Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
File: S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft (raw, json)
Hash identifier: NtjU07ecdaGo+gZ8ynw5INuOFfKkHbb+sgyCw8yEPN4=
Subject key identifier: E5:61:D5:1E:A7:0A:9E:AA:B9:5D:AB:2D:64:32:03:88:26:DF:87:7C
Authority key identifier: 4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD
Certificate issuer: /CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
Certificate serial: 0198D54E2E2565B1C85704DFCD26F520BD3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
Manifest number: 0322
Signing time: Sat 23 Aug 2025 05:02:07 +0000
Manifest this update: Sat 23 Aug 2025 05:02:07 +0000
Manifest next update: Sun 24 Aug 2025 05:02:07 +0000
Files and hashes: 1: N2ivlz1wZCpdYYLO1Jxljykvn4c.roa (hash: qYmGGsXcI2a1eHN7AFVSkBu0axGqB7MkOzzu5zM+aAU=)
2: S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl (hash: pJ1DmJJ+hA4mpU0T+ycUp0LHZJpeNuxyzUVG/FvDDwk=)
3: y-thR2-wOGxjUF2dmavWMwBsUm0.roa (hash: WQLO7IU5V5iq1uzzyryZYM1QGfm/WLluTpgcnyQ2D8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:2e:25:65:b1:c8:57:04:df:cd:26:f5:20:bd:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
Validity
Not Before: Aug 23 05:02:07 2025 GMT
Not After : Aug 24 05:02:07 2025 GMT
Subject: CN=e561d51ea70a9eaab95dab2d6432038826df877c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:47:66:6d:7a:94:d5:e4:76:95:ba:8c:6c:
2c:86:ae:b1:3a:c1:45:0c:ae:3c:59:74:f9:b6:d4:
3e:4f:cc:06:a3:a7:ff:82:df:ee:98:70:f4:cf:cd:
25:22:44:f5:c6:b9:ac:50:95:fb:8b:5a:3a:6a:87:
18:d4:55:02:cc:7a:c3:7c:4e:9c:3f:35:04:92:5e:
02:56:d2:af:ae:17:e4:39:0d:b6:96:12:8e:6e:fe:
af:01:0c:25:17:d3:72:93:13:d3:bc:63:3d:46:34:
c2:f6:a5:b7:8d:ca:4a:0f:62:2d:6d:42:12:9e:d8:
bf:33:d5:ee:dc:b1:2a:64:0c:64:ae:4f:8d:fe:c7:
2c:7a:cb:31:f8:11:9a:c9:b0:e2:f1:12:ec:45:b3:
7d:1f:63:ce:1b:8f:40:7c:1e:4b:28:5e:69:5b:77:
4f:ee:e6:79:e3:f8:3c:12:c8:d8:dc:74:aa:59:22:
ae:6a:08:1d:c8:b2:cf:5c:cf:8d:eb:7b:f0:d2:21:
00:c0:65:f1:87:e7:09:c6:05:77:79:34:63:fd:29:
5a:c6:e3:a3:93:b1:25:14:cd:cc:ac:ab:85:17:31:
ba:f1:78:c6:f0:0f:76:9c:c3:d3:dd:7c:a4:95:31:
f8:da:3a:f1:73:5b:9a:28:ee:a7:28:50:fd:f0:a3:
a9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:61:D5:1E:A7:0A:9E:AA:B9:5D:AB:2D:64:32:03:88:26:DF:87:7C
X509v3 Authority Key Identifier:
keyid:4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:07:fa:1d:9c:6d:85:07:ba:1a:54:4b:1c:18:51:d7:78:fc:
a8:14:16:d5:f3:34:61:58:f5:01:0a:5f:b0:86:7d:40:49:1a:
9e:91:af:90:6a:a9:b3:90:a6:c5:83:25:dd:55:e5:ad:55:4f:
eb:71:0d:b3:34:58:0b:58:52:cf:ab:61:93:77:62:6e:b6:c8:
aa:ae:42:25:bf:0f:98:03:8d:a3:f0:db:e3:7e:75:30:12:29:
98:b8:67:f5:37:f6:66:df:e6:17:b6:c0:aa:1c:eb:a0:05:96:
71:38:99:d6:16:6a:8c:eb:62:1f:95:ef:c7:87:b4:37:b4:72:
c2:94:13:bc:6e:7d:c6:f0:dd:85:b2:9c:47:86:1e:38:f7:c4:
f8:91:38:5f:ba:b8:3a:6e:23:16:f8:5e:a3:8b:e4:80:35:d0:
d9:24:cc:e7:da:47:0e:ec:07:ec:a0:44:16:c4:08:dc:63:f3:
be:63:60:82:80:b2:a6:86:af:3b:c2:93:35:37:1b:d4:af:40:
dd:cd:f8:45:60:fa:b7:6c:df:2d:4c:da:bd:23:4f:03:2e:99:
53:6c:a3:a2:a8:75:cd:fd:ba:00:87:a9:6f:2c:ba:11:d5:d4:
f6:be:f8:c1:f0:fc:02:71:b9:7a:8c:9d:e1:3c:8b:11:96:17:
05:dc:ec:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:34 2025 by rpki-client