Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
File: S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft (raw, json)
Hash identifier: 0tTGJaAQAAEU7bLEs+57Yc8Rva+HVYyUrnc20zi6bnw=
Subject key identifier: 50:5D:C4:6F:01:73:00:C9:8D:6D:AE:7E:F7:A2:17:2D:16:E0:BA:E0
Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
Certificate issuer: /CN=4b98127943e7175734964010c89ef821416a31b3
Certificate serial: 019932362A4234B3FEF1B33EED9A04B3020B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
Manifest number: 167E
Signing time: Wed 10 Sep 2025 06:00:34 +0000
Manifest this update: Wed 10 Sep 2025 06:00:34 +0000
Manifest next update: Thu 11 Sep 2025 06:00:34 +0000
Files and hashes: 1: RttlY5HzQVXJ50UgCnxZ0BWy4Mo.roa (hash: jgIM9KKqZgI/Dr7RByRM8eyRlI8Lo/Fqjd4T1YCXpYc=)
2: S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl (hash: 8Vr9iry3FSL+iVoCzxn40gyyDxY/v0BGHIkkMsE+a6M=)
3: pPYYG56VOORuxgT5M_ZuhSvmRfg.roa (hash: UBXy6znS5i9dvxzfkJnX+PZpKfrnJ0My4xHbPC9KdaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:36:2a:42:34:b3:fe:f1:b3:3e:ed:9a:04:b3:02:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b98127943e7175734964010c89ef821416a31b3
Validity
Not Before: Sep 10 06:00:34 2025 GMT
Not After : Sep 11 06:00:34 2025 GMT
Subject: CN=505dc46f017300c98d6dae7ef7a2172d16e0bae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:c4:78:38:01:4c:e9:6a:f9:4e:c3:df:1f:
c4:16:fb:f5:85:42:6f:d7:0c:ff:46:c5:ff:f3:df:
b0:b0:e6:38:72:a7:6e:ad:6a:c4:2a:92:96:32:60:
8a:9d:aa:8f:20:57:3a:15:ce:66:34:cc:28:75:b0:
b7:52:0e:56:20:ec:3d:4d:53:d8:e5:0c:e3:22:f4:
09:b9:6b:b1:52:dc:69:9c:09:ea:ec:7a:ce:63:3c:
9d:56:31:2e:02:91:08:c5:a4:32:01:fb:f6:86:eb:
ff:e7:0e:8a:b8:d9:ad:89:f1:63:e2:c5:d0:2a:c7:
ce:1c:d4:cf:e2:77:92:44:d3:c9:1d:c4:9c:a2:09:
d2:d4:02:71:08:46:64:e0:ab:27:53:f9:26:17:07:
c7:6e:10:51:9c:78:07:9b:9c:5c:55:70:a4:4d:6c:
53:dc:d5:ba:c6:76:37:55:07:cf:b4:85:e9:3f:7c:
22:03:b4:1f:48:ac:f8:b1:3c:e5:ba:24:af:eb:48:
a3:36:9a:ff:50:1d:df:13:1f:f9:b5:25:91:34:14:
77:27:fe:bc:9c:59:fb:6a:78:f6:42:f4:7d:99:82:
56:e2:5b:ac:2f:40:95:e7:e3:ad:85:01:5c:78:c8:
f3:3e:8c:bf:cc:56:41:dd:91:48:80:6b:1b:d3:75:
63:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5D:C4:6F:01:73:00:C9:8D:6D:AE:7E:F7:A2:17:2D:16:E0:BA:E0
X509v3 Authority Key Identifier:
keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:4e:04:c3:97:e1:52:8a:08:6f:99:6b:b0:c0:a3:65:fa:bf:
a7:fa:c4:4b:a6:f4:dc:03:28:e6:e1:ee:28:6a:64:57:9a:e3:
be:e5:0c:53:f2:71:42:2f:a7:fb:31:90:fd:f8:ad:e3:4a:ba:
06:d4:59:16:90:cc:6a:02:4e:1f:36:ae:e1:bf:cc:2e:61:2e:
5d:91:ac:4e:de:c2:a3:e3:40:fd:88:70:8e:04:2a:fd:1d:d1:
4f:65:64:20:21:d6:cb:e3:d7:b2:81:62:af:de:d6:f7:7c:4a:
b6:ce:90:72:27:dc:e4:06:f4:84:b2:3c:95:32:e7:de:df:9c:
ea:2f:51:12:1a:26:41:5b:07:95:4f:90:43:cb:f7:8d:2d:9a:
60:f0:7f:dd:2d:25:87:25:96:22:a6:fa:a9:d7:55:42:fd:c2:
4b:00:e1:a8:6e:58:9d:81:6a:76:7f:7b:59:4b:e7:3a:42:b1:
3f:d5:f4:e3:90:5c:9a:7b:75:6b:ef:39:e0:9d:b8:25:cc:d5:
a8:0f:d4:e1:34:fc:5d:e1:00:06:e6:46:e8:fd:b5:b9:b7:a6:
71:47:be:ad:7e:a3:7d:3b:02:be:87:9a:7c:f0:91:a3:76:9c:
43:b9:7b:b2:d7:da:d6:e9:2b:ed:48:b6:69:c7:c5:54:16:b8:
9d:f7:17:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:02:56 2025 by rpki-client