Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
File: S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft (raw, json)
Hash identifier: Nxmb4dxiLtJYT9gIvUvHtnKVohcFye7O3/q0crt6/ls=
Subject key identifier: 3A:88:84:EC:0D:0E:69:29:49:13:D5:80:8B:CF:3E:D2:5C:4F:54:FC
Authority key identifier: 4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A
Certificate issuer: /CN=4b53f9567f6d6ad89412c0515f74647612dce04a
Certificate serial: 0198D51629F7B6A5A1E54CB2C11194A8C5BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
Manifest number: 09DC
Signing time: Sat 23 Aug 2025 04:00:56 +0000
Manifest this update: Sat 23 Aug 2025 04:00:56 +0000
Manifest next update: Sun 24 Aug 2025 04:00:56 +0000
Files and hashes: 1: J7p5wtvbY-cMGJ6nvKT1OtYA-Zs.roa (hash: /UHQgN6Hv0VvhpZbRReiWBOzZfKm+MHd/Eg+DBeHzxk=)
2: S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl (hash: H4LVq0+lh1fF8sXzNgcavmlyBEPha4Q56S1XVU3cvcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:29:f7:b6:a5:a1:e5:4c:b2:c1:11:94:a8:c5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b53f9567f6d6ad89412c0515f74647612dce04a
Validity
Not Before: Aug 23 04:00:56 2025 GMT
Not After : Aug 24 04:00:56 2025 GMT
Subject: CN=3a8884ec0d0e69294913d5808bcf3ed25c4f54fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0a:28:3c:04:c1:2d:f4:61:de:8c:4e:45:cf:
6d:96:5f:ea:04:ba:cb:21:e4:fc:b8:9c:2f:5a:fc:
fc:aa:88:bf:99:95:7b:9f:00:d9:1b:df:70:ff:b9:
3a:b6:0f:5c:69:4b:c9:37:13:d2:2d:85:15:87:7d:
8a:8b:df:e5:f0:9d:e6:ed:ae:9e:bc:dd:c9:6f:ec:
0e:d3:e6:33:0e:f8:a5:6b:51:6b:e4:d0:d5:6e:d1:
c5:f2:71:32:9f:21:ee:ee:bd:f3:80:b8:3d:64:32:
d3:51:bc:50:0e:a2:f8:da:36:13:bf:ed:ef:6b:bc:
20:34:ae:75:92:09:e7:35:d1:a8:7e:1b:87:a8:cc:
67:e7:68:1c:d5:24:11:fe:7d:ba:d1:d7:e7:b1:c6:
67:c0:a1:47:f4:3b:d0:f9:78:9f:3e:fb:ce:95:87:
2b:9d:4c:18:41:99:5e:b5:bb:af:de:6c:54:97:71:
84:ab:84:9c:22:2f:e0:f6:89:06:7a:04:b7:37:03:
bf:5a:b1:1b:16:8b:68:0b:03:dc:05:d9:c5:a6:e9:
83:f7:e1:5b:2c:34:c2:da:21:8f:8b:ff:71:30:cb:
3e:34:82:a3:e7:d8:36:e7:17:52:5f:96:84:47:b0:
f3:2b:34:a4:4d:46:c2:b8:4e:6a:0c:2e:e6:6a:4e:
67:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:88:84:EC:0D:0E:69:29:49:13:D5:80:8B:CF:3E:D2:5C:4F:54:FC
X509v3 Authority Key Identifier:
keyid:4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:12:3d:94:b4:5d:bd:21:21:2b:4d:66:15:4e:a5:e0:53:b9:
1f:29:ea:2d:55:6b:6d:63:34:21:c2:86:0d:1e:4a:95:c8:38:
81:8c:2a:65:6b:00:f4:45:17:28:ba:a9:8b:c2:73:45:12:a8:
83:68:4d:2f:49:15:ce:91:af:0f:66:57:9d:73:2e:ec:6b:b7:
ed:15:d6:31:8e:a0:42:58:9b:d8:89:ca:48:47:24:b3:15:2e:
0b:d7:9f:8c:27:98:ea:ec:b1:be:2e:43:ff:e5:c9:29:af:6b:
b6:5a:5b:3c:8e:00:da:17:3f:26:71:40:d4:e3:f9:84:2a:64:
31:a7:50:c3:d3:f2:ab:6b:b2:84:c0:d4:e2:77:15:90:a0:cb:
bf:40:1e:88:7a:cc:be:78:31:be:30:fa:a1:45:e0:2f:f4:66:
1b:6a:a1:48:29:5d:b9:b0:37:35:44:9e:de:8c:e7:be:98:3a:
11:32:ac:de:3c:3b:0b:53:5f:8c:fd:35:63:f3:ed:94:20:2e:
a0:b8:4b:c7:16:6d:46:2f:e6:7f:72:c3:79:d6:c4:18:38:60:
12:e8:65:17:ca:98:8e:d5:f5:5d:c7:e3:91:aa:06:1a:58:e5:
da:86:7a:f8:ae:43:06:71:d2:d2:6a:b1:44:22:5c:59:d6:36:
4b:97:85:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:24 2025 by rpki-client