Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
File: S_xaKUEPH_z03ipacFj1FiCzC3k.mft (raw, json)
Hash identifier: 1uSFmn/CKsFYwuucGPa6tR7THaF2+jw/xn2t/gzfaMU=
Subject key identifier: 4B:B7:51:6D:CA:A8:0F:32:76:0C:02:AF:8F:8E:A9:AF:63:6E:9A:9C
Authority key identifier: 4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79
Certificate issuer: /CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79
Certificate serial: 0198D583544308AF388691B57B3EB1650985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
Manifest number: 0DFC
Signing time: Sat 23 Aug 2025 06:00:10 +0000
Manifest this update: Sat 23 Aug 2025 06:00:10 +0000
Manifest next update: Sun 24 Aug 2025 06:00:10 +0000
Files and hashes: 1: S_xaKUEPH_z03ipacFj1FiCzC3k.crl (hash: 1qZYXJr73F0+sbh5uUDkmRKvinXLJ7tu7tSyvLS90/U=)
2: bgx026u65bEUIofoNprJyhzn_S4.roa (hash: mkA02/DFrwmq5MSNIOugSkJaE1Y0Xy5Utto0dixWmsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:54:43:08:af:38:86:91:b5:7b:3e:b1:65:09:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79
Validity
Not Before: Aug 23 06:00:10 2025 GMT
Not After : Aug 24 06:00:10 2025 GMT
Subject: CN=4bb7516dcaa80f32760c02af8f8ea9af636e9a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:be:cd:b1:87:b3:1a:30:97:5d:72:9c:8f:3b:
43:8e:7d:cc:21:0c:b8:a0:1b:70:08:fe:85:80:f0:
7c:4d:c6:3d:9b:fa:4e:fe:03:c8:3e:12:5e:9f:50:
39:73:6e:67:e0:9c:26:22:69:3a:e2:c7:91:99:b1:
2a:ac:e0:d6:a6:95:4a:82:0b:da:a8:3e:e6:ee:bb:
b0:03:4b:66:07:90:1f:2b:cf:bc:18:25:09:a0:d3:
1a:6f:80:85:c6:5e:24:31:b3:5d:b1:96:03:64:10:
4b:0b:81:8c:4c:98:0e:c3:c3:e8:f9:36:82:0d:c4:
82:43:55:90:2d:cc:0b:3c:b1:c1:58:6a:b9:f2:ec:
f9:3f:58:50:5d:18:53:cf:3b:ad:29:0c:63:04:8d:
01:0a:59:38:d1:53:5b:8c:9d:88:ec:07:63:aa:4c:
73:a3:b3:8c:fc:34:f1:e4:bf:ec:30:9f:84:76:4a:
40:82:9d:e4:0c:4f:71:88:42:04:57:72:91:45:fe:
66:6e:f1:5e:80:c7:ea:c6:e5:f1:c5:f4:1e:20:90:
ce:7f:64:3f:fc:b1:f4:45:fc:9a:1b:2f:3f:11:40:
ec:3b:b8:aa:e5:f3:7f:b5:2b:e8:d9:f9:f2:93:db:
d2:b5:c9:5e:aa:00:1b:a0:82:f4:12:30:18:46:7f:
78:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B7:51:6D:CA:A8:0F:32:76:0C:02:AF:8F:8E:A9:AF:63:6E:9A:9C
X509v3 Authority Key Identifier:
keyid:4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:92:ad:d8:7f:23:6d:05:33:67:2b:5e:03:9f:32:47:66:8b:
e2:91:d3:a9:f6:4c:cb:3a:18:55:3f:9d:0c:6f:db:86:fb:50:
d0:a3:81:60:fd:7f:a0:9b:36:b5:50:34:bc:5f:9b:11:18:8a:
1a:77:ad:98:ae:51:31:8c:4a:fa:eb:cf:c6:62:cd:9a:cd:cf:
26:70:2a:8d:eb:24:70:2d:e7:0f:ad:c2:d9:c7:c1:5c:41:46:
18:3b:8b:8e:40:e9:27:05:ea:eb:1e:30:1f:26:e1:de:1e:51:
b2:f4:f9:fb:3d:a3:7a:1f:f3:83:5f:fa:1e:de:4e:ce:31:a4:
0c:f9:b3:9b:d4:5e:ef:4f:e2:e2:74:eb:a4:14:c8:f0:48:63:
4e:9b:c6:af:fd:47:1c:08:b4:49:0c:51:19:09:42:e4:73:31:
d7:3c:2a:fb:05:fc:f1:1f:ae:ba:85:1c:69:f2:21:b6:42:7b:
b4:5a:66:9a:a9:c9:3d:5b:18:69:92:bc:9a:62:76:46:9c:bf:
c5:a0:9e:34:a2:ae:16:c6:44:07:1f:67:bd:71:f1:62:ca:6e:
8f:20:4c:ca:e9:25:cd:64:68:f9:8d:ac:13:95:3b:30:57:be:
48:b8:66:bc:3c:11:fc:4f:80:9f:41:30:8c:a2:f8:96:6e:bb:
fc:be:c1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:10 2025 by rpki-client