Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
File: S4x70MRIa6Bzzi3lO6B01w5Ftec.mft (raw, json)
Hash identifier: GZ5QyINgb7/eWsWnQkcgTyywc9+kUr8v+1wrrg5PKfg=
Subject key identifier: 2F:28:36:6A:26:E7:27:90:6E:59:65:2A:B3:23:65:51:7D:D4:4C:A4
Authority key identifier: 4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7
Certificate issuer: /CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
Certificate serial: 0198D6CD7814F1E43C956DBEBD27B2BB3378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 12:00:46 +0000
Manifest this update: Sat 23 Aug 2025 12:00:46 +0000
Manifest next update: Sun 24 Aug 2025 12:00:46 +0000
Files and hashes: 1: 3JM1DqiUyjfx5MdpsDwZLHS0SmA.roa (hash: q6Ea605SgtRXxY5NI/ZcpQt4PK8j0Kx+z2u5Y/QaL0k=)
2: S4x70MRIa6Bzzi3lO6B01w5Ftec.crl (hash: PQJRyBxH6jXsUpZg3vieUX4IjvAx0EnsrTyOawOwfz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:78:14:f1:e4:3c:95:6d:be:bd:27:b2:bb:33:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
Validity
Not Before: Aug 23 12:00:46 2025 GMT
Not After : Aug 24 12:00:46 2025 GMT
Subject: CN=2f28366a26e727906e59652ab32365517dd44ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:51:68:90:50:a7:ca:c2:77:dc:8f:71:18:e0:
0f:75:82:23:07:d8:9f:11:fe:29:22:bd:8c:e5:a9:
c3:b0:ad:4c:ce:b6:55:27:27:2e:4b:b4:2d:23:69:
36:3e:74:fa:7a:b4:01:21:32:f6:b6:31:f3:7c:8f:
85:c9:e8:6b:15:0e:b9:23:b4:fc:f6:34:e8:20:63:
61:be:f5:4a:a2:b4:44:f7:7a:7f:85:4f:66:3a:3e:
32:82:34:2e:97:28:65:c3:ee:df:4b:c0:cf:f5:73:
dd:12:ec:1f:78:1b:a7:8c:29:28:b9:bc:bd:a0:3b:
e3:0a:45:4c:97:70:30:a8:a2:fd:83:0e:c1:73:ec:
d8:e8:ac:47:61:8d:a1:8f:e7:b5:64:63:69:6c:85:
8b:22:ce:ba:a4:86:66:8b:59:c2:2b:de:0c:7b:30:
a4:0b:bb:26:95:5d:08:64:66:d7:f6:3f:7e:eb:b5:
7d:11:6e:66:f4:a3:6e:e1:a0:87:e5:18:df:a1:50:
37:81:b5:92:cb:a3:fd:45:f5:a1:f6:d1:e4:6c:71:
2d:40:e9:9c:89:24:12:76:19:00:ce:96:cb:23:cf:
2c:ef:1c:de:4e:55:94:74:51:8f:d4:58:00:3b:76:
b2:d3:68:b6:a1:8e:1c:ff:41:34:b6:64:8c:94:14:
ba:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:28:36:6A:26:E7:27:90:6E:59:65:2A:B3:23:65:51:7D:D4:4C:A4
X509v3 Authority Key Identifier:
keyid:4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:3d:5f:70:74:8f:fa:b6:ec:c9:3d:f6:77:7b:5e:c7:17:d4:
c7:31:48:09:2c:99:1f:25:54:1f:37:a5:d1:7f:ba:0d:d5:f9:
18:e2:c1:9f:b0:fd:cc:17:81:b0:47:e7:ca:f8:4b:fb:53:04:
f2:cf:02:bc:41:52:86:ec:9c:5f:18:c4:49:6d:a7:d7:26:a5:
88:a5:83:9e:7c:f3:90:cd:92:39:31:6f:4a:d4:eb:14:86:dc:
57:4a:66:9e:b2:02:2f:f9:bd:bd:6f:54:08:a4:44:dd:02:f6:
6e:5c:59:c5:cd:07:d1:cc:23:5a:ed:0f:00:8c:1c:0d:57:ad:
08:0f:ed:b3:31:ea:ab:c4:8f:15:35:b1:69:e4:8c:7f:34:2d:
02:8d:03:e7:a1:d1:32:ed:1f:76:9d:95:f6:50:38:6f:23:37:
3c:a8:ce:61:5a:18:99:68:ea:5b:fa:93:17:06:6a:54:d7:64:
36:7c:5b:93:93:49:7e:58:15:8a:7d:16:96:8b:c5:cf:3e:e9:
0d:87:07:93:ae:52:8b:57:75:5f:59:d7:bd:be:b5:ad:88:7a:
5d:5d:c6:69:5c:66:b6:ec:f0:fa:c4:2e:e0:f4:be:fb:79:0b:
28:23:bf:8f:88:67:62:f9:9e:de:d0:25:bd:95:55:ec:dd:9c:
e4:8e:e5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:39:22 2025 by rpki-client