Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
File: S3CjpsSoVyUDdZizkT4hhp29040.mft (raw, json)
Hash identifier: Mvoypjt87t+ViTLvx4zI0Gz8fOZUJXpnr2bVniYLXog=
Subject key identifier: FE:98:BE:80:E7:11:03:34:7D:AD:68:19:B7:21:4D:75:85:F7:9A:0A
Authority key identifier: 4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
Certificate issuer: /CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Certificate serial: 0199FE7D985EA8E08E7EBC5B5799A7E533F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
Manifest number: 0B41
Signing time: Sun 19 Oct 2025 22:01:07 +0000
Manifest this update: Sun 19 Oct 2025 22:01:07 +0000
Manifest next update: Mon 20 Oct 2025 22:01:07 +0000
Files and hashes: 1: 3jlhu43nFTAqKx4et3eHcMKKL3Y.roa (hash: BH64yszlx12crGfEJXHUgBhMmAPFBIBZrSlJaldUjes=)
2: S3CjpsSoVyUDdZizkT4hhp29040.crl (hash: bNE7L6eGlzr754J9MRRwO0gn/Qd4esM1TtFCR3elmW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:98:5e:a8:e0:8e:7e:bc:5b:57:99:a7:e5:33:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Validity
Not Before: Oct 19 22:01:07 2025 GMT
Not After : Oct 20 22:01:07 2025 GMT
Subject: CN=fe98be80e71103347dad6819b7214d7585f79a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a8:46:c7:3b:77:83:a6:30:23:73:9f:5e:0e:
a5:43:89:fa:06:c1:70:fb:08:00:fc:74:a0:06:f7:
fe:91:cd:0d:15:8e:96:a7:3c:f6:44:b2:c9:90:ec:
74:d7:6a:68:d3:4b:ee:20:36:4e:0c:ed:d2:a3:52:
18:43:d6:a9:fc:d0:59:e2:d1:f0:7a:84:bb:c4:e9:
4e:d7:7c:70:31:ec:7e:6a:84:46:89:7e:b3:08:5f:
02:7b:59:c8:8b:a1:df:90:bf:f3:88:a6:98:90:5e:
9c:61:88:6f:27:17:98:e4:3e:9d:2f:57:c0:c6:1c:
d0:ef:cf:30:e6:2d:c0:3e:45:b6:ac:db:4a:58:00:
53:ee:14:f4:63:32:e5:91:10:d2:d0:40:6a:09:1f:
91:6e:b4:09:5e:a3:3a:a8:7a:2d:eb:e2:4a:52:d1:
9e:6f:3f:31:b4:cb:26:41:ee:e8:11:33:df:25:44:
d4:82:27:7f:06:96:48:b6:93:23:91:e1:0a:aa:f6:
6e:5b:4c:a7:58:8b:54:c0:14:81:63:f9:55:94:bf:
b4:1a:b1:ab:73:5f:a6:00:1e:2e:75:72:49:19:95:
59:f1:76:10:50:3b:f9:03:d4:8f:3f:05:5e:fb:a9:
e2:71:54:f7:b6:e5:03:a6:50:00:db:0b:5e:1c:25:
ba:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:98:BE:80:E7:11:03:34:7D:AD:68:19:B7:21:4D:75:85:F7:9A:0A
X509v3 Authority Key Identifier:
keyid:4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:4b:c7:04:11:65:d9:81:7c:04:d1:e8:68:3b:5f:d5:11:bc:
92:ba:57:a7:fd:41:bb:e9:53:9e:41:49:ff:7a:d3:56:a3:55:
c0:da:25:2a:d7:15:b5:eb:32:d4:88:e6:59:2a:4a:31:5d:c4:
b1:75:54:ba:43:81:f3:3d:d6:81:71:7a:ad:77:d7:2e:2b:a9:
a0:6e:23:a3:3a:c3:ba:c9:8c:a3:d6:ab:92:0a:c1:b8:6d:c1:
ec:32:1b:fc:07:e2:4e:0f:b3:22:2e:9e:62:4c:f4:96:75:31:
e5:c3:33:ad:df:db:bc:86:91:b0:e0:e7:fb:f5:0b:12:88:02:
5c:75:28:78:53:90:f3:da:07:eb:31:82:11:d2:f9:82:72:a3:
d7:4e:d0:e3:5d:cb:c1:00:ff:58:ce:43:83:94:1a:04:73:41:
73:a5:39:4b:15:28:cc:e1:4a:44:90:83:bc:96:a8:57:b2:82:
30:fc:7c:f8:02:b3:8e:d9:d8:85:7c:c9:fe:1a:50:08:af:50:
48:84:8c:41:1f:6b:ad:4f:1e:dd:f6:53:e9:9e:2a:bc:da:98:
17:9e:3d:47:9f:82:e7:6c:37:58:d0:e9:de:04:33:6c:d4:1b:
0f:0c:04:df:66:3f:fd:46:e6:14:61:36:56:34:b3:b8:0a:aa:
a2:72:df:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:35 2025 by rpki-client