Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
File: S58x5zUqhwe5jG0nNI6LxJPRqa8.mft (raw, json)
Hash identifier: JQbxoHeS8qARXOzwIeBrJFWgdtjX1zpVyCz7caYOQ9A=
Subject key identifier: 16:ED:01:AA:C0:A0:C6:AB:FA:B5:62:9D:04:62:56:BA:83:F5:FB:B5
Authority key identifier: 4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
Certificate issuer: /CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Certificate serial: 0197CEA8AFA56A1930E78549A68D582950C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
Manifest number: 15C2
Signing time: Thu 03 Jul 2025 05:00:50 +0000
Manifest this update: Thu 03 Jul 2025 05:00:50 +0000
Manifest next update: Fri 04 Jul 2025 05:00:50 +0000
Files and hashes: 1: JOqhFiRetaCWX-COli2qt4epZmU.roa (hash: Tggn3wwdEvZYJd/9CH5nD5nBnaCH9L0m/C7cCJYB59s=)
2: S58x5zUqhwe5jG0nNI6LxJPRqa8.crl (hash: 1RiqAF6NegklraYVtg93rExdd59iUXbeS6cZYh+odx0=)
3: rPpO-fPVx8XfYvByx6grU3jDRqc.roa (hash: yhGIutrfrX3qPTF0PHHiWDvjrLT7q6l6BKv9z17Nw1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:a8:af:a5:6a:19:30:e7:85:49:a6:8d:58:29:50:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Validity
Not Before: Jul 3 05:00:50 2025 GMT
Not After : Jul 4 05:00:50 2025 GMT
Subject: CN=16ed01aac0a0c6abfab5629d046256ba83f5fbb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:66:11:9c:11:f1:52:00:c0:5d:dc:91:bf:5b:
17:fe:52:17:e3:f3:9d:4a:95:58:90:5f:da:1b:56:
d0:54:06:69:d0:de:97:0b:53:e5:d5:67:3e:42:55:
a0:09:73:e4:aa:b6:7c:92:ed:2f:54:dd:34:8a:39:
2d:93:5a:1e:59:5e:35:b6:bb:94:c3:e5:d7:66:a0:
60:36:53:f4:78:af:f9:9d:0b:bd:f5:90:77:2a:7a:
a1:27:dd:53:d0:0f:3f:b8:d4:cf:df:f5:5e:f3:e2:
72:f7:11:e7:36:ab:61:f2:22:4d:92:9e:96:a4:e7:
8c:4f:f4:6a:9f:03:9e:5e:21:c0:fb:08:91:e8:a8:
78:40:1c:1d:0f:92:9e:10:67:ac:6e:78:a2:86:9b:
6e:df:4c:c9:fb:db:2d:07:85:8f:4d:1b:59:0d:ed:
93:21:13:69:b9:53:6c:4f:2a:fa:48:e2:d7:5f:8a:
11:c9:fb:3d:b8:6d:80:2f:5a:4a:9f:93:e8:67:58:
49:cf:20:f8:8e:5a:e5:1f:0b:4f:be:b3:9b:2c:95:
6d:dd:9c:41:cc:7c:ff:1b:24:48:1e:66:d9:6f:5a:
93:e2:37:06:7e:7c:a5:b2:83:09:e6:41:9f:48:21:
e7:0d:29:48:0c:86:97:9c:fb:b7:33:4e:86:a1:1c:
0c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:ED:01:AA:C0:A0:C6:AB:FA:B5:62:9D:04:62:56:BA:83:F5:FB:B5
X509v3 Authority Key Identifier:
keyid:4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:93:f3:73:63:32:ae:f7:f2:e2:3e:11:e4:a4:6e:a2:64:57:
c0:77:b3:92:e6:11:a2:bc:0b:46:c9:00:06:45:e0:28:5e:f4:
0d:4b:88:3d:35:1a:ec:97:21:eb:bc:86:28:56:ab:be:dc:d2:
3b:f8:d1:7c:55:46:bf:36:a1:af:e0:af:26:29:a5:ca:19:7e:
6b:a6:64:56:0c:dd:de:b4:8f:02:58:09:cf:3c:f7:c7:f2:83:
04:ad:81:fa:8d:09:7c:3a:66:b4:3f:48:0e:0b:96:4a:24:0b:
0c:33:72:64:00:a2:20:cc:a0:1f:e9:2a:f8:ec:45:04:d4:c2:
38:e5:30:06:be:b7:8d:43:7a:3d:0d:16:d3:f4:82:a3:13:a4:
e0:73:4b:61:6e:c5:ac:ff:5c:10:1e:68:2b:17:b0:dd:70:b2:
d7:42:e3:00:ca:38:15:76:b6:2f:69:51:25:12:6b:4d:d3:11:
76:f5:79:e0:15:9f:c7:12:b8:41:15:e0:1d:92:2b:88:1d:a2:
d5:71:3d:1a:55:1d:fa:c5:7c:39:5e:fc:e0:96:c8:ec:e8:57:
93:fa:d3:10:3f:cc:54:b4:9d:0d:16:35:1d:5b:84:32:75:66:
2d:39:93:cf:d8:37:ab:01:64:4e:3e:50:44:4d:a1:d0:9f:dc:
ff:a0:42:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:07:48 2025 by rpki-client