61:6c:5d:d5:63:1f:8b:1d:fa:dc:
53:76:ac:fc:fb:0e:eb:c6:f1:b9:cd:1d:31:ce:d6:
1a:08:d1:96:b5:08:9e:55:56:f0:e0:11:a0:18:93:
56:c4:18:c2:a2:86:30:5d:ec:1c:66:31:56:78:af:
47:82:cc:78:b7:fb:f8:10:e1:7c:b6:97:b0:30:b4:
ce:9e:fc:f6:69:79:97:2e:a9:76:b8:23:bb:11:e0:
9b:38:55:83:2c:17:7a:d2:b7:29:27:39:48:18:aa:
19:59:1e:6e:be:6d:65:b3:bc:43:0b:8f:f8:75:51:
8a:dd:3e:db:78:a6:46:67:71:a6:d7:c7:13:b7:17:
a8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:63:58:AF:8E:A5:64:B1:80:1A:70:94:89:17:A3:35:0C:B5:2A:5D
X509v3 Authority Key Identifier:
keyid:4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3a:87:52:a7:06:b8:aa:d9:de:3b:0e:84:93:1b:c0:df:e5:
2c:84:df:b8:67:bf:b1:11:fa:da:de:3a:5c:44:9f:ca:ed:28:
cb:0c:dd:74:32:aa:ad:c2:aa:b6:8b:cf:6f:e7:ec:8e:84:5a:
db:a9:49:1a:4e:75:a5:aa:96:07:48:b4:b2:c4:31:4b:9e:71:
ab:22:e2:9e:15:77:1c:7e:e0:75:36:c9:15:cd:0c:01:6f:cf:
67:00:1f:f4:06:cc:2c:23:90:b1:11:b2:8f:82:7b:a7:b2:15:
0f:39:6a:7a:5a:04:2a:21:df:aa:34:59:d9:d3:4a:12:05:ce:
da:c3:6c:44:32:ae:c6:ca:c2:40:f0:49:ea:c5:66:88:a2:9d:
61:3a:55:51:44:b9:9e:20:ad:52:9e:19:77:03:f3:c1:e4:60:
91:a2:e2:7d:5b:53:97:e5:12:a6:c8:b5:97:1c:a9:0c:6b:d3:
28:52:84:fa:05:e8:b3:c2:fc:5a:a4:d7:0a:3c:d9:c4:66:73:
89:08:a6:b5:78:64:f1:61:e7:b9:2d:cd:7d:be:bf:92:9e:6c:
11:23:d4:ca:35:5e:37:de:bd:b3:0c:b7:99:fc:ef:e8:a4:7f:
8e:1a:a2:79:1f:46:35:84:9b:fe:54:e4:ed:8f:52:f4:3b:a5:
75:6b:d2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:23:01 2025 by rpki-client