Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
File: S-kZqE4aIp94nZOdGqpxKk08OZ0.mft (raw, json)
Hash identifier: 1/4fU/AYKv9V1R6c5BWb96j50PqoCQOPUQArK19C+xI=
Subject key identifier: ED:93:3C:34:C9:A5:45:18:C7:70:59:83:6B:79:C5:D3:8D:E3:70:F3
Authority key identifier: 4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D
Certificate issuer: /CN=4be919a84e1a229f789d939d1aaa712a4d3c399d
Certificate serial: 0198D84FFD35C38B65160FC8F1005A6C2893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
Manifest number: 04A9
Signing time: Sat 23 Aug 2025 19:02:57 +0000
Manifest this update: Sat 23 Aug 2025 19:02:57 +0000
Manifest next update: Sun 24 Aug 2025 19:02:57 +0000
Files and hashes: 1: FE9TisHKbwT-TG7WXc-HdjPStqc.roa (hash: pRwsqMoq8wG5C6fvp0aFlXXk9XmPop41EHqaLEOgfSc=)
2: S-kZqE4aIp94nZOdGqpxKk08OZ0.crl (hash: TOHRVS/IYdXUOBobPMekSHGLOwIiRUhGyeiY8oxQKNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:fd:35:c3:8b:65:16:0f:c8:f1:00:5a:6c:28:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be919a84e1a229f789d939d1aaa712a4d3c399d
Validity
Not Before: Aug 23 19:02:57 2025 GMT
Not After : Aug 24 19:02:57 2025 GMT
Subject: CN=ed933c34c9a54518c77059836b79c5d38de370f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ca:cc:38:75:6c:38:8c:16:c1:6c:46:eb:00:
ef:81:c2:71:3f:bc:c7:11:98:bb:14:81:40:7a:11:
52:ad:00:a8:57:7d:dd:9b:03:71:49:2e:b6:4c:40:
01:d8:9b:8b:e5:b8:2e:1e:e8:e3:13:05:41:2c:ed:
a3:89:11:37:a9:a1:62:5a:7e:3d:d1:7f:d2:9e:39:
19:66:61:2e:48:66:1f:08:4b:52:fc:23:e2:7b:c0:
5e:32:46:18:c3:19:13:8a:2e:6f:d3:d2:6b:2c:eb:
ab:52:df:ac:c0:47:32:f2:27:fb:03:a2:30:c1:a9:
29:7b:84:14:1c:68:09:ac:65:09:c7:de:31:6e:3a:
a1:4a:d3:80:bc:ad:71:0a:4a:52:0a:6e:50:59:d4:
27:10:4d:d5:f2:78:39:8f:e1:88:14:9a:94:04:2b:
43:56:19:df:ec:a2:71:5c:ed:2b:30:86:bb:8c:b1:
9b:51:37:e4:c5:59:9f:32:69:eb:f8:99:42:92:f1:
f1:67:c8:c1:f1:a5:d8:9e:cd:9e:fc:87:c1:ee:75:
12:0b:ea:0c:d5:e6:98:15:29:4c:17:c3:db:be:63:
da:16:04:15:ba:c7:ea:e7:ad:72:62:c4:f1:55:ea:
98:da:e5:25:f2:11:aa:1d:46:9e:a7:32:4f:80:0d:
e2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:93:3C:34:C9:A5:45:18:C7:70:59:83:6B:79:C5:D3:8D:E3:70:F3
X509v3 Authority Key Identifier:
keyid:4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:b1:aa:7c:0a:c0:7e:e5:48:89:8f:62:c4:89:e2:2a:b6:ea:
7b:07:cb:16:c9:c7:ad:e7:02:7c:81:6c:ea:70:77:18:18:58:
c2:d3:2c:14:d2:9c:68:e8:9e:73:50:41:84:2c:e0:76:49:59:
06:f5:5c:28:78:f4:41:d2:3c:e8:b1:6b:04:bc:c3:b5:c5:7b:
01:0e:57:67:f7:0c:06:4a:cd:28:f6:1d:ef:79:17:56:88:a1:
2d:4e:2a:e1:b6:3e:57:f6:91:32:79:87:67:3e:5b:f2:ec:47:
ba:11:8e:64:9e:04:0b:6e:75:f2:c9:a5:5a:72:96:1e:93:6a:
fe:d7:37:2a:8e:d2:19:05:3a:66:a3:68:d6:9c:68:6e:8f:5d:
69:5d:e4:14:5d:37:19:57:17:17:8b:55:0b:dd:f1:48:fd:2d:
97:30:1b:ad:ad:01:94:c3:a3:35:7f:6b:3c:01:a5:3b:af:09:
74:db:aa:68:db:85:98:40:24:1b:e7:7d:cd:08:79:6a:80:a1:
2c:cd:10:58:74:ad:26:d8:1f:24:f7:ec:d0:cd:84:1a:b0:ae:
8b:86:95:9a:d9:8b:d9:d3:d7:80:c3:c1:dd:54:83:93:d3:91:
d5:ca:b1:a4:46:10:11:45:36:3b:c4:21:08:96:fc:ca:96:0b:
a0:74:4a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:46:38 2025 by rpki-client