Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
File: S2jh-6e0SntmYjayElPX1jYtDYM.mft (raw, json)
Hash identifier: iXuFGZQFaBtaasT+4li8cqTUb2IV8KiNOLFPvPxiZro=
Subject key identifier: 36:CC:B1:2D:E6:20:16:CF:3C:7E:7E:CD:4F:E8:2C:04:F6:8B:87:9E
Authority key identifier: 4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
Certificate issuer: /CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Certificate serial: 0198D5BC44A3049E9C7A910B3738D484C89B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
Manifest number: 038E
Signing time: Sat 23 Aug 2025 07:02:22 +0000
Manifest this update: Sat 23 Aug 2025 07:02:22 +0000
Manifest next update: Sun 24 Aug 2025 07:02:22 +0000
Files and hashes: 1: A3eZlYEypGjwef6ovVTvAMEG2Sc.roa (hash: itiiU42XBZajUxpH3eQ5BL8/j+cYwxjPvYG7bJxrjyA=)
2: S2jh-6e0SntmYjayElPX1jYtDYM.crl (hash: nrZ3dyqtlIGW2fdvJRn0fSwq09v5mAxdrm0wTNF+2O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:44:a3:04:9e:9c:7a:91:0b:37:38:d4:84:c8:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Validity
Not Before: Aug 23 07:02:22 2025 GMT
Not After : Aug 24 07:02:22 2025 GMT
Subject: CN=36ccb12de62016cf3c7e7ecd4fe82c04f68b879e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:66:b6:f7:5f:f9:52:f8:b5:a4:f3:9d:d5:7a:
c3:8d:75:7d:7d:70:0b:b9:d0:df:b3:84:b5:41:af:
17:4f:7a:7e:b7:3b:aa:6e:a5:9b:d4:7a:d2:16:b4:
3b:ec:e6:6c:c8:7c:53:a0:ab:e6:cd:b9:3a:f4:2a:
05:74:59:e4:77:4d:d8:01:72:17:3e:c8:2d:f4:87:
b0:07:62:4c:50:c9:dd:22:ca:c4:aa:d4:a2:f5:ad:
53:90:15:11:8c:95:11:88:66:1f:a1:df:c9:21:e8:
70:de:5d:f7:da:02:2f:44:9e:f0:0b:5f:50:d1:d0:
cc:0d:8c:b1:6a:5d:31:e1:15:f1:90:15:8c:cd:7c:
e0:30:aa:f2:c0:02:40:72:9b:c6:4a:e2:50:e7:02:
ee:4e:6a:3f:a3:54:b2:05:81:e1:e5:5c:2a:20:9c:
31:9a:b3:b7:21:23:71:e8:c9:c4:53:9e:10:74:17:
f0:1f:2c:30:46:87:cc:a4:bf:fb:5b:94:e1:88:50:
a0:54:5d:16:b4:f6:4d:22:e4:7d:df:f1:cd:1e:70:
10:03:db:56:e5:11:15:5a:fb:1e:5e:e2:fb:4b:50:
f7:8c:84:2f:63:8a:68:20:da:6c:0c:f2:50:2d:84:
0e:76:09:00:ba:77:8f:78:5b:f0:b5:fc:27:51:94:
bb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CC:B1:2D:E6:20:16:CF:3C:7E:7E:CD:4F:E8:2C:04:F6:8B:87:9E
X509v3 Authority Key Identifier:
keyid:4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a7:66:89:9a:4f:79:97:ba:d0:91:dc:a8:0f:af:50:3d:8f:
26:6d:91:b7:f5:ae:5a:d3:8e:97:36:3a:32:c5:a0:0d:73:ea:
