Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.mft
File: S2z_dGdTNBC5_aL3ACCMGo8MBCM.mft (raw, json)
Hash identifier: kFj3Op2HoxdFERTLQbfvVqzDcWtiG4BXfTkJF9tcSv4=
Subject key identifier: CA:BD:0E:97:87:5D:7D:5F:FA:72:02:E5:F0:1D:75:EB:C0:1A:C2:97
Authority key identifier: 4B:6C:FF:74:67:53:34:10:B9:FD:A2:F7:00:20:8C:1A:8F:0C:04:23
Certificate issuer: /CN=4b6cff7467533410b9fda2f700208c1a8f0c0423
Certificate serial: 0197B5C4B35F4080A303BF845B719E395F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2z_dGdTNBC5_aL3ACCMGo8MBCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.mft
Manifest number: 02A9
Signing time: Sat 28 Jun 2025 09:00:56 +0000
Manifest this update: Sat 28 Jun 2025 09:00:56 +0000
Manifest next update: Sun 29 Jun 2025 09:00:56 +0000
Files and hashes: 1: 1-Lt9NLCsO-0O5Dj-v2US9jmxXIQ.roa (hash: LmWlQzcgikgQeSr2EvN/FytTaYSjoQdRmrdKGtmELxE=)
2: S2z_dGdTNBC5_aL3ACCMGo8MBCM.crl (hash: 6rzDmuSFD7zpBfoGJK3P0YwoXn53nAskpGsw5MUufW4=)
3: hrzuIDRF15oBIKXIQfgIQbF1zzc.roa (hash: JpHqRzFezYOCJs0/enWH8I+qI+ye32fJxiyuYohDsJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2z_dGdTNBC5_aL3ACCMGo8MBCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:b3:5f:40:80:a3:03:bf:84:5b:71:9e:39:5f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b6cff7467533410b9fda2f700208c1a8f0c0423
Validity
Not Before: Jun 28 09:00:56 2025 GMT
Not After : Jun 29 09:00:56 2025 GMT
Subject: CN=cabd0e97875d7d5ffa7202e5f01d75ebc01ac297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5e:24:61:26:ca:08:4b:db:15:26:f5:ea:91:
4e:ae:9b:20:64:f7:1e:46:12:36:c1:13:28:67:bf:
80:db:c1:cf:a6:4e:d1:9d:9c:8b:85:df:29:d3:59:
40:bb:0a:02:4b:b4:c1:0a:dd:7e:ce:df:ad:64:eb:
20:23:72:82:60:ef:e7:17:59:e2:bc:98:50:fb:df:
03:c8:fd:b1:30:80:00:6f:a8:c2:17:61:5d:26:94:
f2:d6:08:ff:34:34:e8:13:c4:58:33:5b:31:0c:ab:
dd:7b:79:73:cf:ae:4c:84:68:b7:b5:e2:c6:b9:20:
03:a0:eb:06:93:4f:1e:6c:8a:33:a1:22:2c:60:c6:
67:c7:80:57:e4:94:94:87:31:4f:1b:54:a7:71:48:
03:b0:ff:ca:a2:e5:98:d8:2a:ab:3f:a0:a2:ce:f6:
f6:ae:20:00:65:63:8f:55:d1:15:72:3e:b1:02:5d:
d5:cf:b3:b2:0e:09:0e:1a:a0:b9:c5:e5:d2:62:29:
de:83:30:37:4c:e1:76:a3:2b:72:01:22:36:77:8d:
58:b5:e9:c5:00:7c:4d:cf:e1:c9:3d:ec:b5:2b:37:
6f:25:56:8c:86:29:97:76:be:3c:86:fd:fb:21:d9:
b5:8b:66:c3:ba:ad:7b:16:e4:0f:b1:b8:6f:b1:e4:
5d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BD:0E:97:87:5D:7D:5F:FA:72:02:E5:F0:1D:75:EB:C0:1A:C2:97
X509v3 Authority Key Identifier:
keyid:4B:6C:FF:74:67:53:34:10:B9:FD:A2:F7:00:20:8C:1A:8F:0C:04:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2z_dGdTNBC5_aL3ACCMGo8MBCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f5:44:fc:e9:80:94:09:15:aa:22:4e:30:d1:f2:db:a6:83:
19:07:34:9a:35:6a:85:bd:ef:0a:2d:59:d7:83:fc:20:4f:f3:
0e:71:25:0f:c5:09:99:1d:46:83:8b:df:84:f1:a0:d0:71:d6:
41:20:a0:b4:96:b7:25:52:fe:21:9a:c8:31:46:bc:ed:9e:d6:
62:76:36:04:7c:09:7e:53:7b:4f:18:03:99:61:c3:f8:9a:e2:
bb:13:b5:ab:09:e3:6b:e8:ba:fa:26:ac:73:ea:42:91:38:60:
31:01:c4:63:63:35:6f:ce:ad:40:db:a7:b2:b8:b7:a5:30:65:
28:cc:26:f7:2c:c5:b1:d5:2f:a2:f9:38:f1:6a:32:75:e4:cc:
f5:42:02:fc:8a:b5:f3:67:9a:a3:1f:c9:90:1f:31:48:79:b3:
be:c0:5a:3a:6a:c0:2b:10:65:2e:5e:ff:2e:d1:2d:0a:5e:03:
89:e0:fa:72:52:40:63:59:f9:a9:0d:0d:94:7b:96:08:5e:4f:
fa:e3:50:ee:4a:05:19:4d:00:74:d1:29:00:ad:5e:10:fd:09:
f9:b3:c6:2a:05:38:56:bb:aa:be:9d:fe:6f:a4:0c:13:df:c9:
27:f0:b8:8f:ac:84:60:1a:d5:ec:e9:a1:5e:a9:f4:99:73:6b:
2c:2e:a5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:50 2025 by rpki-client