Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
File: S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft (raw, json)
Hash identifier: dnn+mD5VEvPr2ypHzV0awZ0+2bfy3nOnMWdtwqh2b4s=
Subject key identifier: 3E:58:D1:AF:C7:74:26:C5:77:3B:BD:5A:B6:47:D6:BE:5E:F4:FF:18
Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
Certificate issuer: /CN=4b98127943e7175734964010c89ef821416a31b3
Certificate serial: 0197B7457BE6F0685E56ABF2783BF86B1FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 16:01:13 +0000
Manifest this update: Sat 28 Jun 2025 16:01:13 +0000
Manifest next update: Sun 29 Jun 2025 16:01:13 +0000
Files and hashes: 1: CXkACV-63YQsGoLAT_fjFmpIWrY.roa (hash: VrWjblsIWiGRBo5IbexwcD3xb4sOkqQVyxbnH8/frQ4=)
2: S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl (hash: RcIRdAUCcK8zR2tpyos+rB/DY5oO3e48U7l0DkeVxMI=)
3: pPYYG56VOORuxgT5M_ZuhSvmRfg.roa (hash: UBXy6znS5i9dvxzfkJnX+PZpKfrnJ0My4xHbPC9KdaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:7b:e6:f0:68:5e:56:ab:f2:78:3b:f8:6b:1f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b98127943e7175734964010c89ef821416a31b3
Validity
Not Before: Jun 28 16:01:13 2025 GMT
Not After : Jun 29 16:01:13 2025 GMT
Subject: CN=3e58d1afc77426c5773bbd5ab647d6be5ef4ff18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2e:ef:76:cb:0c:f5:e1:42:85:09:5f:fc:ec:
34:d8:df:33:05:1e:ba:03:1e:74:57:09:c4:6e:96:
58:0f:70:a1:ba:24:b2:22:3b:c9:30:d3:12:4c:62:
e2:0b:bb:76:df:68:63:e5:04:c8:d6:80:26:39:ca:
43:8e:98:33:f7:db:4d:72:05:4b:42:75:5a:1e:82:
d4:34:b3:ab:b3:4e:de:a7:bb:e6:0e:3c:35:4b:d2:
c4:74:4f:79:d9:8f:b7:83:08:a0:80:72:b4:71:42:
7e:d5:ca:46:14:47:6f:7c:f8:86:25:39:e7:06:75:
52:0a:3b:99:bf:67:a5:3e:82:4c:36:8a:15:67:73:
a0:69:2f:be:09:fc:02:0a:4c:7a:c3:ed:93:9d:de:
d3:e2:25:65:ce:9c:0c:d6:04:20:67:9a:60:4b:09:
f6:47:e6:a3:46:7a:ba:83:71:5f:3d:4f:46:1c:a2:
c4:1d:a4:71:26:ec:a9:38:fe:da:20:b7:22:59:7e:
99:bc:d2:87:28:dc:c2:2e:9a:1b:94:93:14:0e:10:
4a:ca:8f:58:90:5b:dd:ca:52:a4:2e:e9:cb:a7:94:
71:d1:96:95:a2:c2:5a:9c:f5:d5:f7:25:24:e0:38:
45:3e:98:55:9d:87:ab:86:b8:4d:34:48:94:d8:c9:
f5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:58:D1:AF:C7:74:26:C5:77:3B:BD:5A:B6:47:D6:BE:5E:F4:FF:18
X509v3 Authority Key Identifier:
keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:18:06:c0:b3:6c:15:d2:3c:97:0e:a6:2b:18:0b:af:e5:92:
6a:da:a0:c5:a1:59:d9:fa:ab:9b:6c:e6:4a:f2:17:bb:f8:18:
28:24:07:99:56:fd:80:37:13:78:85:01:9c:24:1c:8f:3d:c6:
ba:a4:c2:be:85:cf:6f:7a:df:43:9f:5c:43:4a:54:1e:38:80:
63:08:0a:b2:81:4a:04:dc:9d:82:68:c9:fa:70:be:d3:88:75:
85:7d:3e:68:63:7d:90:71:57:25:bb:49:af:4c:da:0f:e7:bd:
21:fb:af:c5:16:52:2e:b3:68:b1:5c:fc:24:ce:fc:6b:04:80:
11:8d:5e:da:82:c3:39:2c:0c:a8:69:e1:4d:28:2a:02:5f:fd:
cd:ce:15:51:f3:fe:55:0f:de:90:82:bd:2c:db:b5:dc:a9:a2:
ab:8c:e9:10:87:58:e3:61:88:c7:a2:30:b0:1b:48:db:57:c9:
20:44:bb:f6:f3:56:63:65:2c:b3:24:ba:b0:bb:68:f8:59:28:
56:8e:2d:cf:9e:85:9a:d5:ab:d0:50:38:cf:7e:87:f3:b0:eb:
77:92:c7:07:dd:b3:55:aa:5c:3a:79:bd:cb:e7:23:46:d5:94:
dc:16:b7:44:a8:ee:84:c6:ed:62:4c:c5:5e:72:66:50:ca:10:
1e:1c:05:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:26 2025 by rpki-client