Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
File: S1ejnbXHqja-gs11HlDLkCMDPco.mft (raw, json)
Hash identifier: aZL8xlXx51lzP7PDDF+VEs6Ys8t4U/IlBL9VaHnYrZY=
Subject key identifier: 12:30:D7:5C:9F:D6:27:ED:A3:99:E1:C5:A5:2F:C6:FD:CC:79:25:19
Authority key identifier: 4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
Certificate issuer: /CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Certificate serial: 0197488D12359F0293A0AE62DEDA79B6603E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
Manifest number: 0141
Signing time: Sat 07 Jun 2025 04:01:34 +0000
Manifest this update: Sat 07 Jun 2025 04:01:34 +0000
Manifest next update: Sun 08 Jun 2025 04:01:34 +0000
Files and hashes: 1: S1ejnbXHqja-gs11HlDLkCMDPco.crl (hash: Ap9aN6T9Ulv2d8fctZcUMkJyOmAo9VXI5Rvt58oTx7Q=)
2: zO8Iwb0BsWTcNVLMLIiP_wo8DJM.roa (hash: OPJwqPTjOpu2TkWSPAK04GvaPgxXe8e980q4NWTbl0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:12:35:9f:02:93:a0:ae:62:de:da:79:b6:60:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Validity
Not Before: Jun 7 04:01:34 2025 GMT
Not After : Jun 8 04:01:34 2025 GMT
Subject: CN=1230d75c9fd627eda399e1c5a52fc6fdcc792519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3e:61:2b:df:a2:59:38:34:db:52:72:20:75:
08:32:78:87:cf:8b:b8:88:d7:43:b6:ab:11:a9:8c:
1a:90:15:33:da:e4:06:94:d1:75:67:65:f2:33:16:
24:29:de:8e:12:1a:a9:64:44:af:85:c6:ba:31:2d:
8d:6e:82:5c:d2:01:66:a7:9a:6d:a6:a5:7a:3c:48:
0c:87:bd:a4:9f:55:4a:ed:94:ff:1d:b6:5e:76:aa:
5f:d5:9c:0b:0b:d6:66:f2:f7:2a:26:c5:65:29:9e:
da:ed:ce:6f:18:63:61:26:16:54:85:e9:ec:cb:c2:
10:68:1f:44:6a:0a:51:2f:da:d4:c7:ac:9d:7c:da:
40:7a:a6:3d:e1:7a:e2:7a:9f:d2:60:2b:28:8b:05:
88:1d:1a:2a:d1:a3:0e:27:38:c7:d9:f3:48:d4:70:
69:4a:4f:46:71:9e:37:91:d2:c9:60:a1:86:b8:f6:
58:fc:e4:97:3d:1e:dc:fb:08:e7:21:88:36:ca:25:
52:c9:8f:91:f7:c7:f0:f0:29:0c:35:e5:d6:ca:2e:
f1:b7:51:2c:2c:52:d1:94:19:11:37:44:8c:67:ae:
63:fd:3a:7e:b1:f8:4c:74:7d:ce:f2:76:3c:9e:10:
2d:f5:d2:04:ea:40:ad:c9:43:83:7e:f9:d7:35:0f:
5a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:30:D7:5C:9F:D6:27:ED:A3:99:E1:C5:A5:2F:C6:FD:CC:79:25:19
X509v3 Authority Key Identifier:
keyid:4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ed:62:e1:77:9c:1b:c3:77:7c:9e:58:b0:ba:c8:11:59:70:
5c:cb:44:b2:f7:fb:40:77:c4:0c:49:59:da:74:46:86:fd:5e:
95:ea:92:fe:e3:37:91:d7:39:5e:ee:db:0c:99:9c:df:5d:fd:
5e:e1:86:d7:b7:dc:25:69:6e:72:2e:ad:2e:b0:2e:ce:ad:36:
16:d1:32:e5:4a:fa:f6:36:48:d0:10:24:40:45:7b:b9:d7:36:
02:25:03:6c:f4:86:7d:f3:d6:9e:f6:1a:33:dd:13:14:e2:d8:
6e:ec:31:3d:69:05:3c:f1:40:cc:00:4c:67:82:b0:bb:d4:d1:
f8:2b:db:a5:1f:7b:f4:65:77:52:32:7d:cc:c6:93:5f:40:a2:
99:dc:e2:7a:05:67:02:1d:24:1b:d3:8d:18:33:71:f8:5e:7f:
76:e1:d1:d7:d8:29:79:a3:1f:06:7f:7b:ec:d9:6c:ef:3c:02:
45:c3:26:c9:8b:bf:7b:0a:9c:05:68:3a:b9:07:82:53:66:e1:
c7:02:9a:0d:84:c4:e0:e5:65:2a:d8:c4:af:86:8c:e7:07:2e:
7f:3e:a2:82:b6:9a:ba:19:1e:d4:d5:cf:ff:29:4e:7b:57:15:
56:34:24:2e:e9:94:06:24:aa:56:db:fd:1c:9f:7a:0c:e1:d4:
9a:b3:e9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:17:58 2025 by rpki-client