Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d777e6-0e58-4345-b0a4-4cbd22917d65/1/S4UouKy8h0J2SlgajZeaGEKVZj4.mft
File: S4UouKy8h0J2SlgajZeaGEKVZj4.mft (raw, json)
Hash identifier: Ne9kMtDzceTj27lJn7PT/J6CX1+zFWcaRBI2+DaNh0A=
Subject key identifier: 91:B3:DE:4B:FD:9B:27:F4:40:00:39:A1:B6:6A:DF:A9:D9:81:8D:DA
Authority key identifier: 4B:85:28:B8:AC:BC:87:42:76:4A:58:1A:8D:97:9A:18:42:95:66:3E
Certificate issuer: /CN=4b8528b8acbc8742764a581a8d979a184295663e
Certificate serial: 01987418DF7E404973BA030FA5FB6D8DDBD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4UouKy8h0J2SlgajZeaGEKVZj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d777e6-0e58-4345-b0a4-4cbd22917d65/1/S4UouKy8h0J2SlgajZeaGEKVZj4.mft
Manifest number: 03C6
Signing time: Mon 04 Aug 2025 08:00:43 +0000
Manifest this update: Mon 04 Aug 2025 08:00:43 +0000
Manifest next update: Tue 05 Aug 2025 08:00:43 +0000
Files and hashes: 1: S4UouKy8h0J2SlgajZeaGEKVZj4.crl (hash: JedzUyP9ZZHWLThmIm8SJ8B033rvtLQ14plKGBGU0iU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/d777e6-0e58-4345-b0a4-4cbd22917d65/1/S4UouKy8h0J2SlgajZeaGEKVZj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/d777e6-0e58-4345-b0a4-4cbd22917d65/1/S4UouKy8h0J2SlgajZeaGEKVZj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4UouKy8h0J2SlgajZeaGEKVZj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:df:7e:40:49:73:ba:03:0f:a5:fb:6d:8d:db:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8528b8acbc8742764a581a8d979a184295663e
Validity
Not Before: Aug 4 08:00:43 2025 GMT
Not After : Aug 5 08:00:43 2025 GMT
Subject: CN=91b3de4bfd9b27f4400039a1b66adfa9d9818dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ff:69:08:e5:8d:a7:9a:a3:d5:9a:49:d7:83:
fa:18:78:85:fc:b1:9a:91:40:13:fb:75:85:ae:fe:
12:1a:3f:d2:e5:0d:3e:e8:08:68:b1:e3:df:67:81:
f7:3c:46:df:44:51:9f:ea:9d:7d:62:56:9b:23:5e:
fd:6b:75:f9:ff:b7:fd:4f:2a:24:79:c0:3c:16:ab:
5e:5b:68:e9:c1:c0:ea:29:25:58:62:46:85:bf:23:
9b:31:a3:8a:4c:43:5b:e4:92:c8:dd:7e:c4:84:fa:
49:62:ac:78:b2:ae:16:c0:7f:f6:56:b6:95:bc:e1:
c5:3f:2a:82:01:15:53:35:71:1e:75:68:22:d9:e3:
97:54:15:67:25:ff:ce:b6:64:00:26:aa:b2:70:91:
3a:6e:58:18:66:1f:79:a6:08:c6:1b:d0:2c:05:6f:
e8:bd:c6:85:80:9c:f4:f5:f6:cb:a4:aa:60:5f:35:
00:83:6e:44:ca:ed:1b:ff:d7:10:94:6b:ea:55:19:
e7:df:24:e6:19:3c:2c:62:c9:2c:0a:26:f6:1e:d8:
19:65:85:dc:64:72:1f:bd:73:39:f8:df:5a:1b:07:
f4:7b:48:a0:ba:95:03:c3:ca:7a:bd:2a:12:ce:a9:
e0:6a:e2:40:73:55:31:bc:90:69:e4:dd:7b:16:fd:
f1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B3:DE:4B:FD:9B:27:F4:40:00:39:A1:B6:6A:DF:A9:D9:81:8D:DA
X509v3 Authority Key Identifier:
keyid:4B:85:28:B8:AC:BC:87:42:76:4A:58:1A:8D:97:9A:18:42:95:66:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4UouKy8h0J2SlgajZeaGEKVZj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d777e6-0e58-4345-b0a4-4cbd22917d65/1/S4UouKy8h0J2SlgajZeaGEKVZj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d777e6-0e58-4345-b0a4-4cbd22917d65/1/S4UouKy8h0J2SlgajZeaGEKVZj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:aa:0b:a5:07:f1:45:2f:4e:1b:e4:61:53:a2:eb:9d:c2:96:
cd:0a:a4:5e:c6:91:3e:42:97:39:7e:6b:d5:dd:75:c6:9b:45:
ee:4a:9f:3b:e8:49:ee:9b:b3:72:1a:08:71:9e:42:ed:73:7c:
5a:6d:22:62:3c:64:1c:14:5f:97:cf:e2:bd:d4:83:3c:3f:37:
8b:7b:90:f9:05:03:c0:db:24:d7:07:aa:0b:f4:18:ad:74:77:
03:a8:05:12:38:7b:b2:26:a5:25:d0:1a:7d:20:f8:5d:1d:f2:
0f:54:9c:7f:7f:18:ba:22:54:8d:a4:d1:f3:9f:35:53:e1:8f:
ec:dd:0d:7f:4a:60:81:c2:81:01:56:4d:f8:cf:f8:56:3d:36:
6e:b0:65:e7:98:d8:c4:49:1d:09:33:f3:16:12:ac:d7:b8:8a:
1d:fa:17:77:d0:36:89:51:ae:15:6d:12:d2:ef:8f:19:47:df:
aa:94:a2:6d:a9:ea:5a:e6:9b:4a:b1:e5:b0:03:c2:bf:a4:17:
67:4a:b8:89:8e:c0:6d:89:5a:0b:8d:5c:f3:5c:b6:56:6b:88:
81:60:39:26:ac:de:9c:67:ad:b9:43:50:b5:09:c4:fc:49:7d:
0e:7e:29:7b:73:c2:3a:98:77:f7:02:39:dd:a4:27:de:de:e5:
1e:a8:b6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:04 2025 by rpki-client