Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
File: S3CjpsSoVyUDdZizkT4hhp29040.mft (raw, json)
Hash identifier: /FmkRuB2HRRmUCZQfRCHA4gnzsggYHPLem6nMjILQjk=
Subject key identifier: 26:71:5E:09:86:C2:B3:A8:40:4C:F6:96:70:DD:D2:77:FF:43:C2:8D
Authority key identifier: 4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
Certificate issuer: /CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Certificate serial: 0197B933CE63553AC1C1205365232DCB60F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
Manifest number: 0A14
Signing time: Sun 29 Jun 2025 01:01:09 +0000
Manifest this update: Sun 29 Jun 2025 01:01:09 +0000
Manifest next update: Mon 30 Jun 2025 01:01:09 +0000
Files and hashes: 1: 3jlhu43nFTAqKx4et3eHcMKKL3Y.roa (hash: BH64yszlx12crGfEJXHUgBhMmAPFBIBZrSlJaldUjes=)
2: S3CjpsSoVyUDdZizkT4hhp29040.crl (hash: k8IhSJJYMQJFa4HSH3YsiSUCnsXMA92NOO4T4gQcnrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:ce:63:55:3a:c1:c1:20:53:65:23:2d:cb:60:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Validity
Not Before: Jun 29 01:01:09 2025 GMT
Not After : Jun 30 01:01:09 2025 GMT
Subject: CN=26715e0986c2b3a8404cf69670ddd277ff43c28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:be:d2:9b:dc:9c:02:f4:8a:4e:fb:bc:e1:
90:8e:f5:e4:ca:52:0d:5f:62:f9:2d:0d:7e:51:2b:
1a:1c:a3:61:be:b7:ab:7b:6f:69:69:99:7a:05:af:
c6:42:5b:8a:e0:3c:2c:b4:6d:ce:dc:76:a3:b8:f0:
3b:be:b4:7f:6b:24:ca:5a:ab:5a:73:a8:7c:1f:19:
96:ae:b5:79:97:ae:05:cd:6d:b2:1b:bc:69:80:c2:
7f:7d:41:8d:15:ae:5e:2b:0d:3d:88:d1:d7:c4:ca:
41:ce:64:07:6e:e3:9a:a5:ac:f9:eb:90:43:d0:2c:
5b:8c:47:2b:7e:d4:b1:ff:5d:52:b3:e9:dd:5c:5f:
04:fc:1f:a9:72:c8:b8:c9:82:84:61:3b:d9:f7:7c:
bb:d6:3e:a0:a1:0c:dd:c0:73:23:20:0a:2f:f2:47:
c5:95:55:07:ca:d0:82:57:62:a9:72:2a:87:16:db:
6f:f7:ff:d8:9b:ae:22:ba:c4:f4:d7:51:21:b6:8f:
c8:11:0f:43:a7:44:bc:7e:af:30:5f:a8:72:ad:b1:
27:cd:30:4f:94:79:49:da:08:92:2b:70:c0:93:21:
3d:d1:75:b6:d6:8e:3e:7b:b5:cc:45:72:1b:b6:5f:
84:75:ae:93:ea:de:7e:00:4d:09:5a:2d:41:4e:80:
98:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:71:5E:09:86:C2:B3:A8:40:4C:F6:96:70:DD:D2:77:FF:43:C2:8D
X509v3 Authority Key Identifier:
keyid:4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:8b:e5:d2:1a:e4:86:84:89:19:73:55:54:ee:c4:5f:e2:ac:
2d:1c:5f:1d:b8:fe:c1:72:54:87:61:2a:d8:86:69:3e:7a:31:
b0:86:8a:f1:3b:ed:de:3b:51:b8:c8:b3:85:1b:e1:fb:9c:96:
0a:9d:bc:af:dd:e8:7c:dd:a0:61:87:c1:40:cb:45:fb:4f:fd:
3e:af:9f:62:93:51:8e:94:a1:a5:6c:12:45:62:8a:57:62:ef:
c3:69:13:3c:3a:00:ac:cc:1e:a0:09:fd:dc:7d:fc:0a:78:5d:
d1:82:b4:29:bb:5f:f7:43:9a:17:b8:20:9f:31:46:e9:18:24:
5e:cd:39:ab:74:2f:94:77:dc:47:2f:8e:ac:39:77:15:95:18:
dc:f9:05:1b:e3:77:59:04:b4:49:9e:c5:63:b1:47:0f:ce:cc:
71:e3:55:9d:59:64:87:d9:4d:14:5e:6e:0e:fb:70:95:3d:9a:
2e:79:59:cd:d7:72:88:06:fb:d2:19:11:5e:a0:d3:5c:8c:da:
00:ed:b8:0e:30:f5:e5:10:f2:7b:d8:ae:55:d6:1d:5e:98:30:
bf:f2:68:e3:d9:b3:62:92:b3:f3:2f:8c:d2:78:89:38:4e:c7:
df:8f:03:31:20:2f:2e:4a:bb:ed:64:3c:1b:22:c6:5c:a6:17:
67:6c:17:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:22:55 2025 by rpki-client