Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
File: S4cDP8aofTuNDLPOGrK6u-UroxE.mft (raw, json)
Hash identifier: UWez0E6YedpriKNHPPpnxOmyesFUzG4Zj8kPKDc7Y/Q=
Subject key identifier: 0E:15:D2:C8:C9:2A:79:E2:0D:B0:7E:77:81:E4:B3:56:64:7B:59:67
Authority key identifier: 4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
Certificate issuer: /CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Certificate serial: 0198D5F17F2981CD9C3DD4E335F95274987C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
Manifest number: 1529
Signing time: Sat 23 Aug 2025 08:00:30 +0000
Manifest this update: Sat 23 Aug 2025 08:00:30 +0000
Manifest next update: Sun 24 Aug 2025 08:00:30 +0000
Files and hashes: 1: 8OZ4Eudn-Zmm9BJklLqYUOhBro8.roa (hash: nQrHTPYYHsaKcsU7K7NBUNZKUwu8kquBvMwb0t9InZk=)
2: S4cDP8aofTuNDLPOGrK6u-UroxE.crl (hash: UgptDrdK2YWr5DtsxA9I6agFZg7b7riIKioFwlyncpU=)
3: rP00SjYOc7kI37LHeR0akx0WLbw.roa (hash: HwxnGSpBCBewjdHMOMeKuWHUwmAgwVnpqM4EW67Q304=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:7f:29:81:cd:9c:3d:d4:e3:35:f9:52:74:98:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Validity
Not Before: Aug 23 08:00:30 2025 GMT
Not After : Aug 24 08:00:30 2025 GMT
Subject: CN=0e15d2c8c92a79e20db07e7781e4b356647b5967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2a:a7:4a:7a:f5:9c:ee:aa:c5:1f:6a:89:d4:
7e:59:57:04:cd:8a:7d:9c:f1:32:68:48:54:61:1c:
de:af:84:11:d7:e7:44:54:fd:6a:94:bf:04:7f:93:
98:65:4c:b2:9f:b4:61:ab:8e:31:44:df:5b:50:24:
91:c4:a8:31:e6:0b:0b:6f:ba:78:dd:fe:ce:df:ff:
af:24:2c:7b:33:25:5c:d5:09:c0:e3:7c:5b:5e:78:
4e:aa:be:82:f1:0a:a2:b9:f6:28:29:ad:4d:a1:f8:
e9:1e:bd:97:cf:74:c1:b1:54:81:b3:0a:5f:90:b5:
be:7a:61:28:dd:93:5b:48:0c:84:33:85:b7:55:35:
c7:af:04:86:63:d6:d7:79:d8:bc:6d:19:2a:40:0b:
ed:20:c2:11:9a:8b:9a:ca:5d:96:29:0e:0f:75:18:
b4:a5:27:62:19:ac:7e:a7:a1:25:ea:66:1c:ce:9e:
0c:52:73:b0:82:5f:d4:c8:04:be:e9:fa:ab:fc:82:
6c:a0:09:31:90:f4:c7:2f:1d:bf:a8:67:e8:55:6c:
45:c8:84:ac:91:5f:48:06:ed:29:33:61:79:4a:de:
83:c8:57:2c:37:09:ff:3b:9f:fc:41:9c:53:ca:65:
10:71:57:c5:d7:a1:3d:b9:ed:a5:3a:bf:6d:86:1d:
a2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:15:D2:C8:C9:2A:79:E2:0D:B0:7E:77:81:E4:B3:56:64:7B:59:67
X509v3 Authority Key Identifier:
keyid:4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:00:11:e4:00:40:e3:08:8c:74:37:09:f8:a7:1c:80:63:d9:
f3:84:82:3d:1d:51:8a:d5:bf:9c:3f:dd:4a:9b:0b:0b:ca:bc:
eb:a2:cf:97:a7:03:94:71:d8:08:10:31:b1:be:58:90:d0:a7:
2a:9d:f7:fa:e2:ee:f2:12:59:0a:21:18:20:8b:f4:59:b3:14:
e2:7b:06:6a:80:02:35:d2:86:88:84:8f:7b:77:fa:32:5d:7a:
b1:49:3c:eb:ae:79:90:f1:cb:d4:66:be:42:ff:20:3f:86:d8:
74:24:87:b3:fe:9f:d4:3b:c4:36:9f:c1:51:18:3d:56:ed:22:
8e:e5:c8:eb:58:56:36:55:23:46:3e:27:92:8e:aa:4f:bc:52:
22:43:7d:1f:a3:80:c2:86:1d:51:a8:d5:cb:04:d9:a0:53:3b:
89:3d:c2:d2:c9:99:a1:54:26:d8:89:e9:cd:c0:af:27:62:7b:
6a:bc:d1:59:23:60:d1:5d:24:7f:e1:74:f3:90:fc:21:b5:eb:
4c:6f:5f:1e:59:fd:f0:24:4f:c5:1c:32:79:91:db:61:33:6e:
bd:63:9d:eb:bb:da:35:b1:9b:1b:23:48:78:28:c3:ce:85:a0:
c3:a1:89:49:54:96:77:ec:c0:37:89:ed:03:e2:52:25:b3:3f:
46:21:02:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:32:30 2025 by rpki-client