Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
File: S-zMnRp26RRpy2OxK_cl1966-xs.mft (raw, json)
Hash identifier: FpbnTZ4sZZZFY8KoGirdowGqTmnTy0+jsEhX8Uv7oUE=
Subject key identifier: E2:80:CD:B8:4F:81:38:35:F3:93:3E:23:56:7B:FD:86:85:BD:53:65
Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
Certificate issuer: /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Certificate serial: 01987AF6DA0D23A70A755AE19430ADA092D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
Manifest number: 0C22
Signing time: Tue 05 Aug 2025 16:00:54 +0000
Manifest this update: Tue 05 Aug 2025 16:00:54 +0000
Manifest next update: Wed 06 Aug 2025 16:00:54 +0000
Files and hashes: 1: 7fSgZ-LQDYvguJzdZ14V0z0FUCE.roa (hash: bUjKLDflZP/Ln3EKUyE+zKMongCT5xOF2uDWHet5S9I=)
2: DiRUXj-wMeKTJD3aUfG_fU2alsE.roa (hash: C8nsHrwSkn8Gd1JmzSYSfUzGZSwYITwrUGRtmf3pI4s=)
3: Ru-jgtHHtk22zU2Iz9obbyyNqtA.roa (hash: JK2Fg/eBJyup1fiSh8xdKaGSDAo/evkcOv83dZLvh1k=)
4: S-zMnRp26RRpy2OxK_cl1966-xs.crl (hash: gf1saTA99sbxo4evmyjSXosa7PF5kgSRFX7U1RjSD0s=)
5: WzBH8kAZVhitfGs3LpWEVIaX2DU.roa (hash: yyE311L3mhjCKLl6ozIj/e45U2t4pgo+mFiZj5vWZ9E=)
6: vTYkTnZMEaqfhCdiY5ia6c9viZw.roa (hash: m5F7OL9Eo2LVurzs6A9iXzsVS70f86h9K1zL5V462Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 16:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:f6:da:0d:23:a7:0a:75:5a:e1:94:30:ad:a0:92:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Validity
Not Before: Aug 5 16:00:54 2025 GMT
Not After : Aug 6 16:00:54 2025 GMT
Subject: CN=e280cdb84f813835f3933e23567bfd8685bd5365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cb:91:ad:4b:49:e5:7f:bc:68:90:40:45:77:
69:c1:91:f9:af:16:4c:02:aa:87:68:03:bc:ae:c4:
3a:28:65:2e:8b:27:5f:a9:0d:df:d6:5c:aa:e9:cd:
8a:97:e8:77:11:e3:bc:e5:1a:6f:af:7f:73:d2:1f:
e6:72:9c:ee:6d:59:89:f2:95:c6:e0:4f:23:cf:ae:
53:bf:28:f9:bf:3d:ec:63:85:17:21:54:f2:9d:81:
a6:02:3b:cb:08:5e:55:1a:02:40:c9:8e:05:4e:dc:
fb:48:85:68:49:d0:4b:4f:28:9d:0f:27:8b:68:02:
d1:c2:63:09:4a:9e:03:81:ed:7d:57:38:56:a9:a0:
22:88:66:1a:27:d9:35:76:fb:dc:1a:53:d7:3d:14:
22:72:7a:95:7d:fc:7f:23:8b:9b:f3:a7:ec:ac:07:
29:66:d8:46:e5:ef:53:58:f6:19:03:ab:2b:52:82:
10:db:d5:8e:88:f4:c3:90:65:1e:19:30:7e:40:19:
52:71:b6:23:c0:a8:df:9d:da:3c:9f:5b:c1:b1:b9:
68:57:d0:0c:2e:69:0f:35:ce:2c:8e:d4:63:dd:fe:
41:0f:ef:bc:b5:f0:40:f6:df:fd:d8:aa:15:3d:6b:
2e:0c:ee:55:04:dd:fe:a9:fe:de:c0:d6:ed:b6:b6:
d9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:80:CD:B8:4F:81:38:35:F3:93:3E:23:56:7B:FD:86:85:BD:53:65
X509v3 Authority Key Identifier:
keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:43:e5:41:44:ee:8e:a9:f6:a3:34:64:d8:a7:2d:50:64:72:
10:6b:46:f4:1b:2c:ef:85:1a:22:17:ac:81:87:ae:23:c5:9a:
3b:da:57:05:61:23:39:5d:5e:de:8e:ea:a6:a1:27:2b:a8:a4:
0e:3c:10:e3:6e:01:67:6f:88:5d:50:62:91:bf:c5:24:9b:7b:
9d:1c:11:24:b5:00:03:d9:a2:66:79:55:9d:f3:27:f3:9e:48:
f8:6e:dd:cb:9b:a0:e0:3c:28:65:5f:05:f1:cb:52:32:c1:ac:
1b:0b:57:cd:81:bd:22:c0:c9:2b:68:37:65:bc:13:6e:92:78:
0d:8f:6b:81:81:65:a3:e6:f4:21:ca:ed:2b:56:3f:66:41:16:
c9:de:13:42:3e:f7:7b:6d:58:13:d1:fe:1d:79:a1:93:31:dd:
21:1f:dc:94:5b:02:00:3e:b8:fd:c9:82:02:35:e0:3d:f4:d5:
75:b4:56:a2:19:95:ac:0a:12:f3:f8:e7:d1:52:bf:3b:e8:ef:
ed:cb:c9:ca:00:36:e5:b1:05:e2:20:3c:b0:dc:59:00:7a:15:
ef:88:63:53:6b:3c:9c:8f:26:12:61:db:f3:6e:74:d7:a7:e9:
af:39:79:b1:0d:1e:e3:53:18:0a:a4:a8:51:19:45:ea:7e:2d:
33:59:4b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:45:47 2025 by rpki-client