Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
File: S70EYZouForJV1Iu3_Ai-QvApN8.mft (raw, json)
Hash identifier: oAAOAdIBLE/0lio2pUAuSAmN1/AYSUSt4YGFeeNM+SU=
Subject key identifier: D1:83:C2:2F:9F:8E:1F:E7:C7:79:05:77:51:29:E4:38:91:4A:D2:6E
Authority key identifier: 4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
Certificate issuer: /CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Certificate serial: 0197B6A1B3877660D469EB3757475BE933A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
Manifest number: 0D50
Signing time: Sat 28 Jun 2025 13:02:19 +0000
Manifest this update: Sat 28 Jun 2025 13:02:19 +0000
Manifest next update: Sun 29 Jun 2025 13:02:19 +0000
Files and hashes: 1: Fg5ya9jEENzzvmGwH2Ykprm5YIM.roa (hash: o09Ogu5nR2BkFMd5V+jfaqfvdxmKcg813astixFQ7Wo=)
2: S70EYZouForJV1Iu3_Ai-QvApN8.crl (hash: hv66LqLGoPJwcPpeu5jOz0scq4cpLCkcrJaFoq+mBzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:b3:87:76:60:d4:69:eb:37:57:47:5b:e9:33:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Validity
Not Before: Jun 28 13:02:19 2025 GMT
Not After : Jun 29 13:02:19 2025 GMT
Subject: CN=d183c22f9f8e1fe7c77905775129e438914ad26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:45:c6:ff:2e:c9:d0:dc:c6:b9:50:f4:48:c8:
2f:1e:2e:65:b8:15:69:54:ce:95:76:1b:0c:9d:28:
b9:1f:4e:1a:ca:b0:08:a7:29:5b:12:1a:57:14:6a:
03:80:df:c8:ce:58:66:78:99:38:9c:fb:08:a4:c2:
84:79:ca:09:ca:df:0d:44:9d:c4:69:c5:e0:d9:65:
cc:c1:64:b4:25:39:ae:ac:35:af:e7:f7:7b:05:4a:
32:03:9e:f5:1f:20:be:a7:db:98:68:78:c6:2d:39:
cc:d5:38:01:cb:1b:a1:be:1e:a9:9e:39:6b:40:64:
1b:ad:71:a3:57:3f:8c:06:3a:cf:0f:fe:2d:3e:11:
51:76:05:b5:ff:7b:85:a1:34:fc:ad:1e:16:74:b7:
46:d6:4e:71:22:c7:ee:01:fa:cf:15:08:31:d6:b5:
1d:e2:be:a9:55:64:0d:e2:68:6a:0f:22:c3:0e:a7:
ed:ed:7c:19:64:7f:56:58:0b:83:04:8e:89:82:b5:
ac:48:f4:82:33:26:bb:88:7f:c6:0a:51:0b:58:20:
aa:34:ad:14:a8:65:e6:31:71:bc:c8:cb:d2:f5:19:
35:62:e0:83:74:17:37:07:de:be:ad:74:e8:44:8c:
d6:7b:1f:11:97:62:84:64:6d:c1:13:5b:b2:c3:73:
1f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:83:C2:2F:9F:8E:1F:E7:C7:79:05:77:51:29:E4:38:91:4A:D2:6E
X509v3 Authority Key Identifier:
keyid:4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:19:ce:86:55:e1:ed:9c:2e:8d:b4:4d:fd:62:d1:fb:81:92:
1f:4b:66:fc:e0:2f:54:3f:42:70:ac:b2:00:9e:98:83:8d:04:
d1:1f:e3:3f:d1:fc:c0:57:c0:6c:1c:b7:7d:eb:1d:8e:9a:e3:
52:52:b7:18:1c:f3:7d:38:f7:56:af:a5:8c:5d:ee:7e:82:5b:
39:71:3a:6e:c7:ed:4a:70:a6:d0:88:0a:d7:55:c3:9e:a1:5c:
f0:d9:5c:ae:60:1e:6a:05:dd:98:16:56:fe:1d:6a:b8:68:77:
a6:62:ef:da:6e:ae:8f:73:d9:cf:d9:f5:30:d4:4f:36:3f:87:
8e:ff:17:f4:f8:28:b9:31:51:5a:c5:84:f3:1f:8d:e2:34:f9:
61:9c:94:cf:31:62:54:1f:e7:2a:5f:31:0e:a0:00:5e:88:dc:
f1:3c:03:fc:a5:04:28:75:51:12:fc:05:0a:2e:f8:87:01:b5:
8c:66:97:f7:11:29:72:0a:2f:4a:7b:a0:dd:f0:07:7f:96:92:
0d:7c:96:86:55:96:cc:16:a9:05:68:e8:72:50:de:a8:b3:33:
2d:18:06:a8:53:c8:50:5e:20:7f:eb:c6:b6:34:87:24:99:ae:
64:86:10:41:91:89:a4:16:fd:52:90:eb:2d:40:ed:f5:b5:77:
27:34:ad:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:47 2025 by rpki-client