Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
File: S84INADK9hbzUCAynI1288S4OaU.mft (raw, json)
Hash identifier: I27pTuTr0EwfCINhZUSGDiXWgQYovogJgfXbK5F/Tck=
Subject key identifier: 5F:69:93:54:69:E0:17:98:BA:63:74:62:8C:FC:D3:8F:B0:F9:C8:09
Authority key identifier: 4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
Certificate issuer: /CN=4bce083400caf616f35020329c8d76f3c4b839a5
Certificate serial: 0197B6D734B168A38B9EC3A1F4168ABB5884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 14:00:46 +0000
Manifest this update: Sat 28 Jun 2025 14:00:46 +0000
Manifest next update: Sun 29 Jun 2025 14:00:46 +0000
Files and hashes: 1: S84INADK9hbzUCAynI1288S4OaU.crl (hash: 8jrHH6SpoxaUmJP+Q56Gk9OUClSD0T8/TIhd2zhxhtw=)
2: xu8AVZlYRkARGQOdM9wgzlgLlPk.roa (hash: z2f5UKfOO2uXvhmwbBAmMbbk0ctXWHQsq/ILki97gKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:34:b1:68:a3:8b:9e:c3:a1:f4:16:8a:bb:58:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bce083400caf616f35020329c8d76f3c4b839a5
Validity
Not Before: Jun 28 14:00:46 2025 GMT
Not After : Jun 29 14:00:46 2025 GMT
Subject: CN=5f69935469e01798ba6374628cfcd38fb0f9c809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:49:7c:62:9a:c3:8e:67:7e:6b:ba:d5:7a:b7:
47:fe:e4:db:7b:16:ce:61:8a:9b:b4:90:11:14:63:
30:80:4c:e4:76:e6:7e:2f:81:17:fc:6c:61:65:f4:
18:9e:39:20:f5:2b:98:b4:0f:5e:67:65:a0:4d:54:
fb:05:f9:9b:76:1e:8d:13:e9:73:68:4b:a3:09:86:
2b:0f:41:9d:2a:99:3d:b1:16:a5:2c:e8:1b:df:6a:
d7:3e:1c:46:09:e5:09:35:96:77:9c:7a:45:34:08:
23:71:10:ac:b6:e7:ce:cd:b9:14:65:ab:68:1c:8b:
be:33:f7:5e:9a:30:29:c3:f1:ee:05:8f:f7:eb:26:
84:8b:4a:4f:78:c2:3d:8c:cf:51:12:52:c8:d9:16:
d1:0c:67:19:03:cf:2d:16:22:60:e9:fc:d4:ec:91:
3d:df:12:e9:b9:7d:8c:dc:b5:5b:b0:cc:d2:9d:d8:
f4:ab:21:9a:f4:ec:6e:d7:1e:fc:d6:e6:fa:e5:a2:
23:b0:6d:90:97:86:be:ef:09:76:78:af:2e:e4:82:
cc:ba:30:2b:84:67:65:0b:8f:fb:3e:ec:d8:f4:a3:
f0:ab:85:c2:b0:4b:86:7b:06:f7:47:1b:87:5f:39:
2b:06:af:f9:99:6c:8e:6e:da:68:29:0e:7c:22:c8:
d5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:69:93:54:69:E0:17:98:BA:63:74:62:8C:FC:D3:8F:B0:F9:C8:09
X509v3 Authority Key Identifier:
keyid:4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:48:31:38:44:bf:4e:40:ef:49:a8:42:0f:cd:03:10:5d:bb:
fa:19:26:61:4d:cc:36:8a:af:82:ea:68:2d:d9:49:69:f0:d0:
43:c6:5a:3d:f9:52:e1:2b:48:8e:fb:d1:df:4a:31:53:93:46:
81:52:21:40:00:e7:64:98:ed:97:af:cb:97:38:31:06:6f:f5:
76:60:bd:97:d5:83:a3:b4:9c:01:f2:1a:c6:22:ae:80:88:61:
be:ad:05:8a:f1:2f:3c:0d:d5:25:02:48:c1:04:8e:18:0b:59:
08:08:61:3d:87:d8:10:f6:20:5e:85:bb:06:50:c3:90:61:7c:
64:a8:73:d9:3d:12:3a:0a:6f:92:5d:52:ae:a4:05:29:c7:02:
7c:d7:71:5a:ce:ca:e7:69:31:05:af:f1:a6:3e:62:21:71:1f:
c0:ee:b0:6e:75:bc:0c:af:7e:7c:24:12:49:bd:4b:2e:ef:b2:
f8:a7:43:c8:45:07:c4:81:18:55:ab:eb:81:c7:b6:37:53:33:
b9:21:03:4f:3a:1f:5b:42:0a:3f:62:0c:13:2a:cc:4f:c6:37:
9c:93:13:4f:6e:5d:61:22:58:36:19:dc:36:08:0f:5e:8e:88:
af:df:c8:7f:2b:ee:bb:39:15:18:6e:ef:28:6d:c9:14:c0:a4:
0c:9f:8e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:38:56 2025 by rpki-client