Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
File: S11Foqu5YNK851js5zOxJtyn5xs.mft (raw, json)
Hash identifier: +Y9qITj0b10mkPNGx8pexxOBBDcev5RPa4dthMO5dkE=
Subject key identifier: 93:48:E8:41:B3:8E:6A:5C:10:7B:F4:76:56:64:1B:DD:C0:08:1F:10
Authority key identifier: 4B:5D:45:A2:AB:B9:60:D2:BC:E7:58:EC:E7:33:B1:26:DC:A7:E7:1B
Certificate issuer: /CN=4b5d45a2abb960d2bce758ece733b126dca7e71b
Certificate serial: 0199228D0CA1E169E151764ABFFF2CD46285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
Manifest number: 153B
Signing time: Sun 07 Sep 2025 05:01:33 +0000
Manifest this update: Sun 07 Sep 2025 05:01:33 +0000
Manifest next update: Mon 08 Sep 2025 05:01:33 +0000
Files and hashes: 1: S11Foqu5YNK851js5zOxJtyn5xs.crl (hash: ZHM53ITck/zWUYEtdbaEG1AlgkNNdDeBP9NBH/ZJKGk=)
2: u4XkgPABKlmzAjFlFb35_bSOoZM.roa (hash: 5OhzujGDvwa+oBk89U1CXUeSGEyZAhhsIH31ZmjrM8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:0c:a1:e1:69:e1:51:76:4a:bf:ff:2c:d4:62:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b5d45a2abb960d2bce758ece733b126dca7e71b
Validity
Not Before: Sep 7 05:01:33 2025 GMT
Not After : Sep 8 05:01:33 2025 GMT
Subject: CN=9348e841b38e6a5c107bf47656641bddc0081f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7e:65:4a:f2:4b:11:9c:98:cf:7e:2a:c6:33:
e5:a4:62:ba:5e:96:37:98:a3:84:fe:d7:33:3c:aa:
2f:e3:7e:98:ca:c4:1f:7f:91:f0:4a:0e:30:2f:43:
be:2a:d5:76:0a:ea:ad:ff:b7:11:4a:85:29:20:72:
d4:3c:de:5e:d3:8b:e3:1b:06:89:00:99:16:dd:18:
c2:ca:b8:32:b4:6a:f9:9f:0a:a1:5c:d3:a9:7f:83:
86:5b:81:d2:93:1e:29:35:f9:d2:e9:a1:31:87:c8:
b3:c6:aa:dd:2e:9c:f5:cc:94:70:50:60:3e:67:ed:
37:ab:e7:be:36:38:6b:ed:db:68:20:be:59:76:58:
03:87:81:6b:3e:0a:96:1c:57:dd:16:e5:5a:7d:68:
8b:21:72:e9:6b:ba:66:35:39:43:63:12:6a:eb:73:
7f:27:45:d0:e4:21:0c:18:99:d5:f4:04:37:1c:12:
28:b8:e9:89:56:bc:02:86:d2:37:94:9d:1a:47:68:
21:ea:2b:52:36:c2:db:82:8b:16:4e:a5:2d:a8:03:
f4:7f:e3:0e:00:60:97:c4:33:75:ff:0f:7e:89:46:
ca:2a:1c:e9:04:7d:e8:93:34:1c:8a:14:48:47:da:
05:13:c5:f9:14:01:dc:42:44:13:8b:ec:4f:55:2b:
60:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:48:E8:41:B3:8E:6A:5C:10:7B:F4:76:56:64:1B:DD:C0:08:1F:10
X509v3 Authority Key Identifier:
keyid:4B:5D:45:A2:AB:B9:60:D2:BC:E7:58:EC:E7:33:B1:26:DC:A7:E7:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:30:a5:d0:b6:2e:0b:62:b2:d4:7f:f5:0a:d6:32:d5:76:98:
75:1b:51:8e:78:18:27:7b:f6:62:57:bd:0b:e5:84:2f:bb:67:
69:3f:1e:f2:fd:16:8c:5a:76:1a:f9:ed:60:a9:bb:a3:63:31:
16:ae:b9:13:9c:c1:f7:87:31:a7:f6:dc:bf:2d:15:06:d5:8a:
da:ea:73:e9:2e:a8:52:fd:9b:8f:f4:0a:a1:23:de:ab:6a:30:
81:b4:03:b4:ba:67:11:25:2f:34:06:31:55:77:20:1c:a4:4b:
58:94:b2:2a:d8:66:f5:d6:53:3d:63:22:ff:3b:7a:23:18:35:
52:33:f9:c0:0f:fe:f9:d0:3f:f5:a4:3e:cd:7f:1d:85:df:0a:
8b:48:33:49:58:62:4d:a7:33:45:e4:53:8a:94:65:c7:02:a1:
60:e6:7f:2f:5f:fd:bd:29:ea:c2:92:e4:67:6a:ad:47:7c:d6:
24:5a:a3:0d:90:b6:76:ce:ea:09:b7:99:50:43:de:46:ec:1d:
82:61:33:ed:d3:81:57:b1:dc:5e:9e:ef:c9:2a:03:b6:64:14:
ba:3f:86:ce:d4:5c:92:ff:1a:a0:71:2d:a4:32:bb:4a:37:6d:
bf:96:bb:be:06:2d:62:34:48:c0:48:2c:b4:87:b7:0f:05:cd:
3a:9c:9c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:10 2025 by rpki-client