b2:e1:41:d9:53:af:bc:c6:44:51:e0:fa:6a:c0:aa:d4:8b:71:
ca:90:32:ef:50:f0:cb:7d:c8:11:b2:a6:88:42:be:53:38:49:
4c:1b:73:fc:bc:e8:18:3e:be:b2:a9:fd:cb:db:7a:5f:da:e9:
61:70:02:e3:ed:16:88:59:2b:9f:a1:f3:30:3d:71:8d:e5:52:
6d:a7:ae:fe:51:ab:b2:7d:86:82:e4:94:64:04:d4:0d:79:4d:
64:40:09:af:17:82:c3:b5:58:ee:04:92:c4:10:a5:50:86:ec:
09:05:ce:a8:a7:09:06:3f:86:9b:3e:af:5a:b8:84:30:b3:3d:
37:f9:ae:64:a9:fc:1f:47:3a:12:93:02:05:c1:82:a0:e4:48:
18:7f:e4:cc:ad:b0:3a:64:41:27:11:46:f3:4d:68:1e:96:1d:
6a:ff:2c:a8:50:56:40:5e:6d:20:00:08:00:14:b9:1a:e3:b5:
f7:3c:ec:2c:f5:97:11:7c:28:ce:90:05:e5:8c:96:7e:45:50:
bc:e9:f8:be:b7:da:78:24:61:b3:bb:0e:bf:55:ce:a6:4e:87:
d1:30:78:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvESjBJ6cepELNzjUhMibMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNjhlMWZiYTdiNDRhN2I2NjYyMzZiMjEyNTNkN2Q2MzYy
ZDBkODMwHhcNMjUwODIzMDcwMjIyWhcNMjUwODI0MDcwMjIyWjAzMTEwLwYDVQQD
EygzNmNjYjEyZGU2MjAxNmNmM2M3ZTdlY2Q0ZmU4MmMwNGY2OGI4NzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyma291/5Uvi1pPOd1XrDjXV9fXAL
udDfs4S1Qa8XT3p+tzuqbqWb1HrSFrQ77OZsyHxToKvmzbk69CoFdFnkd03YAXIX
Psgt9IewB2JMUMndIsrEqtSi9a1TkBURjJURiGYfod/JIehw3l332gIvRJ7wC19Q
0dDMDYyxal0x4RXxkBWMzXzgMKrywAJAcpvGSuJQ5wLuTmo/o1SyBYHh5VwqIJwx
mrO3ISNx6MnEU54QdBfwHywwRofMpL/7W5ThiFCgVF0WtPZNIuR93/HNHnAQA9tW
5REVWvseXuL7S1D3jIQvY4poINpsDPJQLYQOdgkAunePeFvwtfwnUZS7+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbMsS3mIBbPPH5+zU/oLAT2i4eeMB8GA1UdIwQY
MBaAFEto4funtEp7ZmI2shJT19Y2LQ2DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzJqaC02ZTBTbnRtWWpheUVsUFgxall0RFlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mMTQwNzktNDExNC00YmVjLTg3OWMt
OGIwNmVjNTY0YTFiLzEvUzJqaC02ZTBTbnRtWWpheUVsUFgxall0RFlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9mMTQwNzktNDExNC00YmVjLTg3OWMtOGIwNmVjNTY0YTFi
LzEvUzJqaC02ZTBTbnRtWWpheUVsUFgxall0RFlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGadmiZpP
eZe60JHcqA+vUD2PJm2Rt/WuWtOOlzY6MsWgDXPqsuFB2VOvvMZEUeD6asCq1Itx
ypAy71Dwy33IEbKmiEK+UzhJTBtz/LzoGD6+sqn9y9t6X9rpYXAC4+0WiFkrn6Hz
MD1xjeVSbaeu/lGrsn2GguSUZATUDXlNZEAJrxeCw7VY7gSSxBClUIbsCQXOqKcJ
Bj+Gmz6vWriEMLM9N/muZKn8H0c6EpMCBcGCoORIGH/kzK2wOmRBJxFG801oHpYd
av8sqFBWQF5tIAAIABS5GuO19zzsLPWXEXwozpAF5YyWfkVQvOn4vrfaeCRhs7sO
v1XOpk6H0TB47w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:57 2025 by rpki-client