Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft
File: S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft (raw, json)
Hash identifier: QtYODJZFUsx3v5k2zH4UllCQMyhUO4lztCwgDGpgApo=
Subject key identifier: 0B:CC:03:43:0A:3A:41:A7:FA:10:56:88:0F:1B:C0:9A:C1:DB:B8:DE
Authority key identifier: 4B:72:06:6D:7E:6C:A8:AD:2F:FA:62:A6:9B:06:79:23:A4:2D:F9:6F
Certificate issuer: /CN=4b72066d7e6ca8ad2ffa62a69b067923a42df96f
Certificate serial: 0198D5F19B346C1C7D1BF35EAB63F3798F0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft
Manifest number: 12E4
Signing time: Sat 23 Aug 2025 08:00:37 +0000
Manifest this update: Sat 23 Aug 2025 08:00:37 +0000
Manifest next update: Sun 24 Aug 2025 08:00:37 +0000
Files and hashes: 1: 1D0kryG-hg5X4kNtLF0_L_6fbtc.roa (hash: Zop4UA3qvwcLs+PgF6ZAbdQWhdOq1xNbvhqjWudAWN0=)
2: S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.crl (hash: GYSk6ks9a+r/a82Vs1yyWl5oryZ0EoxKFU27C6ScPPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:9b:34:6c:1c:7d:1b:f3:5e:ab:63:f3:79:8f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b72066d7e6ca8ad2ffa62a69b067923a42df96f
Validity
Not Before: Aug 23 08:00:37 2025 GMT
Not After : Aug 24 08:00:37 2025 GMT
Subject: CN=0bcc03430a3a41a7fa1056880f1bc09ac1dbb8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:db:9e:0f:35:82:64:fa:ce:8d:61:d2:0f:
0a:ca:d0:9e:be:4f:a7:cb:70:6d:fe:92:12:2c:35:
1b:3d:ee:a4:6e:6a:85:12:d4:24:c3:84:ae:1a:8f:
c3:dd:86:e5:77:e0:7a:30:10:1a:1c:db:99:63:e3:
9a:3a:a7:74:51:29:00:01:12:d7:cd:ee:27:60:04:
3a:86:b1:94:a8:d0:f3:93:3c:cf:b7:18:66:5e:9c:
da:f7:fa:14:8c:ff:59:4f:f9:12:b1:af:f0:6d:5b:
d7:ef:8b:d3:fd:25:5a:b2:32:2f:31:14:2d:d3:29:
4f:ac:60:ad:22:11:29:dd:ff:5e:7e:61:4a:a0:3c:
2a:9d:9e:16:04:01:42:16:4d:1f:6f:5d:5a:26:3c:
c7:74:24:4f:55:9d:5b:de:e8:d9:4f:42:4c:51:8f:
0f:8a:83:8e:ed:1c:b7:ee:09:64:d6:a5:bd:0e:e4:
1a:2c:b2:f7:44:ef:24:25:65:9f:9c:12:26:00:92:
4a:f2:3c:43:60:20:2a:66:35:e6:9b:2c:2d:e9:a1:
3c:fe:7e:a0:cb:64:7e:75:b1:6b:80:05:8c:44:d5:
4d:2d:8d:63:c3:ba:32:96:47:59:4b:21:ff:4f:7b:
74:92:8c:99:06:82:76:75:e8:ab:c5:09:1d:cd:89:
b5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CC:03:43:0A:3A:41:A7:FA:10:56:88:0F:1B:C0:9A:C1:DB:B8:DE
X509v3 Authority Key Identifier:
keyid:4B:72:06:6D:7E:6C:A8:AD:2F:FA:62:A6:9B:06:79:23:A4:2D:F9:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:bf:21:42:9d:87:dd:d8:83:25:d3:4f:a1:ad:9f:83:78:0f:
b8:7b:ab:55:20:12:ed:5f:1d:46:73:24:09:da:13:e8:3e:77:
ed:75:ca:44:26:e8:e3:10:c4:de:63:df:e8:07:a7:f5:23:e8:
20:3c:23:fd:3e:3c:7f:af:16:f8:95:f8:c4:ab:c3:f8:cc:24:
1d:d1:3b:a2:f4:04:87:c8:d1:17:0d:c9:6b:77:a0:6a:5b:4f:
c2:74:8d:b2:50:b8:71:a8:c1:94:c2:d9:8d:d7:e0:2a:45:85:
e9:12:b4:cb:68:bf:a9:06:67:ce:7f:3a:31:56:83:fd:6e:82:
cb:f4:d4:f0:ec:f5:61:97:9e:95:fb:d4:07:8a:74:8d:79:dc:
60:27:3b:6b:a7:b0:d6:f3:57:68:83:a7:75:c5:5d:2f:03:b8:
fe:e6:de:fa:b2:38:12:fc:76:05:b8:57:ad:0a:91:3a:a8:43:
46:a6:98:0d:47:96:6e:d9:2b:78:cc:6e:8e:f6:e3:76:32:ae:
39:fb:e1:43:20:2a:ff:96:24:39:c7:6f:3d:53:cc:05:0d:83:
1f:ea:d1:89:11:35:38:2a:ce:ab:56:83:e7:44:29:39:e2:58:
7e:6b:4f:ce:d3:20:d4:1c:42:41:a5:92:b3:27:ec:41:3c:52:
e3:56:74:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:30:58 2025 by rpki-client