Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
File: S6mv0hy4--a4UIAM1LSfJWLJK6A.mft (raw, json)
Hash identifier: 9cCgWSOTsgCl7cpE5y7otRpXx1cYW/9TKfXjecR4JgE=
Subject key identifier: 90:B0:F1:55:87:4D:42:45:D2:C4:62:1C:04:E7:1F:1A:60:A8:AF:4D
Authority key identifier: 4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
Certificate issuer: /CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Certificate serial: 0198D5F17316947308D8063B8230584F3D4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
Manifest number: 0A2D
Signing time: Sat 23 Aug 2025 08:00:27 +0000
Manifest this update: Sat 23 Aug 2025 08:00:27 +0000
Manifest next update: Sun 24 Aug 2025 08:00:27 +0000
Files and hashes: 1: 7qAkcUK8ZlpOQk4HP0uuF0lhspY.roa (hash: ZilTYghFnWRS/ebtjdIbZ9Dk7wTzY0JMcLcLjLJ+fE8=)
2: S6mv0hy4--a4UIAM1LSfJWLJK6A.crl (hash: YsfOXWrTrV4rr97ZHsN4/hIu7lIIG5h5S3HIboeKJmM=)
3: ddztps0hN4VMdXyjS1k_lHAPDQI.roa (hash: FuonT4M3ClmAeThBArgxMo2zntTmX1+p4F4rL/ngyiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:73:16:94:73:08:d8:06:3b:82:30:58:4f:3d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Validity
Not Before: Aug 23 08:00:27 2025 GMT
Not After : Aug 24 08:00:27 2025 GMT
Subject: CN=90b0f155874d4245d2c4621c04e71f1a60a8af4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6e:12:8f:5f:a6:2d:97:67:30:63:0e:41:36:
4c:10:65:ec:07:f7:4d:34:63:36:67:a3:c6:a8:b6:
b7:4c:ea:15:6c:45:ff:28:8d:fe:71:fc:82:b4:fb:
da:ee:d8:7e:bd:c8:9b:b4:bc:01:61:a5:70:c2:df:
6f:97:50:8f:f4:1f:02:b4:1d:58:6e:09:c2:47:32:
f3:7d:4d:f3:0c:92:e1:81:7b:88:ff:93:a6:a8:7d:
cf:95:a8:5f:64:46:0c:f9:3c:69:1d:75:a9:44:a4:
31:89:08:6f:d3:bd:a5:82:ed:8b:0e:fe:e1:0a:ba:
c3:f9:1c:86:b1:38:fb:b6:e0:2f:36:0f:54:1c:62:
81:c2:6c:15:f0:af:2d:f6:1a:0a:21:cb:19:ee:62:
19:46:d1:68:82:40:66:d1:0e:3b:13:ee:81:1f:4c:
71:24:7e:ce:cf:04:6c:88:69:28:78:ef:b6:e2:96:
05:98:5b:56:75:f9:fe:6a:9f:3c:70:ac:74:51:43:
e3:b7:8a:87:1b:7e:6b:14:10:08:a4:f7:b9:9f:a9:
23:d5:4d:b7:1d:56:67:6d:18:fa:dc:ed:df:3a:23:
e0:ae:54:6b:4c:bd:88:0e:40:e2:f4:65:b5:10:10:
90:0b:cd:04:22:f9:d3:4a:54:a7:e1:09:72:67:a4:
b8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B0:F1:55:87:4D:42:45:D2:C4:62:1C:04:E7:1F:1A:60:A8:AF:4D
X509v3 Authority Key Identifier:
keyid:4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:33:22:99:50:5a:88:89:11:2d:de:28:67:0a:bd:e9:d7:4a:
be:55:d5:e1:8e:18:ea:fa:06:0f:a9:56:b9:de:67:66:48:97:
68:97:f0:cc:5c:3e:f0:13:46:c2:f0:55:44:47:13:73:8c:fb:
e3:7b:7f:95:2c:23:98:5a:95:ff:1b:2d:d9:21:2b:c4:41:be:
8f:4a:09:17:9f:63:b4:05:9a:a5:70:bc:8b:1a:f5:8c:6c:2b:
1c:a1:09:6b:d3:a2:a4:a4:9a:5d:f4:f4:b2:97:be:17:2c:20:
0f:82:c2:69:ef:cf:25:28:c0:53:5f:01:15:0e:20:f2:fd:67:
74:7a:e2:99:f2:68:ef:e4:58:ca:3e:9f:7a:e1:05:9d:81:bd:
9e:cf:28:bb:5f:63:02:5d:4a:68:02:05:99:76:6e:d9:cc:c9:
0e:e2:26:b9:a5:bb:ef:cc:9c:7f:af:f2:b9:f7:c2:07:53:c6:
b9:74:cf:1c:87:23:0e:58:68:44:16:42:6b:25:e1:52:2c:fd:
d9:a8:19:5d:07:32:cf:58:11:0c:a0:dd:33:75:15:cb:cb:c3:
b5:d9:14:9d:3f:9d:6a:39:f6:53:52:74:59:26:1e:a5:d0:a1:
24:b1:5c:0b:2c:93:12:7e:1d:08:2c:c4:43:90:9e:e4:3b:91:
60:71:95:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:08 2025 by rpki-client