Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
File: S2jh-6e0SntmYjayElPX1jYtDYM.mft (raw, json)
Hash identifier: /KearQ+ITJAxoFETJ6zgYvudqOQUVKe06RI3q37Kx8c=
Subject key identifier: B7:06:EE:60:D7:9E:8B:8F:6A:1B:3B:E0:A7:F3:04:56:ED:77:8A:82
Authority key identifier: 4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
Certificate issuer: /CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Certificate serial: 0199FF228309F63765500E4F55225478C1BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
Manifest number: 0428
Signing time: Mon 20 Oct 2025 01:01:15 +0000
Manifest this update: Mon 20 Oct 2025 01:01:15 +0000
Manifest next update: Tue 21 Oct 2025 01:01:15 +0000
Files and hashes: 1: A3eZlYEypGjwef6ovVTvAMEG2Sc.roa (hash: itiiU42XBZajUxpH3eQ5BL8/j+cYwxjPvYG7bJxrjyA=)
2: S2jh-6e0SntmYjayElPX1jYtDYM.crl (hash: KTNIfD/I9xnWPRDqKpGPzGwpD3tIMD1VmiykmzSz3V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:83:09:f6:37:65:50:0e:4f:55:22:54:78:c1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Validity
Not Before: Oct 20 01:01:15 2025 GMT
Not After : Oct 21 01:01:15 2025 GMT
Subject: CN=b706ee60d79e8b8f6a1b3be0a7f30456ed778a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fc:c7:c0:8e:4f:9f:34:52:50:cc:4c:5c:6e:
9e:f8:30:a5:37:d2:14:ea:62:f8:d6:b4:4e:5d:fe:
3f:b7:b0:95:ab:a1:f2:e3:4e:f2:eb:b9:cb:61:7c:
0e:10:19:70:cb:b2:76:a8:0d:cf:a7:47:c7:82:b3:
82:0a:2c:ce:5f:87:6b:79:71:70:4b:13:65:e9:2e:
b7:93:71:c7:06:b1:04:0d:82:a9:e1:42:2d:a2:b6:
ef:ed:b2:24:92:14:5b:29:5c:39:79:03:cf:95:fb:
be:3c:11:44:3d:09:a1:b2:68:8a:5c:21:1b:42:79:
75:6f:0a:e3:44:04:e3:a9:41:c2:d1:25:cf:17:a5:
9d:b0:aa:ae:44:04:d9:d0:7b:7a:2f:a8:23:1f:3d:
f5:69:6e:a8:2b:82:c0:95:84:1e:ac:ab:94:99:20:
e4:ec:9d:30:d3:50:ef:7d:9e:4f:1a:bd:23:2b:a5:
94:77:56:e1:98:92:06:92:3f:61:ac:b2:54:fb:0a:
f1:61:c9:9e:cb:61:12:34:80:29:18:47:3e:5a:df:
3a:22:95:5e:6a:00:69:02:2e:31:85:96:d1:d9:19:
a7:3e:54:a2:04:70:a5:53:88:8d:89:ab:0d:5d:6a:
c0:d4:f7:56:56:77:e6:ad:0e:cb:38:20:67:34:91:
87:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:06:EE:60:D7:9E:8B:8F:6A:1B:3B:E0:A7:F3:04:56:ED:77:8A:82
X509v3 Authority Key Identifier:
keyid:4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:12:8b:30:d7:bc:06:d5:e6:89:6f:ec:a1:d0:9b:bc:3d:0d:
65:c4:d7:c1:7e:70:f6:af:bc:b2:93:8b:35:2a:2a:99:43:f0:
ea:16:e9:9a:f7:5d:af:45:ab:40:b7:5f:85:6f:23:2f:f1:94:
aa:d7:6d:4e:bb:03:fb:71:4c:91:47:5c:49:ca:07:1d:0f:ad:
a8:fb:5a:e3:d8:70:8b:5d:f4:40:52:ed:50:10:72:b5:63:b8:
49:21:93:92:bf:85:bb:70:b8:16:8e:1a:e7:22:db:ff:24:45:
79:2f:11:6e:e6:a4:02:93:dd:79:0c:dc:85:98:ab:6a:fa:ee:
bf:b3:d4:c5:a1:90:99:58:93:cc:96:03:18:24:06:14:4b:7f:
61:61:b8:e4:5a:18:27:9c:1d:18:bc:11:ea:96:55:6f:0a:30:
f8:6e:a0:1b:a6:d8:05:9e:ce:b7:9c:11:89:d9:22:48:d6:ba:
be:62:55:47:c4:69:21:40:7e:d4:4b:8c:61:a7:94:5c:9b:dd:
73:09:c1:c8:73:b6:29:c4:9e:24:59:89:b5:de:a8:79:55:a8:
92:1e:41:aa:0e:34:98:17:14:27:72:ba:7f:55:ad:0a:f9:fb:
63:5d:a7:62:75:73:98:25:0e:96:f6:20:ca:3e:be:2b:84:10:
55:7e:78:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:09:28 2025 by rpki-client