Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
File: S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft (raw, json)
Hash identifier: KOxEovM3ZCq/WS0rE6lk3Ok4aktMZJr+QC6OIjrJ7bY=
Subject key identifier: B0:7E:97:E2:AE:4F:EF:70:51:B4:D1:E5:27:7A:65:B7:D8:1E:3C:E6
Authority key identifier: 4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A
Certificate issuer: /CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a
Certificate serial: 0198D66124004DA05DF14E83FDBE9E8CFBD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
Manifest number: 1337
Signing time: Sat 23 Aug 2025 10:02:27 +0000
Manifest this update: Sat 23 Aug 2025 10:02:27 +0000
Manifest next update: Sun 24 Aug 2025 10:02:27 +0000
Files and hashes: 1: S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl (hash: fqlZoVVbQNCf5OW0rOUHrAX0PM1hZFHUYzKaGBTd0m8=)
2: v45LP4AF3yoZv3u_cLa6vnH8FvU.roa (hash: wIRAiX/f/YijUEe8NVGZoMtagmreVjKidBvqPjwb7Tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:24:00:4d:a0:5d:f1:4e:83:fd:be:9e:8c:fb:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a
Validity
Not Before: Aug 23 10:02:27 2025 GMT
Not After : Aug 24 10:02:27 2025 GMT
Subject: CN=b07e97e2ae4fef7051b4d1e5277a65b7d81e3ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:48:32:c4:ee:5e:fb:fd:2c:c9:59:99:a1:ba:
5d:54:bf:cd:05:93:ad:c6:4b:27:df:e6:aa:00:8e:
3d:7d:55:af:c4:54:ba:04:21:5e:67:52:6d:76:86:
bb:d0:86:83:9e:84:a9:70:3e:11:84:7b:ab:94:90:
09:20:7c:9f:17:73:80:59:5f:94:9c:41:38:66:5e:
5a:ee:a4:cd:f1:c8:95:55:29:45:a5:c7:bf:a4:f9:
22:ce:d8:a2:15:46:33:92:33:bf:15:fe:8e:1d:14:
64:57:d8:5e:6f:2a:a0:9e:5d:1c:f2:01:e7:fe:76:
a8:64:c2:51:62:24:e8:b9:fb:94:08:4a:3e:2a:a7:
9d:f3:95:8c:d9:b0:34:52:6d:3c:cd:e4:65:df:8b:
bd:20:3b:e3:8c:f7:36:c1:bf:a8:49:1f:87:a4:52:
82:45:d6:65:34:e5:f7:d6:99:09:b7:79:f7:32:46:
76:0e:28:08:5d:65:8b:87:1c:42:20:48:46:d5:80:
72:21:2c:00:62:88:25:a7:d9:c5:20:5d:ed:b2:06:
65:a0:fa:86:83:51:6f:42:d6:bc:c3:85:a4:06:3e:
27:0b:e0:59:73:2e:5b:c5:26:2d:00:55:43:48:1c:
87:cb:c9:e7:2b:95:c4:eb:45:c5:ee:33:88:25:f2:
a5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7E:97:E2:AE:4F:EF:70:51:B4:D1:E5:27:7A:65:B7:D8:1E:3C:E6
X509v3 Authority Key Identifier:
keyid:4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:82:f9:ae:91:98:d0:9b:66:e7:0e:38:38:5c:57:b3:6f:f6:
25:87:51:65:1b:94:30:11:6b:99:31:e5:98:dd:61:3c:4b:d0:
5e:ab:4b:37:ba:98:57:6c:2d:ba:05:f0:13:39:51:57:f8:6c:
8b:2a:36:4a:a2:ad:a8:df:67:74:ce:bd:a0:81:64:63:54:7c:
67:c7:2b:c1:d7:25:80:e4:4a:23:28:97:32:23:8d:a1:c2:b7:
21:a7:0b:c3:c1:f0:af:e0:70:4d:b1:d5:74:11:3a:cd:49:0b:
b3:0f:77:57:60:c9:c8:54:f2:41:b1:56:e1:f2:18:ab:29:56:
c3:9c:48:37:6e:97:4d:82:b4:c5:d4:b1:7f:49:37:4c:bf:b9:
b8:72:2d:63:3f:d3:32:b7:df:f2:43:13:c1:c1:a6:e4:0a:28:
dd:a0:27:a7:f3:c7:2a:b7:9d:bf:6d:49:12:18:a5:34:ed:ef:
ef:c9:6d:c0:6f:ef:c1:c9:31:bc:b3:de:d9:ae:47:a7:55:be:
4d:04:2f:2f:94:54:76:f7:13:e8:bd:0a:10:34:5a:eb:56:fd:
76:73:92:ab:bc:4a:a1:2f:6f:9a:f4:ac:11:bc:07:45:d1:8e:
af:c9:24:28:b8:20:71:70:fe:4e:64:ab:aa:e5:e0:ab:69:c2:
2d:3d:8e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:02:37 2025 by rpki-client