Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
File: S81y1ss4Wjozxsj-VFnGhqaElQk.mft (raw, json)
Hash identifier: qaFyLbCWDn7zOPTYiupptVYeGmUx8L8bkIDfJl3HlWY=
Subject key identifier: 7C:1B:95:DC:C5:97:FC:C8:F8:74:B3:5F:03:DC:BD:59:33:BA:71:20
Authority key identifier: 4B:CD:72:D6:CB:38:5A:3A:33:C6:C8:FE:54:59:C6:86:A6:84:95:09
Certificate issuer: /CN=4bcd72d6cb385a3a33c6c8fe5459c686a6849509
Certificate serial: 0198D4E0A68B5DC4EF46687C3AA5DD47ED58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
Manifest number: 1123
Signing time: Sat 23 Aug 2025 03:02:29 +0000
Manifest this update: Sat 23 Aug 2025 03:02:29 +0000
Manifest next update: Sun 24 Aug 2025 03:02:29 +0000
Files and hashes: 1: S81y1ss4Wjozxsj-VFnGhqaElQk.crl (hash: J/KcfbrsXaLyppw9SVfdEXDL9/rG1hMh1SY7pH3Mzg4=)
2: wEf4V0fjRLwMdiaytYSjwCEyTHU.roa (hash: lUa2DLkPGwF47ayLCrKzv9wyplQdvB6BMfu9nJfZZtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:a6:8b:5d:c4:ef:46:68:7c:3a:a5:dd:47:ed:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bcd72d6cb385a3a33c6c8fe5459c686a6849509
Validity
Not Before: Aug 23 03:02:29 2025 GMT
Not After : Aug 24 03:02:29 2025 GMT
Subject: CN=7c1b95dcc597fcc8f874b35f03dcbd5933ba7120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3a:ef:55:e1:80:64:6f:0e:22:b7:af:93:b2:
d1:8e:7c:64:77:0b:23:61:2a:a1:71:85:2d:10:88:
b2:84:44:7f:a7:30:d6:e5:67:98:4c:fa:06:43:93:
4f:97:9d:82:0c:b2:c0:85:e8:f7:ab:01:48:2a:f9:
9f:bf:31:d7:15:94:d9:6c:0f:12:84:c5:ce:f8:f9:
60:2a:c9:7f:c2:e2:62:a0:17:38:4b:c0:ff:5e:e6:
c3:a4:d5:df:cd:0f:10:ae:64:9c:9f:f8:35:f3:cb:
c6:1e:0a:1c:d1:48:8c:bc:c6:77:38:d1:c9:70:93:
68:cd:ce:d2:2f:8b:87:03:25:39:02:c0:8e:f7:1b:
5b:28:fd:10:2a:cf:3d:a5:00:50:86:08:4b:ec:1b:
41:2b:1d:ab:b6:0d:33:0c:f4:8f:55:ab:66:23:93:
ad:70:61:ed:4b:3c:a8:a0:c3:27:cf:db:88:e7:7f:
f7:3f:55:1a:d8:fe:c8:14:f1:45:a7:ac:4f:41:44:
17:a4:f2:aa:3b:98:3a:95:b2:ba:22:3a:d2:2d:e6:
01:de:be:0f:fc:8f:e6:2e:f9:07:52:7d:ee:9b:36:
df:a7:f5:f7:41:47:ba:ca:f8:f4:df:2e:c5:a9:a8:
9a:27:a3:2a:fd:8c:1a:69:89:a5:f5:eb:a9:cb:7c:
f4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1B:95:DC:C5:97:FC:C8:F8:74:B3:5F:03:DC:BD:59:33:BA:71:20
X509v3 Authority Key Identifier:
keyid:4B:CD:72:D6:CB:38:5A:3A:33:C6:C8:FE:54:59:C6:86:A6:84:95:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4d:e3:74:12:b0:cb:a0:2d:3c:0a:54:0e:b2:2f:f4:ed:c6:
e4:89:22:23:02:54:bd:4e:e6:c5:1e:55:3e:40:8f:23:27:ef:
20:0e:c0:de:1c:84:8b:98:f6:75:35:d9:6d:90:1c:a8:28:8e:
18:91:41:d1:1e:e0:b6:39:79:f8:e1:81:56:3e:a6:82:34:2c:
7c:7a:d7:6b:7c:d0:b4:3f:4f:4f:62:34:03:f1:04:19:a9:5e:
be:e4:79:0d:fa:96:90:55:ae:cb:ea:93:09:ab:fc:6c:ae:50:
45:a4:91:7c:e9:d7:43:5e:75:94:35:d6:44:8a:36:4d:a5:9f:
05:2a:17:d9:25:54:6e:00:bc:a4:1d:e6:a6:0a:1a:63:98:be:
ea:8e:19:47:cc:42:5d:2f:1d:81:14:c5:4d:6c:25:ee:e9:c7:
4d:e5:a0:57:fe:8d:cd:aa:ae:0b:aa:12:b1:a5:ac:f0:94:f6:
8d:b1:0a:d7:f9:b7:8e:b0:e4:33:90:4b:06:e5:c4:b8:15:4e:
c3:8f:ec:09:f4:00:77:a8:89:7d:da:1c:59:26:1f:8c:df:e2:
62:41:15:73:fd:30:bc:3c:1b:ec:74:5d:51:9c:03:df:e5:68:
16:36:c3:31:0f:ad:12:4d:20:e5:8e:e2:5e:06:5d:ea:b7:31:
f7:90:be:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:49 2025 by rpki-client