Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
File: S3tzzZvRdD99P17GvVChk170gB4.mft (raw, json)
Hash identifier: wnE9aKH6Jz36beVfbpBONawpqfD4d0ri7jxIlOsqQso=
Subject key identifier: 8D:04:08:04:ED:76:4A:B4:72:5B:53:1F:2E:77:56:B9:79:8D:17:6E
Authority key identifier: 4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
Certificate issuer: /CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Certificate serial: 01977452AC8F9AAC6F56B868B82A24A8BDAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
Manifest number: 1522
Signing time: Sun 15 Jun 2025 16:01:04 +0000
Manifest this update: Sun 15 Jun 2025 16:01:04 +0000
Manifest next update: Mon 16 Jun 2025 16:01:04 +0000
Files and hashes: 1: M2oh_KntEbzSd5x9NMZSq_CLZnQ.roa (hash: x3vhRRKg/BRlfpWUDclKnemjloDpJmmJOqeSSdSoUa4=)
2: S3tzzZvRdD99P17GvVChk170gB4.crl (hash: OSoV/vaFYgVKGYBIzzrJFlDVYV8gUE8njALioJ/KxNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:52:ac:8f:9a:ac:6f:56:b8:68:b8:2a:24:a8:bd:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Validity
Not Before: Jun 15 16:01:04 2025 GMT
Not After : Jun 16 16:01:04 2025 GMT
Subject: CN=8d040804ed764ab4725b531f2e7756b9798d176e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:cc:a7:cb:31:39:b8:b4:bb:e0:aa:2b:ac:
90:2c:a9:4e:e7:44:f8:fb:5b:f6:b2:3e:ec:9d:63:
8e:57:01:4a:27:7a:de:59:5e:e3:00:96:82:ef:46:
1d:4b:a2:62:74:62:d3:5e:72:26:5c:95:7c:a3:6d:
33:35:e2:a9:cb:5b:3c:e0:ea:62:c9:4d:29:e3:df:
7d:1b:01:22:12:e7:71:f0:dc:86:05:e1:b6:fc:35:
b2:71:ce:9b:52:c8:c1:63:72:38:69:d2:2b:5d:47:
c7:ba:2a:b8:6a:d9:9d:db:91:63:c0:2a:f8:4f:4b:
c4:b4:76:ea:00:3e:c6:78:a9:55:d0:f6:34:c6:71:
96:ff:fb:a6:0c:ed:9a:a5:06:59:32:d1:26:25:93:
f0:cf:e7:bd:26:cf:d7:c7:49:35:2b:4d:e1:f7:8d:
9e:04:62:0b:54:62:8b:b1:87:18:76:d0:b4:b8:ec:
23:62:04:6f:0d:2b:11:af:f3:1b:5c:8a:b9:10:6c:
f7:54:a6:97:d5:51:63:ad:9b:0a:6a:e8:dc:a9:d0:
0b:cb:fa:0e:73:03:e9:00:2c:e8:4e:51:ec:10:d0:
10:54:90:68:e9:1d:7c:b3:15:a0:83:07:f1:f9:39:
b8:af:fc:f3:e2:48:05:0a:a4:d1:28:c8:17:e5:38:
0f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:04:08:04:ED:76:4A:B4:72:5B:53:1F:2E:77:56:B9:79:8D:17:6E
X509v3 Authority Key Identifier:
keyid:4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:4f:59:77:62:3d:4a:5c:38:43:fc:e2:c2:1e:45:60:44:a5:
db:c8:60:75:3a:92:bf:22:3e:14:7c:84:48:2d:7a:b4:93:cb:
7f:83:06:32:3a:58:c4:fe:c9:c1:f0:14:2c:9f:b9:ec:01:aa:
e2:08:99:78:18:4e:71:9c:3e:79:a0:6b:d2:2d:94:89:c1:9b:
34:c6:15:15:b4:25:4c:06:1a:04:fe:53:5d:2f:30:07:9e:33:
8b:79:fb:bb:f8:a6:8d:04:aa:5e:63:e5:25:d1:99:0d:fe:71:
e0:00:e2:94:53:1e:c1:bc:dd:08:7a:6b:1c:13:ef:2a:9b:0a:
d9:25:de:5b:96:da:d5:20:13:d1:6e:b9:b3:67:a4:71:4a:e1:
fd:e8:b6:69:60:a3:59:82:e1:e3:36:09:d6:64:fa:20:58:07:
a0:ab:1f:18:c0:b9:88:9d:9c:3a:92:e2:15:49:2b:4b:54:e1:
aa:62:6b:c4:aa:6f:3a:6e:95:f3:3c:c0:d7:bc:34:f8:e8:9a:
72:e0:3e:1f:24:a7:a1:49:d0:46:88:c6:7b:2d:c6:f9:0a:90:
6e:00:c1:f0:73:24:cc:20:c9:cc:50:51:87:1f:9b:b9:77:75:
69:58:42:f0:17:da:28:05:80:b9:2d:af:4c:91:9d:f0:a5:6d:
87:c3:42:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:48:12 2025 by rpki-client