Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
File: S6mv0hy4--a4UIAM1LSfJWLJK6A.mft (raw, json)
Hash identifier: 0HAEaT0xMXv0YCJg/xo3s7sidCJeypvUw0vL7AEIlsM=
Subject key identifier: C8:47:05:6A:9B:6A:BA:3B:9C:B3:9D:FC:35:E9:91:D7:BD:B3:7D:77
Authority key identifier: 4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
Certificate issuer: /CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Certificate serial: 0197B77C237A068125BE45277BA799560DC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
Manifest number: 0998
Signing time: Sat 28 Jun 2025 17:00:55 +0000
Manifest this update: Sat 28 Jun 2025 17:00:55 +0000
Manifest next update: Sun 29 Jun 2025 17:00:55 +0000
Files and hashes: 1: 7qAkcUK8ZlpOQk4HP0uuF0lhspY.roa (hash: ZilTYghFnWRS/ebtjdIbZ9Dk7wTzY0JMcLcLjLJ+fE8=)
2: S6mv0hy4--a4UIAM1LSfJWLJK6A.crl (hash: EmpuzXhNSXeXRHF6Q27VvsTkA/2CjWq1FVRut9PQJvE=)
3: vrYtR17Us0uRR4gxZn7liWGR4no.roa (hash: iPAbeEWSZ9JV1k70IoKGFIA+pbF0zGakCFdiJ4Nxk/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:23:7a:06:81:25:be:45:27:7b:a7:99:56:0d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Validity
Not Before: Jun 28 17:00:55 2025 GMT
Not After : Jun 29 17:00:55 2025 GMT
Subject: CN=c847056a9b6aba3b9cb39dfc35e991d7bdb37d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:58:90:31:27:7e:e0:16:46:32:c0:63:77:
94:26:b2:b4:9e:9c:9c:19:e3:1e:d1:5f:a8:10:24:
40:e1:25:4f:00:c9:74:ec:36:2e:cb:cd:22:5d:a5:
71:ae:a3:72:01:46:31:1d:07:60:bf:05:b7:c6:2d:
0a:43:44:97:c7:2b:90:a6:c1:26:63:31:48:0b:68:
e6:e3:53:c1:ee:72:aa:48:f8:4a:ba:bc:4a:9e:31:
a0:9b:af:00:11:ba:55:d6:1a:f4:e3:fb:ad:d9:37:
c4:27:c7:4f:1d:e1:b0:bb:ad:dc:5d:52:b3:68:99:
74:88:9f:61:a4:05:8d:99:05:79:32:f2:15:18:42:
f8:56:26:00:39:db:44:a1:c6:68:d4:ef:2a:2e:78:
8c:ad:d2:77:7e:c9:b1:7c:a8:ef:1b:83:44:ef:ed:
e8:9d:60:3c:13:97:a2:ca:e4:63:9f:78:6c:e3:18:
0f:ef:25:d6:aa:88:eb:46:7b:93:be:bf:56:11:c9:
95:16:dc:24:af:76:8d:73:a1:e7:ee:07:59:05:f1:
3c:80:9a:36:65:19:31:0f:4d:35:d9:41:b7:ca:d2:
0a:b8:1e:ea:0c:7a:ad:eb:66:62:0a:94:2b:58:9e:
a6:1d:52:dc:a5:2f:02:19:82:03:15:c6:c2:ac:ec:
6a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:47:05:6A:9B:6A:BA:3B:9C:B3:9D:FC:35:E9:91:D7:BD:B3:7D:77
X509v3 Authority Key Identifier:
keyid:4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a7:e5:24:75:94:ad:79:8a:50:29:37:45:8c:d9:ec:7f:70:
8b:69:c2:39:49:3f:b7:b0:30:1a:22:63:88:17:d9:1e:02:92:
f7:cf:28:e1:06:40:89:48:ea:cd:27:75:87:2a:d6:20:89:93:
d0:af:0e:ac:87:70:c4:e4:03:2c:43:c7:f1:b6:2b:f3:15:05:
8b:4d:6d:d7:12:3f:9c:4b:87:01:6b:10:5e:8a:29:7f:49:86:
18:37:12:14:29:8d:2b:64:4b:8e:11:11:92:28:e8:c9:c6:d1:
2d:9f:f4:71:37:ba:5f:1e:80:0e:f0:69:28:e1:e4:98:e7:7a:
f3:ff:3b:c5:9d:23:84:43:1c:66:0f:05:43:51:ac:34:fe:3a:
31:49:26:30:50:98:c9:10:4b:1c:83:3a:a2:3f:b4:7d:62:5f:
1a:d4:75:83:c7:5a:95:4e:4f:85:c5:10:37:50:8c:51:b9:a6:
4b:0d:c9:b2:51:c8:4d:4e:e0:b4:7b:40:17:99:67:be:99:61:
49:d3:f5:b0:b8:df:54:43:12:2b:10:49:9b:51:5d:cc:bb:05:
7b:b0:2e:48:07:d3:af:67:2e:2d:be:1a:81:cc:47:f1:3c:1a:
3b:9c:ce:c5:69:35:5d:0a:3d:dc:cf:bc:51:3b:c5:4e:68:46:
03:50:34:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:16 2025 by rpki-client