Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
File: S1ejnbXHqja-gs11HlDLkCMDPco.mft (raw, json)
Hash identifier: ZI5mCN1YmB19Mnt9tvmGuI8K6CMWd7Drh26kWAg0P+E=
Subject key identifier: 28:58:A5:B2:7F:0F:F7:47:D7:F7:14:10:E4:AB:9B:2A:A3:9D:28:50
Authority key identifier: 4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
Certificate issuer: /CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Certificate serial: 0198D473A260BE6CE426D932A5148F13AC5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
Manifest number: 020E
Signing time: Sat 23 Aug 2025 01:03:24 +0000
Manifest this update: Sat 23 Aug 2025 01:03:24 +0000
Manifest next update: Sun 24 Aug 2025 01:03:24 +0000
Files and hashes: 1: S1ejnbXHqja-gs11HlDLkCMDPco.crl (hash: MKl5yV+Ec0bwyvlCtjw/M9c1kXhPNOxMAlUPLvGNKyA=)
2: zO8Iwb0BsWTcNVLMLIiP_wo8DJM.roa (hash: OPJwqPTjOpu2TkWSPAK04GvaPgxXe8e980q4NWTbl0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:a2:60:be:6c:e4:26:d9:32:a5:14:8f:13:ac:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Validity
Not Before: Aug 23 01:03:24 2025 GMT
Not After : Aug 24 01:03:24 2025 GMT
Subject: CN=2858a5b27f0ff747d7f71410e4ab9b2aa39d2850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f7:a5:04:79:b4:e8:32:f6:c0:ee:eb:bb:f3:
21:70:90:e7:6c:e4:04:e5:d2:7d:87:f4:5c:f6:27:
c2:20:54:91:20:f8:51:15:78:13:eb:1e:83:8b:d9:
56:df:2e:87:e5:ad:47:0d:d6:e0:4a:45:0c:13:3c:
9d:69:8d:ae:57:5f:e0:08:01:4d:4a:0c:d7:67:6c:
fe:7d:32:80:d2:2c:c5:ac:3d:83:3d:19:77:ca:42:
01:6b:3b:14:84:91:d4:85:a5:ee:47:05:fa:4d:58:
bb:50:22:3c:57:6e:1b:04:bd:6d:71:fa:f0:51:6a:
7a:97:1f:dc:5f:bf:9e:c7:a3:03:d2:10:50:8f:92:
ba:3c:a1:fb:2f:b1:2b:d9:ad:9c:8b:67:fd:ce:8a:
d3:19:c9:fe:95:c7:9e:52:6c:d8:81:d1:9a:ef:48:
2c:5e:90:56:3e:31:c7:2e:0f:7c:84:cc:d9:2c:75:
b7:83:8e:08:23:1c:e6:d8:45:a1:31:a3:68:88:79:
ca:1a:ef:f5:75:3f:28:28:35:d1:7c:4a:69:4d:37:
25:28:0d:76:8a:07:4a:92:75:19:de:a8:4f:e5:af:
19:3e:cb:07:02:db:70:5a:75:a2:6f:52:d7:be:ad:
09:d3:41:12:8e:1d:14:19:2f:ec:6f:a1:21:38:65:
8b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:58:A5:B2:7F:0F:F7:47:D7:F7:14:10:E4:AB:9B:2A:A3:9D:28:50
X509v3 Authority Key Identifier:
keyid:4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:7b:14:98:b0:47:85:ec:0b:da:f8:af:8c:95:27:1d:ff:e7:
4f:32:02:24:df:da:2b:c6:c2:2c:4d:ec:1e:62:60:85:7b:5e:
6c:fc:cd:a8:81:b9:d3:74:fe:2d:9d:7c:4f:7b:09:fd:0c:b6:
84:de:fe:b5:d6:40:a5:11:22:1e:8b:f4:91:24:e6:26:c8:11:
d2:c8:61:a8:50:e5:f2:fb:f3:b6:99:f9:28:e4:53:e5:53:1a:
e9:68:29:67:a8:87:69:02:74:40:84:b0:8c:2f:40:85:52:17:
14:a3:0a:85:ba:93:69:d0:e7:0c:f6:31:43:ac:05:d3:2a:9e:
93:b3:d6:ba:93:f4:c5:87:85:56:b6:6a:57:29:44:ca:7f:74:
3e:cb:16:46:99:2f:0e:3b:a1:ab:b3:f5:7b:09:83:f8:92:76:
8e:56:b7:1e:c9:73:ba:d9:28:97:9d:6e:c5:fd:d0:94:8c:23:
23:50:a3:62:75:de:0c:16:1a:3a:d1:16:9f:66:4d:9e:9a:2e:
17:7b:54:4f:68:03:60:66:64:ca:6d:8b:99:cb:3d:0a:c8:b4:
1d:0c:86:25:68:3f:1f:a4:0c:d5:81:c9:dd:0f:4f:8e:d5:9d:
c2:ae:1f:fe:11:ae:7b:99:bc:b1:ba:24:96:0c:9c:8e:a9:03:
f4:ec:c6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:08 2025 by rpki-client