
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
File: S70EYZouForJV1Iu3_Ai-QvApN8.mft (raw, json)
Hash identifier: L+15UGukHZUDbMI9XZXHBDMo4sESrjG3WbTXAFEIq8c=
Subject key identifier: CF:8C:3E:17:F2:79:6D:91:B0:F1:CE:87:A0:46:0A:2E:10:B3:DE:87
Authority key identifier: 4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
Certificate issuer: /CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Certificate serial: 01987B9CEED5E12627EC40E320ABBAE900E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
Manifest number: 0DB6
Signing time: Tue 05 Aug 2025 19:02:18 +0000
Manifest this update: Tue 05 Aug 2025 19:02:18 +0000
Manifest next update: Wed 06 Aug 2025 19:02:18 +0000
Files and hashes: 1: Fg5ya9jEENzzvmGwH2Ykprm5YIM.roa (hash: o09Ogu5nR2BkFMd5V+jfaqfvdxmKcg813astixFQ7Wo=)
2: S70EYZouForJV1Iu3_Ai-QvApN8.crl (hash: xVqShe4EXfi5LO4ooyS4joqUI9TCtPl34SD+RUy3nx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:ee:d5:e1:26:27:ec:40:e3:20:ab:ba:e9:00:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Validity
Not Before: Aug 5 19:02:18 2025 GMT
Not After : Aug 6 19:02:18 2025 GMT
Subject: CN=cf8c3e17f2796d91b0f1ce87a0460a2e10b3de87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8a:09:be:b8:83:f2:11:b4:96:06:ce:41:77:
2f:e6:f8:a4:7e:3e:30:54:1f:a3:34:ac:70:f1:b7:
1d:fb:85:43:59:36:d0:f7:9f:24:1a:78:53:d3:7f:
47:19:96:9f:21:f0:4c:7d:70:fe:af:33:36:95:b2:
b0:e6:15:82:38:ac:26:3c:e0:bc:1c:66:fd:f9:17:
48:56:51:03:6b:8d:08:60:fd:57:74:71:89:d3:6d:
b2:1b:8d:b3:6e:1e:0e:f7:b3:4d:e0:4a:60:39:05:
72:b6:8f:fa:14:d1:2a:fc:93:a5:4c:b3:94:68:63:
98:21:35:fe:39:4e:38:21:09:39:f0:df:33:cd:63:
50:26:72:c0:2c:0e:a8:df:76:be:80:44:f6:b4:f3:
ee:e6:ff:29:a4:6b:cb:94:2c:09:a6:f9:42:99:92:
6e:83:af:14:5e:36:2d:83:93:d6:4d:c9:bd:48:21:
06:e6:d7:a0:86:42:cc:27:2b:32:de:e6:3f:31:a8:
84:d8:65:87:e7:f0:68:6c:ae:19:83:d3:4e:a6:d9:
19:7c:5c:7c:d3:8b:08:82:9c:46:f6:a9:d7:ec:ba:
34:40:10:d4:ee:5b:54:a1:8d:dc:78:af:dc:de:aa:
9b:d4:9b:b6:a3:47:4b:bf:0e:10:2d:7b:00:50:cb:
af:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8C:3E:17:F2:79:6D:91:B0:F1:CE:87:A0:46:0A:2E:10:B3:DE:87
X509v3 Authority Key Identifier:
keyid:4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e5:e2:3a:ef:fd:76:a8:00:1a:f8:ec:fa:ad:a5:eb:62:17:
0a:0e:3b:b8:eb:cc:46:94:19:77:23:ef:b2:d3:f8:5d:b8:f3:
12:a1:8a:39:df:4f:93:dd:81:25:e2:54:b3:8b:9b:f3:01:42:
06:01:0f:ee:38:47:6d:d3:a9:b3:11:a1:97:97:d7:53:4a:d7:
d9:90:f2:e6:72:5b:ef:d1:52:59:84:48:0a:d6:b7:9d:93:80:
40:97:2a:af:0f:76:06:d7:ad:7e:60:e1:6d:d7:e1:ab:c6:8a:
ba:86:03:a3:06:ad:84:45:b8:a0:36:e5:87:71:88:77:cd:b4:
92:c3:30:e7:45:df:6f:cb:40:a9:b4:66:04:d1:80:ed:08:74:
f4:87:23:eb:fd:84:6c:bc:c2:7c:2a:63:e2:0d:a6:e9:46:ec:
81:f3:90:d1:55:e9:00:e4:09:3b:e7:81:10:95:07:b4:77:74:
e9:81:6b:c2:56:96:ba:0d:dc:90:74:d5:b1:fd:8e:42:a6:8c:
08:4d:6a:ba:8f:37:fc:64:04:af:9a:90:cf:7c:05:bf:4c:b3:
96:84:d0:32:95:40:d8:98:bf:ad:3c:c8:67:67:dd:16:91:8c:
ac:1d:30:ff:c1:cf:6f:0c:89:34:f2:32:8d:10:18:8e:96:b5:
40:09:03:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:50:30 2025 by rpki-client