Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
File: S9ReWCBqG51Z7d-o-YizJxe_nGs.mft (raw, json)
Hash identifier: AkvUvf5nzLylsxPH2sA1peh9IPQMD9BD4J6Jv5IVQu4=
Subject key identifier: 7E:F3:DC:A5:DB:B3:2E:D2:D6:93:95:85:74:7E:6F:9F:45:10:18:FC
Authority key identifier: 4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
Certificate issuer: /CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Certificate serial: 0198D515CB0C8D3CFCE811AD60FA5FBC09D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
Manifest number: 078A
Signing time: Sat 23 Aug 2025 04:00:31 +0000
Manifest this update: Sat 23 Aug 2025 04:00:31 +0000
Manifest next update: Sun 24 Aug 2025 04:00:31 +0000
Files and hashes: 1: S9ReWCBqG51Z7d-o-YizJxe_nGs.crl (hash: 4k3KHqTo2LLRxm5RWHVy2ZcSNqjuBuNW0SySyKiOPEo=)
2: uNPxSzoBaXvBOJFQn-2SS8eLdrE.roa (hash: aQ7mvpV3ivI5FkoVAB6sSeBflcpGk3YWeApRgwYyH1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:cb:0c:8d:3c:fc:e8:11:ad:60:fa:5f:bc:09:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Validity
Not Before: Aug 23 04:00:31 2025 GMT
Not After : Aug 24 04:00:31 2025 GMT
Subject: CN=7ef3dca5dbb32ed2d6939585747e6f9f451018fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:be:27:ea:ef:8f:4f:8a:fa:01:54:04:a0:63:
f7:66:bd:ae:a4:92:ca:08:9f:c8:0d:fb:95:fb:ee:
2e:3a:20:f2:15:8f:28:94:4f:8e:34:0f:95:32:40:
f3:6f:05:81:5b:8b:72:44:22:f0:89:7b:48:e9:96:
e7:f1:28:2b:7f:b7:8b:46:cc:50:c4:7e:b4:0c:8b:
2f:b7:f5:bd:eb:84:5c:22:83:6d:8a:23:0e:07:a7:
e9:b5:47:5c:d0:30:61:27:4e:6b:5c:f4:f0:36:96:
f0:c4:48:7d:de:9e:55:3f:df:4f:43:98:14:db:f9:
ca:b2:11:ec:28:bb:91:65:28:47:26:f6:af:2b:ff:
f5:4e:9a:cc:e3:10:e3:85:a8:72:47:0e:48:3b:cf:
44:c8:4d:91:f1:c8:e6:4f:22:47:df:b6:d6:a0:33:
b1:bc:4a:6b:54:f5:20:d1:72:95:3c:85:27:da:57:
43:09:ad:78:3b:67:32:95:5d:4d:df:77:cb:f7:cd:
aa:14:6e:0d:22:0d:7a:f7:de:88:75:56:c8:1a:a5:
2d:7d:33:bf:e3:4e:79:25:a4:10:8f:4a:44:96:d8:
af:2f:8e:51:8c:77:ed:27:b7:98:c2:ee:5b:0e:6c:
94:32:40:aa:63:14:e4:5f:1d:06:57:01:a4:1e:6a:
b2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F3:DC:A5:DB:B3:2E:D2:D6:93:95:85:74:7E:6F:9F:45:10:18:FC
X509v3 Authority Key Identifier:
keyid:4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:fe:c1:8f:89:1b:5c:5a:e6:71:82:ee:28:21:56:56:7a:e3:
91:e7:03:02:eb:c5:bf:30:f5:1b:c9:9f:9a:e5:68:35:c1:4e:
4e:24:20:ac:67:05:e8:7f:8a:08:5b:d2:48:09:0e:70:57:d8:
20:d5:7a:5e:87:86:30:8c:a6:a0:21:c0:44:52:8a:33:8d:fa:
9e:3a:6c:ae:1d:2d:9b:45:65:00:a6:d3:72:d3:7f:bc:b3:da:
f0:e7:19:52:80:97:60:cc:e2:06:3a:26:66:e1:b4:3c:dc:5f:
35:24:58:70:76:e6:1d:40:43:79:84:29:4e:db:58:5e:17:00:
f8:e3:20:3c:29:b3:69:e3:13:47:d0:ce:60:14:19:59:69:8c:
f7:49:fa:a5:4f:cf:27:77:7e:b5:09:14:94:78:8b:6d:61:76:
31:94:cc:f3:13:dc:91:b4:67:5d:aa:ab:a9:1c:b7:4f:bb:a8:
c2:a6:6b:99:2e:f8:41:83:e9:40:a0:83:8f:54:eb:eb:c0:72:
d2:96:f9:60:47:20:de:1c:2a:24:a3:8a:73:8e:69:15:18:d8:
49:ee:79:2e:06:92:da:6e:8f:dd:6e:de:c1:3b:28:47:5f:c1:
5e:b1:bd:91:e8:9a:30:d1:57:1b:8f:50:29:80:1a:dc:35:b4:
56:12:6b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:42 2025 by rpki-client