Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
File: S9Kz8xprCl18Bpijd5alHXsMtqQ.mft (raw, json)
Hash identifier: 115oWjYJbRzBzdly3W0paBJHQ+QSWHpgyK6r+3Ga4xU=
Subject key identifier: 2D:D7:CE:48:9B:BE:ED:8D:5C:7B:B2:1D:C0:2D:1D:64:F6:53:A8:DD
Authority key identifier: 4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
Certificate issuer: /CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Certificate serial: 0197B7EA931FE8D3D0C50E29049B28B2C84B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 19:01:33 +0000
Manifest this update: Sat 28 Jun 2025 19:01:33 +0000
Manifest next update: Sun 29 Jun 2025 19:01:33 +0000
Files and hashes: 1: Rdx8XfheQK9SaYz_CldryphH9T8.roa (hash: y/tJ0RmbT3dmGd7x3jwaVo6j1E4t/44CEGiNjsjlces=)
2: S9Kz8xprCl18Bpijd5alHXsMtqQ.crl (hash: uVxUj4U0x+J0Yf3i9xWfiysuiAzwvWbQ5iTlPQ0yOzE=)
3: fUKc1eWdHmKeTh30S5pWd_dRf4M.roa (hash: GDoe187PYSy+m1pOUWwfwziOM1L2+4EiEEfpzL06VQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:93:1f:e8:d3:d0:c5:0e:29:04:9b:28:b2:c8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Validity
Not Before: Jun 28 19:01:33 2025 GMT
Not After : Jun 29 19:01:33 2025 GMT
Subject: CN=2dd7ce489bbeed8d5c7bb21dc02d1d64f653a8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:33:94:1a:2e:8a:ec:cc:a0:36:79:72:44:b4:
11:ef:dc:90:aa:27:14:95:fa:17:db:99:31:8e:9b:
47:fb:b7:d6:ea:8e:d4:b9:3e:49:2c:30:a2:d2:1f:
47:b6:02:4e:77:c6:62:52:5d:b8:b6:d9:95:b6:27:
7e:51:01:0d:52:18:9d:99:7b:e2:38:57:52:cd:ee:
28:49:f6:e7:b6:03:41:fb:66:54:c3:38:5f:d6:f1:
31:d8:03:df:19:07:fa:4c:aa:e0:7d:44:69:a4:5e:
1e:72:19:47:bc:1b:3e:5a:3c:3b:dc:8c:5a:6b:35:
a6:5b:6b:d4:01:f5:25:2f:96:c8:b1:66:71:fc:8e:
dc:bd:6b:30:e6:a7:0b:77:78:b0:d4:b4:f7:13:d9:
c6:ad:c4:43:74:b9:79:1c:33:dc:68:94:15:71:8a:
5f:90:10:80:6c:b3:34:24:9f:30:8d:b3:8a:bb:8f:
3d:31:be:82:33:43:09:cf:f0:ec:3b:f2:15:68:19:
77:d7:ca:0d:3f:f9:df:dd:d9:78:17:cb:ef:1c:30:
cf:64:42:a3:2b:e3:ee:bb:a7:7e:35:7a:6a:7f:45:
fb:f0:93:ab:c0:fa:55:d8:bd:28:5c:b5:a9:9a:78:
7d:66:9a:22:31:ea:6c:d8:70:50:9d:84:4a:76:cd:
7a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D7:CE:48:9B:BE:ED:8D:5C:7B:B2:1D:C0:2D:1D:64:F6:53:A8:DD
X509v3 Authority Key Identifier:
keyid:4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ff:ee:3c:d5:a0:40:45:5d:ff:9e:e6:c1:99:27:e7:34:75:
47:0c:06:ba:af:07:d3:1c:09:af:bd:a8:b4:86:8f:ee:87:35:
30:f6:e6:d3:13:aa:24:19:e6:9c:ba:c5:bd:ca:59:63:1e:ac:
5a:bb:35:08:1d:b0:dc:25:3a:95:22:5a:cd:7b:75:ef:18:14:
9a:ba:99:18:d4:96:9e:de:12:8b:0b:d4:1e:0e:da:66:e6:93:
70:2d:bc:8f:96:7f:4d:b2:22:7f:49:08:bf:c5:07:7c:70:06:
c7:0d:ce:b4:24:68:da:b7:4c:b8:dd:f6:69:a6:0f:d8:22:99:
51:0f:ad:e9:d9:4a:f9:d5:03:24:b4:6a:87:d1:08:f1:d6:8b:
f6:d8:a8:ff:23:76:69:cd:c2:76:fb:bf:b3:83:23:60:38:ae:
a5:d7:f8:a7:d3:10:de:6d:ab:6f:a4:da:d9:6e:b5:3d:e4:54:
31:4a:50:d4:bb:de:56:2f:d3:37:b0:9c:3d:43:c7:3f:fb:7f:
eb:ef:31:0a:ec:48:76:2a:c4:8b:6f:24:6c:f2:80:79:36:8c:
2e:c9:7f:c6:c7:64:20:a4:d4:13:ae:1d:32:99:26:bf:bd:48:
19:a4:78:65:9d:f4:64:5f:fd:5e:3d:24:e7:a1:10:66:1e:69:
c1:96:ea:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:24:34 2025 by rpki-client