Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
File: S-kZqE4aIp94nZOdGqpxKk08OZ0.mft (raw, json)
Hash identifier: MCRE5NoSHtlgy1FWSwJ8aTqAVgQteKWxodcha4QUwUQ=
Subject key identifier: 60:31:C9:85:65:C7:D1:09:61:4A:C5:B6:91:90:CF:97:A6:13:0E:E6
Authority key identifier: 4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D
Certificate issuer: /CN=4be919a84e1a229f789d939d1aaa712a4d3c399d
Certificate serial: 01977A8B9999517F0A4493119D4AF4B59531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
Manifest number: 03F4
Signing time: Mon 16 Jun 2025 21:00:58 +0000
Manifest this update: Mon 16 Jun 2025 21:00:58 +0000
Manifest next update: Tue 17 Jun 2025 21:00:58 +0000
Files and hashes: 1: FE9TisHKbwT-TG7WXc-HdjPStqc.roa (hash: pRwsqMoq8wG5C6fvp0aFlXXk9XmPop41EHqaLEOgfSc=)
2: S-kZqE4aIp94nZOdGqpxKk08OZ0.crl (hash: JkSieL6A2xxFd3bi0ZJtNcyYGVLk3SPlasHzMg3ZbBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:8b:99:99:51:7f:0a:44:93:11:9d:4a:f4:b5:95:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be919a84e1a229f789d939d1aaa712a4d3c399d
Validity
Not Before: Jun 16 21:00:58 2025 GMT
Not After : Jun 17 21:00:58 2025 GMT
Subject: CN=6031c98565c7d109614ac5b69190cf97a6130ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0b:58:a8:9f:d2:81:e3:fb:00:a5:33:23:92:
54:f0:ad:90:98:6b:fa:2b:d8:87:86:bd:8b:ee:77:
cc:c3:30:69:52:fe:1f:08:43:83:e3:26:ca:cb:f3:
ab:0b:0a:0a:26:93:32:f4:55:e1:9c:75:f0:5e:41:
37:61:bd:a3:a1:38:bb:8d:ab:3e:4c:10:5b:24:86:
3c:42:31:80:e7:06:fb:20:7e:9e:f9:79:5c:04:e6:
8c:06:9d:17:3a:a9:59:3f:6c:d3:54:3a:6e:8f:6e:
e6:2f:56:4a:c5:ed:45:ee:86:00:cd:13:79:07:86:
0d:95:be:2c:52:51:e6:a4:9b:99:db:1a:d0:16:25:
26:e2:c4:d5:de:e9:8f:f9:08:3a:ea:e9:cd:50:6a:
e0:88:2a:95:93:06:e9:41:3f:93:08:e6:fe:a2:54:
d8:be:c5:5e:de:e0:5c:54:ef:25:70:29:87:36:46:
a3:57:1c:3a:0b:79:bd:fe:cc:8f:37:c3:bc:73:c0:
bb:d7:6f:64:70:ac:30:8c:67:a0:50:7a:a0:34:b5:
00:14:45:5b:a0:8b:e2:31:0c:9b:65:ce:64:c2:de:
d7:b8:cf:00:62:02:9b:51:85:bf:85:b2:c4:2a:c1:
38:82:a7:54:49:e6:6f:2a:77:e4:6d:97:28:7d:4b:
25:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:31:C9:85:65:C7:D1:09:61:4A:C5:B6:91:90:CF:97:A6:13:0E:E6
X509v3 Authority Key Identifier:
keyid:4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:8f:b3:39:30:f4:8f:84:47:f4:d3:04:9f:68:ed:da:57:b0:
41:7e:33:4b:a9:9e:a8:17:b4:aa:82:bd:e9:a1:f1:2c:cb:0d:
86:a0:6f:34:38:56:2c:51:64:72:bf:5b:a7:5b:e0:e5:65:e5:
8d:b4:dd:a9:11:de:38:24:ad:74:e4:d3:94:ae:1f:4a:c3:1c:
07:fd:b2:52:de:3f:cb:83:40:3c:cd:ba:8a:08:7f:9f:89:28:
33:1c:bc:ee:10:d8:54:95:aa:49:a4:1a:08:c2:5a:44:5e:84:
10:b4:a5:c2:89:39:56:cf:01:06:2a:b1:37:8f:22:c4:9b:d2:
2c:65:23:43:c6:7e:ff:63:6e:45:6c:ce:69:68:6a:d3:81:8c:
87:f6:f5:6d:20:75:e8:09:8c:3f:ee:94:9c:23:88:f9:40:16:
ed:d7:d0:e2:48:99:53:31:75:69:7a:e0:35:91:9f:61:c6:bc:
62:0b:7b:a6:62:95:c3:5b:5e:67:e4:27:06:1a:cc:bc:49:cb:
53:b6:0e:e7:17:ea:8f:23:8a:6d:29:bf:94:8c:a0:3e:f4:86:
4b:bd:3e:a8:8b:80:bf:0f:07:9b:f2:a3:c9:72:b9:66:42:02:
2e:6d:17:09:a6:aa:a5:b6:52:65:10:a0:77:80:e2:56:50:d9:
6f:4d:49:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:26:36 2025 by rpki-client