Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
File: S9Kz8xprCl18Bpijd5alHXsMtqQ.mft (raw, json)
Hash identifier: X8x5YxT9+HxqHBN5QA4hU+qmoU2fOwIV9bULiHmtRN0=
Subject key identifier: 1B:D4:3D:A8:EB:E9:CA:F8:0F:07:36:BC:E4:87:CA:BE:E1:18:83:CB
Authority key identifier: 4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
Certificate issuer: /CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Certificate serial: 01987CE570771BC56E41E4D429C537192097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 01:01:07 +0000
Manifest this update: Wed 06 Aug 2025 01:01:07 +0000
Manifest next update: Thu 07 Aug 2025 01:01:07 +0000
Files and hashes: 1: Rdx8XfheQK9SaYz_CldryphH9T8.roa (hash: y/tJ0RmbT3dmGd7x3jwaVo6j1E4t/44CEGiNjsjlces=)
2: S9Kz8xprCl18Bpijd5alHXsMtqQ.crl (hash: 8Pd2oFGynypUR1rExQMFJkQyQ9NA1pmT+6kQ5Vu0SaQ=)
3: fUKc1eWdHmKeTh30S5pWd_dRf4M.roa (hash: GDoe187PYSy+m1pOUWwfwziOM1L2+4EiEEfpzL06VQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:70:77:1b:c5:6e:41:e4:d4:29:c5:37:19:20:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Validity
Not Before: Aug 6 01:01:07 2025 GMT
Not After : Aug 7 01:01:07 2025 GMT
Subject: CN=1bd43da8ebe9caf80f0736bce487cabee11883cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:c4:e0:7f:30:51:aa:1b:a8:47:9f:f9:3f:
fa:04:49:c6:5f:07:8e:17:29:9d:83:43:c8:57:33:
7b:bb:e9:d6:54:10:28:32:f5:79:27:fd:b2:43:6d:
08:5b:8a:68:b4:a5:2c:55:c8:d5:6d:48:40:4f:00:
bc:bd:20:c1:c7:42:9b:74:3e:33:0d:fa:fb:3f:e9:
18:64:58:1f:f0:5e:dd:b0:68:b8:a8:bf:a5:2c:36:
20:d3:70:bf:4a:a3:c3:4b:5f:75:27:c2:0b:1e:3e:
ca:0e:7a:55:c1:db:e0:50:66:e7:36:86:72:35:16:
de:3c:0a:34:ad:7e:d1:6d:f8:0c:6e:fd:0e:80:95:
0e:bd:c1:f1:5f:ea:e1:80:fd:9a:5e:f1:8d:01:57:
b4:a5:c5:7c:4b:fa:7d:4e:6f:15:dd:8e:57:de:74:
90:46:db:cc:8d:31:0a:39:92:56:ab:be:50:04:57:
9e:54:05:06:d6:8b:46:e9:a3:90:72:a9:32:82:76:
bf:e3:ea:12:0b:d0:79:80:48:b9:2a:78:d6:9d:4d:
9b:31:a8:7d:47:9d:a5:93:9d:fb:3b:1d:56:6e:be:
8d:9d:24:2d:7f:c3:8d:39:9a:15:eb:74:13:0e:f8:
70:34:34:07:26:75:e7:b8:e1:5e:83:cc:13:0e:f9:
6b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D4:3D:A8:EB:E9:CA:F8:0F:07:36:BC:E4:87:CA:BE:E1:18:83:CB
X509v3 Authority Key Identifier:
keyid:4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ec:ca:31:70:c4:27:4c:d6:54:a1:5a:24:ab:89:ce:c4:48:
41:5f:cc:e2:7b:5f:6a:b4:c5:79:5e:48:c9:b8:39:ed:d5:90:
c1:06:be:9e:23:3e:66:5c:50:ab:7d:4c:10:85:71:83:54:16:
4b:cc:f9:85:21:08:46:ed:fd:5d:bb:78:62:d3:41:a3:e8:5e:
21:d7:b7:c0:2c:94:0a:00:fd:07:f1:83:b4:61:15:99:c0:ce:
30:71:6f:a7:28:df:db:2c:37:75:a4:37:6a:32:2f:88:a1:5c:
65:c4:24:5d:a1:45:69:7a:a4:3b:81:55:9d:00:7f:8c:f9:7b:
ef:36:fe:a8:e8:29:23:52:77:71:dc:cd:9d:d7:a0:4d:68:13:
d3:cd:1e:9d:a1:80:2c:e9:17:d0:3d:79:ac:bd:99:85:80:e6:
6f:6e:04:dc:2d:bc:4c:01:f5:cc:51:92:c8:9c:a6:e4:e1:7e:
85:18:a5:82:b4:52:3d:27:ee:aa:fb:30:1c:01:d9:f1:eb:b6:
a8:a4:12:a6:19:84:c1:56:0a:7b:68:b7:38:e4:94:42:7b:c7:
d7:f0:4c:65:23:a1:3f:82:57:1e:c6:93:4d:99:a9:78:b8:7f:
6e:00:c4:2d:04:42:c0:4e:57:a1:43:b1:0f:53:17:96:7c:9f:
17:25:76:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:03:00 2025 by rpki-client