Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
File: S3tzzZvRdD99P17GvVChk170gB4.mft (raw, json)
Hash identifier: 3zns20GnbTfmui4iuIlBHIO79oAtcQNipCQX+YD4qIQ=
Subject key identifier: B1:1E:FF:20:EB:09:68:29:8C:49:8C:08:0B:EC:D8:98:3A:42:10:C7
Authority key identifier: 4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
Certificate issuer: /CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Certificate serial: 0199FF228C53BEC5C76DE0D41B89064C641B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
Manifest number: 1673
Signing time: Mon 20 Oct 2025 01:01:17 +0000
Manifest this update: Mon 20 Oct 2025 01:01:17 +0000
Manifest next update: Tue 21 Oct 2025 01:01:17 +0000
Files and hashes: 1: M2oh_KntEbzSd5x9NMZSq_CLZnQ.roa (hash: x3vhRRKg/BRlfpWUDclKnemjloDpJmmJOqeSSdSoUa4=)
2: S3tzzZvRdD99P17GvVChk170gB4.crl (hash: zibIPe6GeYuDumyDRi9RQ2dh4pnwsWpAWsXwEEJFJBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:8c:53:be:c5:c7:6d:e0:d4:1b:89:06:4c:64:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Validity
Not Before: Oct 20 01:01:17 2025 GMT
Not After : Oct 21 01:01:17 2025 GMT
Subject: CN=b11eff20eb0968298c498c080becd8983a4210c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e8:fa:bd:cc:39:9b:2b:a5:a3:d8:66:34:96:
bb:c2:b7:58:2d:55:b8:d6:7d:c8:4c:ac:b0:0d:66:
e2:d2:dd:c3:61:0e:94:84:77:dd:23:79:4e:b9:da:
83:fa:35:b5:c4:e4:a5:12:63:bb:62:59:32:e0:56:
54:02:e3:bb:83:67:9a:50:20:27:f2:58:b1:0b:17:
4e:19:1e:18:f8:e1:7c:fa:57:db:38:9e:4b:18:55:
de:15:ef:79:67:d3:0f:ce:87:2b:36:b1:a7:99:24:
04:30:94:31:76:2b:13:e9:fa:54:e5:35:76:2a:9f:
4f:bc:2c:ca:e6:12:82:39:e3:f9:9c:54:9e:15:22:
e9:b4:76:a4:3d:6c:eb:38:08:be:a5:51:85:69:0e:
a5:42:e3:f3:37:9b:e7:0b:80:b6:cd:f8:fe:e3:71:
47:39:9d:a7:eb:81:54:34:5c:bd:04:5f:4a:28:e7:
05:46:53:c6:97:84:30:1c:24:2a:fc:cf:9d:93:68:
e1:db:0c:bf:31:af:73:7b:9c:e0:88:55:5b:98:c6:
8b:6c:e7:5f:53:35:31:08:19:7d:6d:fa:22:a9:5e:
a7:f5:59:14:5f:b5:99:4e:c5:55:7e:2d:e9:ee:d4:
20:53:e6:79:9d:a8:be:a3:53:02:e2:78:e9:51:44:
e2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1E:FF:20:EB:09:68:29:8C:49:8C:08:0B:EC:D8:98:3A:42:10:C7
X509v3 Authority Key Identifier:
keyid:4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a6:f2:08:54:4d:19:2b:11:98:35:c5:68:a6:20:2e:80:3f:
ba:3e:8f:98:74:22:fb:e0:07:e9:03:21:78:ec:1d:91:b2:9f:
0b:ee:01:a5:01:6b:b2:b8:aa:4b:fe:26:61:b0:6e:8a:42:cf:
70:18:b9:c0:6f:d7:d3:d1:30:48:2a:1a:35:73:ca:08:9a:3d:
5f:46:8b:e5:8c:de:11:11:c8:f1:74:27:44:a7:4a:bb:b3:2a:
53:e4:38:eb:05:3e:13:25:6e:2b:87:f8:01:eb:ce:5c:46:e5:
5c:17:59:43:41:76:4c:74:ae:e3:59:a3:1f:15:67:53:8f:cf:
a7:96:fd:70:36:a1:fb:83:6e:20:d4:67:a2:df:3e:4f:da:c1:
53:ee:a1:9b:5f:78:fb:66:d0:b9:21:04:56:2f:ae:13:b0:1c:
b6:3a:c7:54:04:36:5e:af:2e:b8:a0:18:ab:8d:6c:7a:e1:e3:
3b:f8:cf:aa:97:60:6b:c6:d9:b7:7f:1b:a3:83:94:81:6e:58:
f5:c7:0b:fc:52:ac:4f:0b:0d:e7:7b:2a:61:55:e1:f0:47:4f:
c1:e5:a3:a9:2b:ba:67:c7:85:bb:cc:a2:f3:6d:7b:ce:0a:15:
d1:6e:4d:fe:ff:b2:38:69:eb:49:30:86:3c:eb:f9:77:d8:bb:
ce:bf:7b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:27:42 2025 by rpki-client