Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
File: S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft (raw, json)
Hash identifier: ZQ+qisj6AHu9sXGfIEvP/whV4+cjMkFovryGQID9vkQ=
Subject key identifier: 8F:52:73:19:EB:7F:96:1A:0D:D4:14:37:2C:CA:0C:D6:28:77:EA:DE
Authority key identifier: 4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
Certificate issuer: /CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Certificate serial: 0198745005F0F9556C87F75D7E2605ABDBAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
Manifest number: 1623
Signing time: Mon 04 Aug 2025 09:00:58 +0000
Manifest this update: Mon 04 Aug 2025 09:00:58 +0000
Manifest next update: Tue 05 Aug 2025 09:00:58 +0000
Files and hashes: 1: IMyen03Z3kYW501dGBJKRvVCnYU.roa (hash: iucT9aE10m3DuQgfsaO8fZMDF0JO/83+1ytDh6dNspg=)
2: S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl (hash: wZMXSdprNJoIqaRntHw6EA6TUh9d7BcoXUs+uhddytw=)
3: _70B8nLCrCvW6ACV30Y-ItPOrFA.roa (hash: cBDWH8z972r2xnPCEsRs0ukVbID+nL6L8yt1uckQ37s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:05:f0:f9:55:6c:87:f7:5d:7e:26:05:ab:db:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Validity
Not Before: Aug 4 09:00:58 2025 GMT
Not After : Aug 5 09:00:58 2025 GMT
Subject: CN=8f527319eb7f961a0dd414372cca0cd62877eade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f2:a5:5a:79:69:05:49:bd:ff:52:b7:8f:f5:
53:9a:24:0d:2d:27:06:b2:61:f7:ab:2b:b2:40:4e:
8c:d5:60:36:e2:bd:e2:e3:ec:a7:b8:fe:4b:f6:99:
f1:a0:b6:83:84:3c:76:60:f3:de:d1:5c:4b:6f:b5:
d6:6b:9c:b5:00:9f:08:33:a7:b1:05:8f:63:d6:d0:
6d:b3:09:0d:6f:16:d4:38:f4:12:c8:8b:2c:b4:13:
dd:65:45:d7:40:33:4e:88:13:72:e7:b5:7c:5a:dd:
cb:30:b6:0e:98:ad:08:a6:d6:e0:d2:b4:7d:a3:85:
43:4e:b1:ae:5a:15:3e:ae:81:52:90:77:54:63:0e:
fa:c8:16:24:81:22:55:78:a7:cc:f7:2e:2b:78:e6:
9c:13:cf:40:97:62:c2:46:92:96:4b:07:47:72:3e:
01:79:76:10:d5:e2:b6:92:8a:b7:3e:5f:29:dc:bf:
ee:66:64:8e:fd:02:8f:0c:6a:cf:04:cd:9f:99:8c:
82:1f:f2:d0:79:f0:f0:1d:89:5c:30:51:8e:3e:1f:
c2:ac:62:8d:41:c8:b6:da:bd:88:20:50:ed:1f:f8:
ba:b2:c2:2e:35:e7:57:3b:43:01:01:c1:1d:28:12:
bf:a0:bc:7d:22:61:a8:9c:0a:48:1a:3e:b2:a5:d6:
62:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:52:73:19:EB:7F:96:1A:0D:D4:14:37:2C:CA:0C:D6:28:77:EA:DE
X509v3 Authority Key Identifier:
keyid:4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:5a:45:d6:12:4a:58:f5:6b:43:b1:54:ab:cc:7a:1f:b9:d2:
9b:ba:e5:27:fa:60:11:92:c6:10:dc:7a:fd:77:cc:0e:b0:28:
23:fa:80:38:6d:90:f8:46:06:9e:21:f2:b1:b6:13:27:98:c0:
94:e3:10:60:2b:6b:cf:58:a5:06:f0:6d:3e:66:a0:ef:9e:3d:
50:6d:e7:53:83:7e:c5:cc:18:3f:ed:21:3e:75:ad:a4:06:a7:
8f:8c:ac:36:2f:30:8a:7a:37:18:b7:6e:2e:ed:1e:b4:67:45:
79:76:d3:f2:e2:6f:e3:3a:0b:f2:0d:d7:fc:c3:82:46:6e:20:
46:2a:ad:4d:05:cd:12:df:31:6a:2d:b6:25:fa:a8:3c:7c:41:
9a:76:3b:97:ea:a9:2f:d7:c1:c6:57:34:2e:37:bb:82:e9:50:
82:67:ae:9b:6a:48:f5:b6:c0:2b:42:cc:69:6b:16:b6:8d:ec:
55:e4:74:54:72:cd:88:26:0c:d9:05:38:05:df:89:47:64:62:
22:c1:c7:b8:fb:bd:01:dc:c1:99:17:f9:90:31:63:67:0e:cb:
e1:25:a6:28:2b:85:cd:4a:20:52:70:5d:fd:6a:4b:f0:e1:10:
2c:3d:4f:88:80:11:88:b7:b7:50:da:00:21:10:72:f6:d5:1e:
03:b2:d8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:38 2025 by rpki-client