Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
File: S_xaKUEPH_z03ipacFj1FiCzC3k.mft (raw, json)
Hash identifier: DoyCQGwEMHQkTwqUXOy0LMJaJxXwNcQ9PSSq2tGlCGM=
Subject key identifier: 15:07:2E:F7:C6:C9:53:5B:7D:B0:A0:63:24:E8:F8:C2:53:C6:41:2B
Authority key identifier: 4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79
Certificate issuer: /CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79
Certificate serial: 0198808B92705CDFF672F0D22A403E4F90D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
Manifest number: 0DD0
Signing time: Wed 06 Aug 2025 18:01:27 +0000
Manifest this update: Wed 06 Aug 2025 18:01:27 +0000
Manifest next update: Thu 07 Aug 2025 18:01:27 +0000
Files and hashes: 1: S_xaKUEPH_z03ipacFj1FiCzC3k.crl (hash: DUUkp9ZbcqA92jB1ISjUMV6nMa2VwAH4SFtK+3wiEUY=)
2: bgx026u65bEUIofoNprJyhzn_S4.roa (hash: mkA02/DFrwmq5MSNIOugSkJaE1Y0Xy5Utto0dixWmsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:92:70:5c:df:f6:72:f0:d2:2a:40:3e:4f:90:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79
Validity
Not Before: Aug 6 18:01:27 2025 GMT
Not After : Aug 7 18:01:27 2025 GMT
Subject: CN=15072ef7c6c9535b7db0a06324e8f8c253c6412b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d2:8f:7f:8e:c4:d0:3b:7f:c6:38:5d:79:28:
88:e6:56:04:fd:a2:9e:aa:cd:07:ef:e6:19:a2:c5:
d4:5f:11:2f:df:a4:55:17:65:3a:9c:78:0e:97:10:
06:5c:d2:52:d8:66:35:f8:65:7f:39:de:4b:42:7c:
45:47:c5:e8:6a:b0:45:b8:ea:e2:6c:89:6e:b7:34:
5a:ae:ef:a0:5a:d3:1b:41:94:12:b4:86:ac:c5:db:
28:e6:3b:6d:15:45:98:87:d2:e3:08:74:48:10:01:
a8:75:63:26:78:45:1b:e1:aa:ec:d7:2a:ff:57:a7:
8e:61:33:a1:c1:4e:7e:46:4f:89:ff:a3:88:be:b7:
6e:a8:64:75:7b:ef:38:c0:20:ae:a4:f5:49:5a:db:
f6:af:c8:45:cd:5f:fa:93:13:e1:6c:fd:4f:78:18:
a8:91:13:88:cc:68:bb:12:5b:03:a5:ea:87:6d:ec:
ab:6e:c6:a8:8c:25:4a:46:0d:71:c6:97:3f:5a:5e:
4a:34:8c:84:66:68:cd:4f:10:8d:94:91:28:98:8f:
0a:35:2b:8d:78:0e:8d:a5:0d:e9:46:3f:e1:08:e4:
a5:f0:ff:d2:db:72:25:dd:5a:19:03:b0:76:e9:b0:
ef:50:6b:a3:f3:ad:2a:93:f0:16:0e:74:9b:02:f2:
08:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:07:2E:F7:C6:C9:53:5B:7D:B0:A0:63:24:E8:F8:C2:53:C6:41:2B
X509v3 Authority Key Identifier:
keyid:4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:3e:05:5b:85:6e:a2:b5:b8:5f:00:da:e3:2a:49:ae:62:6c:
69:98:b8:26:68:a5:bd:34:16:15:5c:d9:e4:d5:22:cc:5d:f3:
7e:e2:3a:f7:7e:64:b9:a2:64:55:8a:26:e8:04:c8:2a:43:1a:
12:a8:3f:5b:cc:31:87:f1:16:26:b6:e1:bf:9c:92:57:98:d0:
54:91:a3:a8:b1:66:05:c3:55:af:b5:2a:3c:08:aa:5c:ff:41:
de:db:f1:75:77:62:ea:5c:58:25:9d:61:8c:e1:bd:07:86:93:
78:91:99:13:fb:e5:11:3e:7a:e4:54:35:e3:33:fd:bc:e5:59:
c9:d9:36:74:ee:34:63:cc:8f:06:fd:55:b9:bd:0d:0f:5e:af:
1c:e0:f2:3b:1c:9a:19:36:a6:47:92:93:49:5c:84:fc:24:2e:
91:91:2e:4d:dc:23:2b:53:7e:52:38:ca:41:b0:62:6e:7b:1a:
41:17:e7:b7:19:09:89:39:5c:cf:2e:af:89:0f:03:c4:fb:66:
35:16:f6:bf:e6:c3:3b:9f:c3:5e:88:2f:92:df:39:ca:eb:f3:
36:8f:f7:4b:c1:29:d9:21:4b:ce:5e:2f:58:eb:8e:23:ca:e8:
1d:a7:0c:a1:97:76:49:17:36:60:d6:60:b5:86:1d:b2:d8:56:
75:b5:3b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:18:28 2025 by rpki-client