Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
File: S1ejnbXHqja-gs11HlDLkCMDPco.mft (raw, json)
Hash identifier: AhIi8F9vNshgkVdRM4xZrX5atE7f+Ku1n/rl6Ou0BC0=
Subject key identifier: ED:7A:1E:EB:BE:42:86:13:A8:3D:93:23:74:24:85:D6:05:0D:88:55
Authority key identifier: 4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
Certificate issuer: /CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Certificate serial: 0199FBEB6A11478A01E4B00E9DC0C77A483D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
Manifest number: 02A7
Signing time: Sun 19 Oct 2025 10:02:13 +0000
Manifest this update: Sun 19 Oct 2025 10:02:13 +0000
Manifest next update: Mon 20 Oct 2025 10:02:13 +0000
Files and hashes: 1: S1ejnbXHqja-gs11HlDLkCMDPco.crl (hash: Q9Res4Q8NUHLwtzx06FgwrD8HuYO8FwBhj1QY0Zokt0=)
2: zO8Iwb0BsWTcNVLMLIiP_wo8DJM.roa (hash: OPJwqPTjOpu2TkWSPAK04GvaPgxXe8e980q4NWTbl0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:6a:11:47:8a:01:e4:b0:0e:9d:c0:c7:7a:48:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Validity
Not Before: Oct 19 10:02:13 2025 GMT
Not After : Oct 20 10:02:13 2025 GMT
Subject: CN=ed7a1eebbe428613a83d9323742485d6050d8855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f9:1c:2c:d5:93:dd:3b:72:86:40:21:18:a3:
b0:c7:3c:77:22:63:24:94:91:14:e7:8f:15:db:f3:
89:d5:fa:58:24:a2:ee:e5:7a:86:9c:c0:4d:06:0b:
e4:1d:71:bc:a5:fa:d2:2f:14:d8:0d:f8:fc:fc:85:
75:f8:16:d5:97:c2:a1:a8:b6:fe:03:e4:87:3b:66:
97:bf:96:da:b7:46:f9:a9:5a:c7:fb:13:bd:2c:a4:
52:87:95:07:d5:9f:e1:d1:21:55:3b:4f:24:ac:a0:
9d:69:3d:b5:df:b0:0d:be:ab:55:09:09:65:8b:49:
0f:86:35:63:54:c4:94:cc:1d:97:bf:aa:9b:90:7f:
7d:c3:6b:c6:34:9c:39:d8:8c:48:b2:1f:94:30:b0:
84:1f:c0:be:e3:cf:c0:ce:11:f9:b6:f8:2b:69:bf:
21:6c:9e:07:32:3c:ab:53:1c:80:c5:e6:f4:cf:3d:
fd:e0:72:8c:a3:bd:91:c3:b8:83:d4:1b:cb:62:a2:
ea:b9:2b:27:83:58:c4:28:74:e1:4b:2c:ad:a0:e2:
de:05:8d:99:a6:58:f0:d4:27:3f:72:17:48:d1:73:
b8:d7:d0:8a:5f:ea:64:d6:6f:b1:ec:21:7c:6c:02:
1b:2d:9b:37:fd:af:83:f0:80:46:44:7a:bc:93:8f:
c7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7A:1E:EB:BE:42:86:13:A8:3D:93:23:74:24:85:D6:05:0D:88:55
X509v3 Authority Key Identifier:
keyid:4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:cb:9f:59:dc:22:5d:c0:1f:e6:33:fe:8b:30:17:4f:71:e3:
75:60:9d:66:1b:55:c6:2a:0e:2c:fd:d9:57:cf:2e:58:05:86:
48:67:b9:ed:d9:c4:ca:9f:29:19:d0:16:cc:98:cf:57:30:57:
9f:15:88:f0:0a:f6:0e:04:09:ad:2b:f3:92:71:4d:2e:e3:8f:
c9:fe:40:54:e2:1d:02:47:1d:ab:89:1d:bb:2e:46:c9:0d:1e:
e3:a3:87:01:1c:25:10:b8:f4:d3:ff:30:0b:90:57:71:21:c8:
85:3a:b1:a2:9c:b9:aa:55:77:29:d7:1f:9b:63:9a:8c:c5:70:
47:bd:2e:05:58:88:4f:8f:97:a0:f8:0d:68:3c:32:a3:bd:82:
7e:d4:8f:09:12:01:9b:84:5d:2a:64:a7:d9:b4:8e:74:08:62:
97:e1:91:13:19:ff:f1:44:07:a5:17:f5:d4:af:10:38:e6:6e:
f9:e0:f2:82:65:20:54:30:32:d8:12:da:7f:2d:da:14:b9:42:
3f:e4:de:3b:6d:cd:df:7d:04:5a:db:b0:0f:6d:0b:46:f7:1c:
5c:4c:98:2a:1a:7e:e8:cd:fb:00:0d:26:79:78:7e:64:93:f9:
ed:43:77:b7:79:b0:f4:42:c1:a6:88:d4:0a:f8:05:b7:6e:74:
ac:5e:ef:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:52 2025 by rpki-client