
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
File: S-kZqE4aIp94nZOdGqpxKk08OZ0.mft (raw, json)
Hash identifier: dIVulGF4uk6CixijhB21Anx8iBxR/IyDY/99zMAji6o=
Subject key identifier: 97:98:91:88:A6:48:DC:99:F0:F2:79:75:63:EA:6A:14:63:41:52:4B
Authority key identifier: 4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D
Certificate issuer: /CN=4be919a84e1a229f789d939d1aaa712a4d3c399d
Certificate serial: 019873E286C956D7D79141159B125C142344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
Manifest number: 0475
Signing time: Mon 04 Aug 2025 07:01:22 +0000
Manifest this update: Mon 04 Aug 2025 07:01:22 +0000
Manifest next update: Tue 05 Aug 2025 07:01:22 +0000
Files and hashes: 1: FE9TisHKbwT-TG7WXc-HdjPStqc.roa (hash: pRwsqMoq8wG5C6fvp0aFlXXk9XmPop41EHqaLEOgfSc=)
2: S-kZqE4aIp94nZOdGqpxKk08OZ0.crl (hash: nR38ExAmUpDM4VZHuVoNu1h646leLRFsXDuor0Lq82g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:86:c9:56:d7:d7:91:41:15:9b:12:5c:14:23:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be919a84e1a229f789d939d1aaa712a4d3c399d
Validity
Not Before: Aug 4 07:01:22 2025 GMT
Not After : Aug 5 07:01:22 2025 GMT
Subject: CN=97989188a648dc99f0f2797563ea6a146341524b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fc:1c:68:c5:64:60:5b:c9:13:3b:c6:39:89:
28:9a:bb:f4:c2:54:b5:e0:ad:9e:85:3a:37:62:c2:
50:26:54:22:07:c0:d5:ba:45:ea:11:87:77:f0:95:
46:c7:8c:9d:1e:f3:c9:ea:c2:cb:51:52:de:fe:32:
76:6d:a4:8f:52:65:85:65:ba:e1:ad:40:a7:1d:46:
4e:76:08:78:0a:6b:a2:db:9e:66:d8:e0:b0:05:54:
47:4a:a8:95:bd:fd:82:60:4b:e3:3f:0f:65:8e:c7:
78:9e:0d:a6:0e:9f:f3:7f:54:25:f6:b3:89:a5:a0:
d8:bf:fe:f4:b9:c8:bf:52:18:0d:80:60:b5:a7:cc:
7d:45:5c:81:71:7b:55:7c:77:2a:8c:86:0d:02:08:
21:1b:a4:5e:e4:99:88:6e:d8:ca:9c:c0:b5:4a:3c:
f2:a8:90:9d:91:e1:e4:a7:0c:05:d5:d4:59:71:b3:
4e:33:88:ca:2d:8e:db:bf:f6:95:4d:7a:45:c1:ad:
6a:15:ad:a8:d9:ad:a7:2a:3f:9e:0b:30:c5:c3:75:
66:ae:4e:87:7a:97:22:a2:f8:95:c8:60:fa:86:97:
38:7d:4c:69:25:6f:1c:90:f3:36:19:de:63:24:ce:
b3:21:d2:d6:34:95:c8:56:d0:de:c8:24:1e:d9:f0:
1b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:98:91:88:A6:48:DC:99:F0:F2:79:75:63:EA:6A:14:63:41:52:4B
X509v3 Authority Key Identifier:
keyid:4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:16:07:ea:e3:07:64:22:b9:0a:33:46:9f:b5:1f:79:2a:ec:
fb:23:c0:45:de:84:b5:50:8a:2f:7e:91:2e:5c:71:02:87:88:
59:54:82:96:be:5c:fa:46:89:d9:b8:81:78:35:6f:72:84:14:
63:56:fa:cd:57:7d:8b:68:eb:15:35:be:62:7e:0d:3c:1b:15:
28:b2:a7:08:78:85:b8:99:be:98:10:33:38:aa:11:53:07:de:
cd:24:5c:04:5c:f8:64:ef:4f:ad:3a:84:88:55:23:43:1c:26:
88:8b:04:a4:f3:0b:d0:2c:15:0f:4c:e1:5c:e1:0f:9b:6c:19:
6e:29:ad:ee:f7:49:ba:36:c7:a1:b0:52:d6:1e:9d:c8:e3:56:
05:0a:24:97:10:4d:1d:19:35:67:10:7b:29:d4:cf:13:97:2e:
75:c6:d6:a5:10:68:72:40:35:3b:54:f4:a2:e4:2e:1d:b6:02:
1f:a9:7b:3b:7e:ca:be:9d:ba:7a:b6:c4:dd:d8:6b:cb:3d:55:
dd:cd:ce:c3:58:41:5c:92:2c:20:16:63:e0:86:a1:91:36:8c:
34:15:12:07:72:97:cb:a2:03:ef:f6:b6:5f:9f:7c:6d:50:aa:
1d:c5:1e:7f:a9:ed:0b:bd:7c:43:8a:8b:e4:be:9d:6e:66:e4:
ce:0b:8b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:18 2025 by rpki-client