Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
File: S2jh-6e0SntmYjayElPX1jYtDYM.mft (raw, json)
Hash identifier: 2MtggwpKGiM7XWkEk8mjPzBN40fJU8IbQiOB3y5+iuM=
Subject key identifier: A9:8E:A1:E9:0E:40:89:67:DD:56:65:DC:BF:64:94:49:41:A4:B8:85
Authority key identifier: 4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
Certificate issuer: /CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Certificate serial: 0197B7EA36EE8E7D76D13F34AB313E00CF4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
Manifest number: 02FA
Signing time: Sat 28 Jun 2025 19:01:09 +0000
Manifest this update: Sat 28 Jun 2025 19:01:09 +0000
Manifest next update: Sun 29 Jun 2025 19:01:09 +0000
Files and hashes: 1: A3eZlYEypGjwef6ovVTvAMEG2Sc.roa (hash: itiiU42XBZajUxpH3eQ5BL8/j+cYwxjPvYG7bJxrjyA=)
2: S2jh-6e0SntmYjayElPX1jYtDYM.crl (hash: KLXip51in8kYvP01v0xsVG8VDnR5aHHg4J7b+pxJxgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:36:ee:8e:7d:76:d1:3f:34:ab:31:3e:00:cf:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Validity
Not Before: Jun 28 19:01:09 2025 GMT
Not After : Jun 29 19:01:09 2025 GMT
Subject: CN=a98ea1e90e408967dd5665dcbf64944941a4b885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f3:28:19:53:70:ff:cd:7d:68:06:a0:c8:31:
df:6f:d8:2d:52:15:eb:87:31:b0:e7:b7:72:30:01:
d0:a4:9d:58:76:cd:21:88:68:df:be:fc:99:e6:32:
94:0b:92:8a:f9:d3:fc:8b:6e:07:7d:92:c3:a6:98:
71:39:5c:a1:ae:56:04:76:65:17:0b:ed:28:0e:41:
fa:36:23:e6:f8:e7:4c:5f:9c:97:5f:31:8e:a9:17:
a6:99:99:85:27:48:bb:07:0b:07:6f:64:34:28:51:
e1:b4:ab:25:e1:a7:4e:90:48:fa:ee:ad:aa:1c:2f:
9a:eb:31:d8:ed:af:0c:73:04:7e:62:e9:80:0a:ee:
5e:9c:99:cb:6a:dc:3b:fb:03:24:a0:07:19:61:48:
72:cd:ae:2d:13:74:3b:c6:7a:94:d6:79:7e:1e:41:
e5:a1:66:05:f9:90:0e:01:6a:48:e7:be:40:f7:ef:
1d:64:d7:58:61:d2:34:86:6d:56:7f:f4:8f:33:81:
c9:4f:d8:8b:46:58:4b:06:99:18:d6:6b:bb:0d:7e:
7b:58:24:30:eb:3f:28:7c:91:dd:20:07:c3:bd:c5:
40:cc:f0:2d:c5:b2:bc:b9:f0:fd:76:84:29:2c:39:
e3:66:cc:62:f6:3d:6e:7f:32:63:9f:03:69:75:34:
82:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8E:A1:E9:0E:40:89:67:DD:56:65:DC:BF:64:94:49:41:A4:B8:85
X509v3 Authority Key Identifier:
keyid:4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:24:11:d3:cf:e5:00:bd:bd:64:7b:91:61:49:af:6f:71:00:
97:1d:1c:dc:0f:8e:fc:00:15:3a:50:eb:49:d1:9f:02:90:44:
d9:c5:6a:51:e8:70:ac:61:ad:5d:8c:27:c1:ed:97:ad:9a:4e:
a6:cb:d0:e4:51:ba:09:d1:29:34:53:5b:0b:d3:9d:26:c0:47:
81:71:e0:b0:a4:30:b7:f8:7a:e8:ce:9f:3a:62:ac:50:8d:5b:
c0:2a:24:8e:40:cd:31:dd:1b:ae:c9:1e:00:ab:a7:12:58:4d:
82:cc:f3:a8:8f:c7:00:2d:80:60:6d:07:a0:6d:ad:d5:01:e6:
d2:8f:6a:f2:87:f1:71:7f:3f:24:83:0b:21:ea:45:8f:76:3c:
2c:02:89:91:31:1f:e9:f2:6c:40:7c:55:e4:9c:28:d7:ae:1a:
0c:3d:7f:69:d4:79:a9:d3:8c:ba:f9:75:50:82:b9:1f:00:7d:
b6:e8:d1:9d:d1:94:e4:59:42:59:01:f3:6d:2a:7c:8d:da:95:
c0:2d:54:91:7a:54:9f:47:a9:77:ad:51:ce:2a:b1:35:3a:cb:
2b:17:6b:77:79:f1:7f:3e:bd:f8:50:c6:f8:82:23:c9:6b:92:
cc:b1:bc:65:11:b2:b6:27:c1:b3:bb:f0:ec:f0:08:bc:28:c7:
ca:aa:d8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:06:06 2025 by rpki-client