Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
File: S3CjpsSoVyUDdZizkT4hhp29040.mft (raw, json)
Hash identifier: HW9CBq6Z+ASY/y7ml8rEjC62lQM2UHJplzVXFcnWtEM=
Subject key identifier: 3B:5E:5A:AC:19:95:43:BB:C7:E6:71:71:1F:0F:BB:A5:3F:BE:21:BA
Authority key identifier: 4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
Certificate issuer: /CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Certificate serial: 0198D705A471DCE7F601A5BE6EC6FE6EF66A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
Manifest number: 0AA8
Signing time: Sat 23 Aug 2025 13:02:07 +0000
Manifest this update: Sat 23 Aug 2025 13:02:07 +0000
Manifest next update: Sun 24 Aug 2025 13:02:07 +0000
Files and hashes: 1: 3jlhu43nFTAqKx4et3eHcMKKL3Y.roa (hash: BH64yszlx12crGfEJXHUgBhMmAPFBIBZrSlJaldUjes=)
2: S3CjpsSoVyUDdZizkT4hhp29040.crl (hash: QgX4j2jumbHZn+GJLMTW09c7RmuVi54vwSuhA9nB9VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:a4:71:dc:e7:f6:01:a5:be:6e:c6:fe:6e:f6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Validity
Not Before: Aug 23 13:02:07 2025 GMT
Not After : Aug 24 13:02:07 2025 GMT
Subject: CN=3b5e5aac199543bbc7e671711f0fbba53fbe21ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4d:ac:91:fc:fd:99:2d:93:9c:42:6c:2f:f4:
78:85:1c:7e:00:06:39:bc:d2:d2:da:ef:a5:6c:56:
f4:ad:b1:ba:51:16:da:19:b5:65:f0:57:f8:1c:7b:
27:0e:51:0e:1d:59:d4:f3:25:62:e1:78:25:6e:90:
8a:37:29:63:2f:57:15:ce:a1:0e:c0:df:69:1c:80:
1c:0b:9c:a0:a2:09:58:6e:ee:0d:80:79:42:b7:d9:
2c:59:da:9c:af:9f:41:49:04:6c:2f:36:25:14:ea:
a4:58:3b:ce:ec:9e:08:07:bb:6e:7e:ab:dc:99:a0:
76:35:c0:dd:13:5c:a1:9e:d2:f8:4c:86:ed:43:08:
b8:c1:6d:e1:dd:c3:ef:ae:fc:cb:c9:45:3a:1c:af:
85:ee:cb:a5:a9:7d:7e:b6:c5:53:10:24:28:d2:b4:
e2:15:40:9e:4d:61:bc:d9:56:30:0b:00:18:36:91:
07:5c:95:09:6b:7f:2e:82:c0:e4:1a:83:5c:e4:28:
48:a6:ff:99:18:53:e3:fa:29:b8:15:c8:c7:ab:c7:
db:e6:f4:74:77:8b:4f:39:d8:1f:1e:36:1c:3c:b7:
09:4a:50:94:39:a5:dc:17:ba:96:07:7f:f7:77:c5:
6e:1b:0c:f7:86:70:33:cd:b1:17:92:ae:9f:b1:c5:
e6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5E:5A:AC:19:95:43:BB:C7:E6:71:71:1F:0F:BB:A5:3F:BE:21:BA
X509v3 Authority Key Identifier:
keyid:4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:db:5b:de:a2:76:74:44:3a:a7:66:51:a0:79:4c:57:96:19:
3a:3b:a0:ae:7a:67:68:e7:12:27:cf:81:ed:99:56:85:2d:a4:
15:2a:f4:13:3b:08:b2:72:db:b9:32:2e:39:27:fd:c7:77:d5:
8f:84:05:90:72:fa:50:22:03:8b:b2:f2:35:6e:2f:fa:22:6b:
02:91:f3:ed:b2:62:ef:20:60:68:0c:d1:58:91:6a:6f:5c:e2:
fb:0b:aa:a7:77:2b:2a:b5:a7:4c:6a:62:92:1c:1a:17:b6:44:
0c:8f:66:2d:e4:3d:83:7c:a0:b1:41:bf:d8:36:b5:1a:5f:c5:
50:eb:c3:6d:52:6a:e4:7e:e9:1a:a6:c8:ce:7c:a9:fa:0f:e2:
7b:44:31:bc:16:c0:40:c5:1b:74:02:a8:7a:95:a7:e7:bb:fe:
60:0a:0c:e7:27:9e:f4:35:cb:a7:1a:f6:d2:97:2e:e4:96:83:
3a:8f:ae:e2:78:81:e8:e7:b3:db:fc:89:43:ce:ca:04:d4:7f:
d7:5f:dd:ad:fd:8b:4b:a7:2c:6c:f8:81:4d:3b:56:e1:56:50:
96:33:7e:19:32:ed:73:45:03:d1:ef:3b:a8:88:5d:e1:be:ea:
79:aa:62:c4:af:0b:36:b5:be:f3:3a:23:16:14:f6:4f:a6:5a:
fa:ec:a0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:53:07 2025 by rpki-client