Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
File: S-zMnRp26RRpy2OxK_cl1966-xs.mft (raw, json)
Hash identifier: KeG54XTBSRv+QdmMldap5Wt/alC5KDoUHmAUUBONGro=
Subject key identifier: 13:9E:71:3A:D3:DF:36:6B:7A:60:A1:FC:79:EA:14:55:7B:AD:58:C4
Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
Certificate issuer: /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Certificate serial: 0197B9D8F9237FF8FDEDBDF0034270AAC158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
Manifest number: 0BBE
Signing time: Sun 29 Jun 2025 04:01:33 +0000
Manifest this update: Sun 29 Jun 2025 04:01:33 +0000
Manifest next update: Mon 30 Jun 2025 04:01:33 +0000
Files and hashes: 1: 7fSgZ-LQDYvguJzdZ14V0z0FUCE.roa (hash: bUjKLDflZP/Ln3EKUyE+zKMongCT5xOF2uDWHet5S9I=)
2: DiRUXj-wMeKTJD3aUfG_fU2alsE.roa (hash: C8nsHrwSkn8Gd1JmzSYSfUzGZSwYITwrUGRtmf3pI4s=)
3: Ru-jgtHHtk22zU2Iz9obbyyNqtA.roa (hash: JK2Fg/eBJyup1fiSh8xdKaGSDAo/evkcOv83dZLvh1k=)
4: S-zMnRp26RRpy2OxK_cl1966-xs.crl (hash: VFiwU9OkP4f8eUOJlwMhRwXeZYazkO7y6BnePIhIT0g=)
5: WzBH8kAZVhitfGs3LpWEVIaX2DU.roa (hash: yyE311L3mhjCKLl6ozIj/e45U2t4pgo+mFiZj5vWZ9E=)
6: vTYkTnZMEaqfhCdiY5ia6c9viZw.roa (hash: m5F7OL9Eo2LVurzs6A9iXzsVS70f86h9K1zL5V462Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:f9:23:7f:f8:fd:ed:bd:f0:03:42:70:aa:c1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Validity
Not Before: Jun 29 04:01:33 2025 GMT
Not After : Jun 30 04:01:33 2025 GMT
Subject: CN=139e713ad3df366b7a60a1fc79ea14557bad58c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f6:1f:97:05:b5:ab:19:1f:c0:81:45:b7:4c:
28:69:13:93:b9:7c:f5:2e:39:5f:9a:af:67:6a:69:
b6:33:69:5f:a7:4e:4d:4f:5b:df:f5:02:1c:11:c6:
fa:56:21:5d:91:65:72:57:e5:ae:b7:8b:5a:b3:38:
4f:0f:19:07:f1:36:60:14:ec:d3:77:f5:32:b3:51:
8c:df:52:37:b7:73:af:02:ce:0e:29:29:37:54:1a:
c9:30:10:fe:96:d7:62:b3:77:35:96:db:60:14:a1:
11:71:6c:93:6d:2f:d2:c7:71:a0:ea:76:ec:33:17:
01:e9:ac:8f:9b:d6:22:f2:57:5f:b2:14:3d:2b:8c:
c7:f7:89:23:1f:54:f9:3f:4d:f8:8c:37:dd:d5:80:
ab:22:a6:4b:7a:9b:b8:fd:d3:65:0b:2f:41:26:79:
e3:e5:4c:c0:a0:a9:17:99:00:c9:6f:25:4c:d2:82:
b7:88:01:2d:e4:e2:35:fe:86:01:0e:97:45:90:d1:
d7:25:7d:8f:e7:09:be:56:d7:2c:17:26:3d:72:70:
82:cf:93:bc:b6:38:04:74:19:7c:e6:83:cc:c4:b3:
4c:e9:f0:74:e8:06:2f:3f:a7:c2:d4:e7:91:ec:8e:
ad:d3:6a:14:17:80:97:f1:fe:1c:1f:d3:9f:24:11:
75:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9E:71:3A:D3:DF:36:6B:7A:60:A1:FC:79:EA:14:55:7B:AD:58:C4
X509v3 Authority Key Identifier:
keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e7:28:c6:f3:54:4f:0a:5f:06:1d:18:28:4e:06:32:c4:e5:
f2:af:e9:a8:df:e8:12:ad:9f:ce:38:58:65:26:28:74:7d:0b:
02:0c:55:0b:98:fb:21:67:11:16:ef:06:98:46:a8:a5:6c:ba:
fa:f2:23:52:ce:45:c5:ed:22:97:d7:88:22:4d:63:a4:6c:f0:
78:6f:7a:10:24:16:a1:b6:8e:c3:ce:18:b9:67:8f:6a:02:e5:
4b:0e:a9:8c:00:63:13:83:44:00:bf:59:e5:9d:56:db:fb:f2:
31:d4:c0:ab:54:a9:21:fb:eb:83:ec:94:95:6b:16:ad:27:19:
4d:7a:98:8b:7f:ac:02:90:28:c9:97:ad:04:ae:99:bc:ad:25:
31:4e:75:9c:17:f4:58:a0:e1:fc:70:f8:3f:20:91:fe:ba:4f:
ef:fe:af:97:db:eb:0e:a7:7b:0b:c4:03:4b:5d:cb:90:1e:24:
63:22:c1:2f:d9:26:62:71:d1:84:bc:dc:eb:79:6a:be:c1:16:
ba:ff:ff:97:44:5d:f6:92:34:b3:32:56:b1:74:5e:62:70:02:
ea:71:ab:78:4e:54:31:4d:53:fc:db:d7:42:5f:73:8b:a8:ea:
3c:06:40:6d:69:ab:7e:ce:ef:80:62:2c:b5:70:95:43:4b:61:
df:3b:15:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:28:42 2025 by rpki-client