Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
File: S70EYZouForJV1Iu3_Ai-QvApN8.mft (raw, json)
Hash identifier: JhcaJDazZPGWlH/Z6mxGfVaiQcksXUIMvS1qJMAXZrc=
Subject key identifier: 8F:BC:7C:AD:28:43:E8:3A:47:B6:67:30:2D:7A:03:97:46:57:91:3E
Authority key identifier: 4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
Certificate issuer: /CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Certificate serial: 0198D661073EDD752E15162EC44097F40103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
Manifest number: 0DE5
Signing time: Sat 23 Aug 2025 10:02:19 +0000
Manifest this update: Sat 23 Aug 2025 10:02:19 +0000
Manifest next update: Sun 24 Aug 2025 10:02:19 +0000
Files and hashes: 1: Fg5ya9jEENzzvmGwH2Ykprm5YIM.roa (hash: o09Ogu5nR2BkFMd5V+jfaqfvdxmKcg813astixFQ7Wo=)
2: S70EYZouForJV1Iu3_Ai-QvApN8.crl (hash: 0cuCCySti4Pyu43kYbJ2Cc+VfExvERUJC6yJtds/BzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:07:3e:dd:75:2e:15:16:2e:c4:40:97:f4:01:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Validity
Not Before: Aug 23 10:02:19 2025 GMT
Not After : Aug 24 10:02:19 2025 GMT
Subject: CN=8fbc7cad2843e83a47b667302d7a03974657913e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:d4:88:1b:69:5f:4c:ab:3a:81:f5:4f:0a:
62:24:6c:ca:6b:ca:ad:2f:b7:23:76:32:2c:27:56:
e4:39:e4:06:a7:f1:9c:da:f8:8e:cb:4d:df:53:34:
99:14:7b:88:af:cb:c1:4a:34:5c:f5:80:e7:eb:70:
66:ab:47:43:1f:38:48:18:33:95:1c:d1:20:14:b4:
58:86:d4:49:6b:4f:fd:de:0a:8d:5a:e6:d3:6f:30:
62:a3:49:eb:e4:9f:4b:0e:90:e2:36:b2:a9:52:41:
39:03:b4:5c:dc:2a:c2:75:4b:88:75:be:09:01:23:
5f:35:06:52:e4:fe:a0:12:64:c1:fe:5e:48:4c:2d:
ff:f1:d3:b0:cb:a2:a5:40:8e:62:3d:6d:39:4c:0d:
9a:91:e5:a5:14:cc:b6:74:3d:e1:a7:88:e5:56:05:
65:be:db:1d:4b:94:80:61:08:4d:f2:b7:2f:67:08:
e6:fe:2f:58:c0:07:9d:f1:68:c5:3a:f7:a1:0a:ed:
f2:77:74:9e:a2:2c:a9:be:63:7c:57:4a:28:94:17:
8d:fe:11:74:b4:9b:03:88:69:95:21:99:df:11:e3:
87:23:32:1a:f1:08:5b:d1:90:78:76:27:fa:82:37:
dd:d3:38:66:f9:81:90:fa:b5:a8:14:d2:f6:79:dc:
d3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BC:7C:AD:28:43:E8:3A:47:B6:67:30:2D:7A:03:97:46:57:91:3E
X509v3 Authority Key Identifier:
keyid:4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:50:1f:2d:a6:7a:6b:42:dd:fc:57:9a:09:e5:43:06:b6:5c:
23:68:a8:7c:b4:74:2c:fd:ae:fd:0d:12:7b:92:52:e5:ed:e8:
9d:7d:87:ad:b0:53:78:15:74:bb:ce:98:38:4f:48:d0:6b:ed:
b5:cf:10:65:d2:91:c3:86:05:a2:28:59:9f:1d:39:2c:3b:70:
e4:55:13:bb:0b:f9:56:c5:84:dd:21:90:1b:c8:9c:55:dc:23:
49:91:d2:80:88:54:99:6e:7d:50:d7:08:6d:6d:aa:6d:a4:00:
e1:ef:93:e4:64:9a:90:39:1a:f0:30:bf:be:36:99:da:62:40:
23:31:3f:6a:1b:2f:3b:e0:0b:e1:82:8e:24:25:3a:10:92:c7:
e8:8d:5b:ac:52:b8:fd:ce:89:ad:89:55:4f:b5:61:00:3d:79:
b0:d6:b3:cb:f3:f4:ee:3c:19:b5:7d:27:d5:a5:ba:86:1e:6d:
17:39:36:f4:64:1a:cb:d5:c4:cf:50:db:84:a8:56:5d:2b:b0:
c0:c1:18:ff:f2:b0:eb:af:56:b7:aa:9b:2b:04:d7:d5:f2:90:
90:09:e3:93:06:5c:b0:f5:d4:ef:bf:ea:db:39:d9:42:3f:aa:
84:d4:4d:66:30:8d:e1:22:0a:0d:f7:34:18:c4:a6:39:a8:65:
81:d9:0e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:47:39 2025 by rpki-client