Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
File: S9REyGTp6F01N24PaCgXmfYoHxQ.mft (raw, json)
Hash identifier: cY0C0hMoZZVNZI/e5ErAj8Epwulu9jGEn19aNMxMxuA=
Subject key identifier: F0:4B:BC:57:FA:EE:7F:C4:AA:0A:8D:6C:FC:BB:2C:A5:D5:57:16:35
Authority key identifier: 4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
Certificate issuer: /CN=4bd444c864e9e85d35376e0f68281799f6281f14
Certificate serial: 0198A04EF8E235225D9354CF5372135183C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
Manifest number: 0E23
Signing time: Tue 12 Aug 2025 22:03:06 +0000
Manifest this update: Tue 12 Aug 2025 22:03:06 +0000
Manifest next update: Wed 13 Aug 2025 22:03:06 +0000
Files and hashes: 1: S9REyGTp6F01N24PaCgXmfYoHxQ.crl (hash: 70klVrgwQtMsYA/0N3xYvgNnMpMWgcH5nJqo6lG/ES4=)
2: _0wH1BRcgc6tfF99TwNnC3iQ1pU.roa (hash: O+Zelc4oaCgFlSMOLR6IXR0OWFyZm1W0ImLAmE3cggg=)
3: igkLmqGvdo3ZptL2OBtAT5tgBr8.roa (hash: JNS1dghL0HEbj9Q46she80UtZ72vLWiMcXMi6xfr/RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:f8:e2:35:22:5d:93:54:cf:53:72:13:51:83:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd444c864e9e85d35376e0f68281799f6281f14
Validity
Not Before: Aug 12 22:03:06 2025 GMT
Not After : Aug 13 22:03:06 2025 GMT
Subject: CN=f04bbc57faee7fc4aa0a8d6cfcbb2ca5d5571635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:05:bb:33:77:6d:52:6c:71:66:4d:c9:3e:1d:
66:f8:6f:ac:d5:61:48:41:ad:3d:ef:6c:9a:fc:9c:
60:bc:f7:2d:a4:79:d1:44:09:73:a4:d0:ae:ce:fc:
43:63:53:f5:33:ec:0a:df:ea:68:f3:28:72:4e:26:
9f:eb:7d:70:5c:e5:0b:81:af:3d:f0:cf:92:e2:e5:
86:45:18:40:05:39:56:85:82:67:d9:b4:d1:ef:a6:
8d:16:5b:7e:1b:97:8d:6d:2e:40:da:cc:d4:88:79:
80:b5:1a:96:8a:ba:0f:20:d8:4c:a9:85:02:32:d0:
98:6a:69:54:3a:2f:73:61:fc:fa:e1:c7:51:ac:a4:
e2:c6:e9:81:20:4a:92:d1:12:eb:c5:38:26:54:cb:
bc:06:ec:2b:29:23:84:9c:2e:f5:f5:37:15:d1:4a:
22:05:b3:30:3f:b6:cd:3b:d1:a1:b6:57:d6:ec:70:
f7:f3:38:3b:83:bc:4c:1c:22:02:3d:f9:74:34:7c:
6e:53:d3:55:bc:7b:d0:ab:3c:fd:13:c1:19:e3:9f:
6e:f2:c5:7d:eb:93:8e:73:db:14:05:13:8a:46:9c:
7d:9a:01:1f:bc:53:ea:94:37:42:af:58:5c:e9:f9:
0a:89:41:95:ed:69:db:4b:2f:7d:dd:af:1a:55:2a:
8c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4B:BC:57:FA:EE:7F:C4:AA:0A:8D:6C:FC:BB:2C:A5:D5:57:16:35
X509v3 Authority Key Identifier:
keyid:4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ee:a8:ab:61:25:28:f3:52:d3:1b:13:d6:5a:61:87:33:71:
32:50:2d:d6:01:2b:03:2d:3b:a8:70:01:fa:ef:2c:a3:40:d8:
e7:7d:46:0a:eb:26:28:ef:25:56:60:97:34:cd:4e:13:b4:38:
72:da:de:48:9e:90:df:9a:70:77:dc:6f:4b:6b:cb:84:89:b8:
1c:5e:f5:25:db:4d:62:72:89:44:0f:0b:2c:b0:d4:b1:b6:ed:
64:59:ff:63:56:fc:dd:f7:d8:1b:b3:d2:88:f0:c0:75:09:d3:
ea:ef:ca:eb:f4:f4:25:24:a1:b6:7e:d7:07:a4:68:cf:c3:a9:
f1:21:70:ef:da:2c:1b:2f:90:9e:e8:6c:b7:0d:97:d1:b4:17:
cb:9f:d2:09:fd:c6:e5:fd:1a:c5:91:5c:55:4e:e2:0a:d7:b6:
0e:83:cc:de:e7:bd:aa:9d:25:8e:4f:54:5f:23:7a:8e:b9:2d:
4c:ee:83:3a:c3:7f:dd:4c:83:fb:e9:52:af:c8:b9:d1:86:f2:
82:68:f3:e0:b6:3d:d8:6a:e7:c4:3b:86:a1:7e:6f:71:6e:91:
89:76:d6:f5:a5:bb:86:a5:df:95:4b:69:c7:fc:7d:e8:c8:c9:
46:a7:a1:73:84:11:e4:d4:4f:e3:47:aa:79:cc:e7:7a:58:64:
3e:90:c4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:14 2025 by rpki-client