Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
File: S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft (raw, json)
Hash identifier: po8sQf2Ta1UaEwyDYQFM8M6ZezqAm3YSs5VtVtsRpy0=
Subject key identifier: 51:53:D9:57:EC:D6:B8:4F:1A:EF:7A:0A:40:C4:EE:4A:60:34:EA:1B
Authority key identifier: 4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A
Certificate issuer: /CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a
Certificate serial: 019873E3D4E3F877CE49780344AE0E5BC65C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
Manifest number: 1304
Signing time: Mon 04 Aug 2025 07:02:47 +0000
Manifest this update: Mon 04 Aug 2025 07:02:47 +0000
Manifest next update: Tue 05 Aug 2025 07:02:47 +0000
Files and hashes: 1: S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl (hash: 7Ah+JInWmBRfWCrvOGWnYObziogGitjTCOu7V26omaQ=)
2: v45LP4AF3yoZv3u_cLa6vnH8FvU.roa (hash: wIRAiX/f/YijUEe8NVGZoMtagmreVjKidBvqPjwb7Tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:d4:e3:f8:77:ce:49:78:03:44:ae:0e:5b:c6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a
Validity
Not Before: Aug 4 07:02:47 2025 GMT
Not After : Aug 5 07:02:47 2025 GMT
Subject: CN=5153d957ecd6b84f1aef7a0a40c4ee4a6034ea1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ce:c6:0b:0b:08:f8:e3:97:05:10:db:48:6f:
8d:a2:ee:f8:11:8e:79:4e:2b:a9:02:14:73:9c:d2:
1e:75:40:a8:da:07:95:3c:88:6d:9d:15:e2:a8:09:
32:d9:89:25:b9:d7:02:ec:19:19:4b:85:23:db:52:
09:f5:33:cb:58:a4:7c:b7:91:f6:e1:c0:c3:45:4b:
36:04:37:05:89:9d:39:58:17:c2:98:a6:d3:fb:b3:
bd:3b:34:a1:23:7e:ba:33:36:da:15:79:ba:44:cb:
fa:0f:cb:40:ec:1a:9c:7a:09:ab:0a:0a:d2:3e:ef:
53:25:e0:58:69:ef:36:0c:01:d3:6b:3f:52:1f:46:
81:97:5e:5a:2c:eb:c5:31:af:86:46:67:5d:10:2a:
89:f6:96:32:2b:46:0c:56:d8:91:e4:3a:60:1b:56:
16:e9:e2:52:f6:2e:0c:31:d6:e6:09:bb:4b:47:2f:
c6:17:c3:cf:6d:e0:da:ce:7a:d9:a1:4f:6c:15:c6:
2e:45:b8:7a:a8:7b:dd:78:d6:18:6d:ba:b0:6e:16:
5f:40:8a:a2:08:54:79:1b:f7:cf:5e:b9:32:af:ac:
16:72:51:57:59:a8:26:cb:19:42:7e:b9:81:ee:35:
9e:62:f0:b3:68:27:ba:9b:92:ca:a6:19:e1:27:94:
82:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:53:D9:57:EC:D6:B8:4F:1A:EF:7A:0A:40:C4:EE:4A:60:34:EA:1B
X509v3 Authority Key Identifier:
keyid:4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:1b:37:6d:d7:3b:4d:2f:b4:9c:29:8d:17:d1:66:8f:a5:6d:
46:2e:ec:36:0d:b2:6b:74:97:cb:c7:93:13:20:fc:28:85:2f:
c7:b2:8e:c0:61:8b:69:73:cd:da:af:9a:c1:64:1c:5d:52:25:
27:37:15:df:7f:c7:ad:6f:a4:f3:d1:7f:8e:0b:4e:71:63:c4:
7f:99:22:18:2b:98:a9:1f:17:0f:dd:77:04:5a:41:c1:7d:fa:
1e:f7:e8:36:95:77:e8:0f:4d:e1:01:e3:93:df:7d:15:b1:80:
0f:70:11:74:64:2c:61:a1:98:cb:23:4e:49:b9:0e:c6:59:2c:
81:8d:6e:83:35:2e:87:1c:f5:30:9f:b3:44:75:c8:2f:2f:b8:
dc:0b:70:3a:d8:77:78:9b:a2:52:fe:70:65:3e:bc:a9:c9:b9:
fc:02:8d:2b:1d:7a:2f:1d:aa:c0:ea:b6:18:42:c4:d1:be:0a:
cb:b5:a2:a6:a8:2f:d6:76:73:5a:69:cb:0c:7f:09:7e:78:b0:
33:4d:47:be:fe:6f:3a:a8:36:65:99:bf:c0:94:1b:de:42:49:
e9:b5:f9:e2:41:e6:64:f2:11:6a:b3:b7:50:99:87:21:ce:27:
e7:9c:ca:f8:cb:4e:79:5d:29:1d:09:19:f5:16:ee:b9:e0:64:
36:5b:82:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:17 2025 by rpki-client