Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
File: S4xZ6sloSDTLl8wq2FjVx03PbO0.mft (raw, json)
Hash identifier: siuZxpUJrUQ4qvXWDzO4JtAvAYo30UwieyWd8sTyWR4=
Subject key identifier: 86:A0:A5:83:5C:9B:C5:71:9C:1A:71:DF:26:94:D8:B0:89:2A:B0:11
Authority key identifier: 4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED
Certificate issuer: /CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced
Certificate serial: 01977640815F3B0B2021278C40737210BEDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
Manifest number: 03FA
Signing time: Mon 16 Jun 2025 01:00:28 +0000
Manifest this update: Mon 16 Jun 2025 01:00:28 +0000
Manifest next update: Tue 17 Jun 2025 01:00:28 +0000
Files and hashes: 1: RX0vF7s1v3ZmCOZA2PNfN34Nc0Q.roa (hash: DL5GkVVXEPj8zi75flOVBOwBTEyMxXVt8DN9ATKiCDI=)
2: S4xZ6sloSDTLl8wq2FjVx03PbO0.crl (hash: Taw7T4FGFtYs1SG3ovRxdNhHptQ3LzuSgaQbWoiwpUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:40:81:5f:3b:0b:20:21:27:8c:40:73:72:10:be:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced
Validity
Not Before: Jun 16 01:00:28 2025 GMT
Not After : Jun 17 01:00:28 2025 GMT
Subject: CN=86a0a5835c9bc5719c1a71df2694d8b0892ab011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:00:1b:db:6d:a4:1a:f4:4b:77:1d:44:bb:73:
b8:56:f3:9e:71:71:bb:e0:b5:98:b0:94:66:52:1e:
6a:b2:c9:f1:90:68:3a:9b:bb:be:43:f5:06:54:37:
93:dc:5f:6b:13:e3:d9:78:87:42:6e:cf:97:df:84:
7a:db:ef:6e:65:98:e1:06:6b:91:d4:47:0f:02:52:
df:e5:c9:1e:29:ab:d7:56:a6:3d:27:6f:6b:ac:58:
97:86:ac:f1:2e:13:6b:2b:e4:bd:57:14:e9:77:c5:
8b:14:87:c4:f8:01:a7:23:39:fb:9f:95:8c:4a:53:
ac:62:5d:b4:02:f3:e2:bd:ab:ef:fd:99:a2:8a:d9:
05:a5:05:db:31:5a:bd:4e:f1:fa:c3:83:f3:64:8a:
ab:a3:03:18:07:89:e8:1d:70:93:d0:fe:41:13:fe:
b8:5e:bc:48:c5:45:d7:ce:a4:2b:54:45:3f:3d:0f:
46:89:af:63:e8:ff:f6:6e:15:f4:bd:46:46:79:2c:
b2:f6:21:32:ce:3e:e5:d6:36:37:94:ed:dd:7d:db:
4d:14:85:1b:7c:bf:d3:c1:72:74:d9:3a:85:23:17:
98:c2:a2:83:f6:8c:81:68:5e:91:0f:4e:f1:08:f5:
e4:6b:1e:ed:78:a9:a6:36:fb:d8:2c:10:59:7d:20:
76:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A0:A5:83:5C:9B:C5:71:9C:1A:71:DF:26:94:D8:B0:89:2A:B0:11
X509v3 Authority Key Identifier:
keyid:4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:67:2e:5d:7e:c3:33:98:ac:9a:33:7f:b5:1c:10:1a:96:32:
b7:77:cd:94:04:23:8c:08:f0:4b:c4:b2:07:0b:c9:0c:d0:98:
e0:0e:42:40:88:f5:d5:b0:5a:0b:fc:68:98:52:f0:7d:36:c0:
1b:4c:58:f2:71:3f:32:93:d0:03:5c:6a:e1:1b:06:4e:3d:69:
1a:d2:e5:01:2f:e4:c6:8b:86:27:ea:e3:80:1a:81:98:7c:a0:
1f:39:47:6c:89:9c:02:cb:0f:17:d6:bc:b2:30:14:ff:eb:6c:
6b:4b:6a:eb:61:20:74:e1:2f:21:ca:6d:68:77:53:97:f9:6b:
48:68:9a:aa:5a:61:86:8d:a3:32:ae:42:29:e2:1d:a9:67:6f:
1d:f1:d8:43:a0:1e:ff:7f:d0:3f:01:1f:69:71:34:3f:8d:63:
65:44:32:e7:16:05:68:d1:5f:7f:50:32:a9:f2:2c:e7:39:0a:
79:3d:2e:da:18:49:3d:85:73:49:44:71:e2:84:8f:db:a7:e7:
69:0c:db:7c:12:36:a7:2b:1d:d8:9c:98:5a:02:cc:de:21:3d:
e9:95:7b:3f:9c:b6:81:86:43:94:9b:a7:2e:0a:73:71:fb:1a:
72:30:ed:9c:46:62:66:cb:4f:2d:ed:69:76:c7:4a:96:33:e5:
95:91:e9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:15:07 2025 by rpki-client