Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
File: S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft (raw, json)
Hash identifier: r+FYAnSOHLPXM/fuM3yEg5/O5/RAy6zngRsXVH53tC4=
Subject key identifier: F6:49:E8:B0:DE:3A:BE:97:8C:55:31:9F:13:F1:84:95:D7:92:1F:60
Authority key identifier: 4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD
Certificate issuer: /CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
Certificate serial: 0197B77C668BA330DD4D154493E54B6F7A82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
Manifest number: 028E
Signing time: Sat 28 Jun 2025 17:01:12 +0000
Manifest this update: Sat 28 Jun 2025 17:01:12 +0000
Manifest next update: Sun 29 Jun 2025 17:01:12 +0000
Files and hashes: 1: N2ivlz1wZCpdYYLO1Jxljykvn4c.roa (hash: qYmGGsXcI2a1eHN7AFVSkBu0axGqB7MkOzzu5zM+aAU=)
2: S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl (hash: xXBRo1qgI2VM1OziEBMq3zkMGfGhsPdWJeODXW5OpPE=)
3: y-thR2-wOGxjUF2dmavWMwBsUm0.roa (hash: WQLO7IU5V5iq1uzzyryZYM1QGfm/WLluTpgcnyQ2D8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:66:8b:a3:30:dd:4d:15:44:93:e5:4b:6f:7a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
Validity
Not Before: Jun 28 17:01:12 2025 GMT
Not After : Jun 29 17:01:12 2025 GMT
Subject: CN=f649e8b0de3abe978c55319f13f18495d7921f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:29:59:43:e1:55:91:3b:80:a2:64:d5:e3:a6:
77:71:86:10:1c:61:d8:0e:12:ec:dc:b7:9f:d3:3a:
1d:5c:2a:68:d4:4f:59:48:41:41:ba:fb:0b:56:a5:
a7:6a:45:d6:b4:2f:74:8d:51:bc:0f:8f:f8:b9:13:
a8:aa:5e:30:3f:3e:22:dc:0c:02:4f:80:43:4f:fb:
b2:fd:e7:7a:90:ab:61:2a:8a:62:53:45:79:f4:c9:
df:3f:5d:4d:27:55:ae:e3:70:d7:f8:18:86:92:6e:
35:04:42:02:34:00:a0:90:6e:59:a4:8e:22:70:f0:
45:33:39:45:d9:64:77:6e:d7:73:31:dd:98:20:0f:
31:45:76:5d:45:a1:1e:b6:56:ef:5c:00:42:19:bc:
88:cf:16:d0:01:cf:5b:a3:a5:87:4a:78:27:7e:ee:
06:01:97:5f:83:14:d8:2c:2a:0b:c4:28:1b:3d:01:
74:4b:0a:1a:d0:aa:f0:c4:bb:49:58:29:85:b1:c4:
03:c3:af:59:39:71:cd:13:2b:c3:48:65:f4:d1:ad:
90:65:6b:c5:13:c7:22:c3:ad:61:fe:ad:a1:de:7e:
8b:4c:dc:dc:45:af:35:92:8c:a2:72:58:72:dd:f4:
13:53:d7:4d:7d:9d:81:09:15:32:12:88:f1:81:f4:
5d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:49:E8:B0:DE:3A:BE:97:8C:55:31:9F:13:F1:84:95:D7:92:1F:60
X509v3 Authority Key Identifier:
keyid:4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:4f:67:a4:04:a2:bc:12:bd:9c:6b:16:6e:d0:cc:47:de:76:
57:77:79:37:21:66:8f:b6:ee:bf:d3:dd:86:9f:d4:26:92:07:
5e:77:da:8b:0f:61:68:ff:2f:9a:1a:39:ec:71:f9:7e:aa:53:
50:f5:80:84:8e:7d:13:86:5e:fe:e0:d8:56:fd:e8:9c:4f:bc:
02:19:13:a4:71:4c:b4:4b:9e:e4:21:82:99:cb:eb:82:41:91:
25:8f:94:8b:b8:1f:d6:92:44:f8:d4:68:a2:59:95:67:ec:ca:
d7:67:70:4f:63:41:fe:04:56:c5:56:dc:3a:ce:63:43:4f:06:
23:59:7f:7c:56:bc:c3:2f:cf:b0:61:a3:02:9f:31:90:29:f2:
57:6b:cc:df:69:f5:09:9a:95:14:cf:6c:70:fb:81:3c:bd:23:
ee:ec:92:26:b6:c0:61:27:aa:7b:5f:91:9b:0e:e5:6b:a5:15:
9b:d6:5e:5f:c2:63:d5:f1:22:4a:ba:40:89:b2:b5:ea:de:81:
c6:e7:dd:8d:0f:a3:a2:68:54:c2:21:bf:f0:eb:6d:14:84:6d:
b9:e6:00:b3:0b:30:20:3f:ec:8f:b6:d7:94:f8:28:75:77:aa:
ca:75:df:85:89:f0:e2:d7:b8:8f:fa:21:ff:87:e7:04:5d:62:
3c:79:9d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:06:31 2025 by rpki-client