
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
File: S-iWpBlThdS5S3KVmIzPv6ismcU.mft (raw, json)
Hash identifier: dVvfaVz8o4Pt3yPRfqN7A8gAJ2aldSolikV2WdeuwEs=
Subject key identifier: 46:91:77:9E:EC:FB:8F:4F:06:55:81:6B:72:69:CE:84:CD:96:62:E7
Authority key identifier: 4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5
Certificate issuer: /CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5
Certificate serial: 01987419635B84B1A02815427D37AC808FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
Manifest number: 0CAB
Signing time: Mon 04 Aug 2025 08:01:17 +0000
Manifest this update: Mon 04 Aug 2025 08:01:17 +0000
Manifest next update: Tue 05 Aug 2025 08:01:17 +0000
Files and hashes: 1: 6KASjwCz7ilKa_zbYR8rA5RUBrc.roa (hash: T4+QVQXXLI7KFzCBe08m6pD6fADi9vWJFsV+O2tzwnA=)
2: S-iWpBlThdS5S3KVmIzPv6ismcU.crl (hash: xE3O79q57BUCLOistzJ9pEY1mBoHhiyUhYJCeAck6Zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:63:5b:84:b1:a0:28:15:42:7d:37:ac:80:8f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5
Validity
Not Before: Aug 4 08:01:17 2025 GMT
Not After : Aug 5 08:01:17 2025 GMT
Subject: CN=4691779eecfb8f4f0655816b7269ce84cd9662e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:c2:58:0f:ee:75:e7:73:ab:3f:8e:9a:ec:
e3:ac:70:68:a1:00:fa:76:a8:0b:37:85:b5:c2:8c:
b8:e9:13:c3:8d:6d:bd:4e:21:07:f0:8b:06:99:1b:
ff:9f:ae:a4:00:28:0c:9b:c6:a6:be:00:83:b5:59:
9f:9f:7c:43:93:89:ac:79:39:32:91:fd:3b:2e:04:
1b:42:18:6f:6f:27:7c:b8:2f:db:42:bb:85:fe:c8:
16:01:0a:65:d3:2e:11:b0:a2:53:fa:8e:42:da:7d:
3d:63:b5:e2:89:03:43:99:72:58:98:6f:da:97:31:
bc:64:bb:42:3c:39:43:a4:31:a9:ba:51:2e:25:11:
6b:fa:34:cb:6c:41:a3:78:c4:83:46:c7:18:79:3e:
d4:6d:6c:ed:ca:5f:30:83:63:01:44:56:52:c6:e5:
e3:eb:48:9e:60:38:fb:0c:77:e7:9a:0d:78:00:77:
80:dc:65:52:21:43:aa:64:66:66:df:1c:4f:c3:09:
c9:68:6d:7c:d6:a9:92:11:47:ef:03:b5:55:12:bb:
19:81:df:83:1a:c9:d9:f8:21:63:3a:26:22:64:18:
22:cb:8a:34:b1:41:4f:ca:41:ff:90:96:43:9c:5b:
2a:1b:ba:c5:40:c3:c9:48:5b:4e:be:81:97:f7:1b:
31:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:91:77:9E:EC:FB:8F:4F:06:55:81:6B:72:69:CE:84:CD:96:62:E7
X509v3 Authority Key Identifier:
keyid:4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:80:3a:fa:d2:b0:96:68:50:b5:2b:64:c3:49:71:29:14:81:
3d:16:c3:02:9b:96:c2:a7:96:bb:ff:a6:6b:7e:62:f2:ed:63:
9d:6d:43:f0:5d:99:3b:58:96:a0:dd:d9:35:47:47:2c:b3:5e:
7f:85:09:1a:ba:08:3f:33:b9:fa:35:ae:96:21:8f:35:64:ea:
68:82:e3:f3:83:56:5b:c7:86:07:ec:12:76:a9:7d:13:c6:ba:
59:38:fa:4c:52:5d:73:a6:ee:66:96:b4:6a:4e:0a:44:f3:ba:
1e:22:f5:b3:81:4a:21:5f:6c:b2:35:76:15:5b:48:45:9e:21:
cf:73:29:82:c9:43:16:ea:6f:cc:89:4d:91:f3:5d:d3:48:69:
14:fb:01:b1:dc:78:0c:1a:6f:df:dd:34:d0:8f:86:36:f0:cf:
7b:68:7a:eb:9c:71:b7:a0:43:2f:4d:ae:2a:dc:04:9d:6e:e2:
39:bd:f9:89:bc:d3:d5:9c:5e:06:43:88:1a:f4:46:53:47:0a:
94:7a:cf:97:74:99:73:d2:b9:3b:82:da:6a:03:c0:17:06:61:
63:bf:57:ac:c1:e5:d0:dd:60:02:c5:0d:08:50:b2:75:32:1b:
76:14:97:d0:90:5f:d9:c5:c8:c0:c8:49:bb:f9:2d:2c:02:54:
57:13:b8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:51 2025 by rpki-client