Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
File: S3CjpsSoVyUDdZizkT4hhp29040.mft (raw, json)
Hash identifier: dXLYY2X/vhzK0ROwDZmjn6AjchwFYk/dBS1Bi4MIvpk=
Subject key identifier: D2:FC:74:52:48:D6:8B:50:37:6E:0C:A5:72:15:EC:B3:D3:B1:51:FA
Authority key identifier: 4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
Certificate issuer: /CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Certificate serial: 01976A060E52B0561180E62F60A889539847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
Manifest number: 09EB
Signing time: Fri 13 Jun 2025 16:01:10 +0000
Manifest this update: Fri 13 Jun 2025 16:01:10 +0000
Manifest next update: Sat 14 Jun 2025 16:01:10 +0000
Files and hashes: 1: 3jlhu43nFTAqKx4et3eHcMKKL3Y.roa (hash: BH64yszlx12crGfEJXHUgBhMmAPFBIBZrSlJaldUjes=)
2: S3CjpsSoVyUDdZizkT4hhp29040.crl (hash: GYZZBuLjU8jKYCjy4aMiumoMg7iNWFNd+bFiJT5A408=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:06:0e:52:b0:56:11:80:e6:2f:60:a8:89:53:98:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Validity
Not Before: Jun 13 16:01:10 2025 GMT
Not After : Jun 14 16:01:10 2025 GMT
Subject: CN=d2fc745248d68b50376e0ca57215ecb3d3b151fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:85:93:3d:1b:c2:16:19:2e:3a:0f:b2:8e:b6:
8e:72:82:65:cc:16:f2:21:ad:53:b0:0a:ae:de:ab:
3d:98:4e:88:3e:6a:2e:1b:ed:63:07:a0:87:b0:50:
8d:89:d6:04:d5:1c:79:5b:85:50:e5:3f:60:4e:c1:
61:75:36:e3:9c:5a:2c:e0:d5:b7:f3:25:42:c0:ac:
34:ee:a8:08:c1:35:83:d0:0f:42:76:e2:5b:12:fc:
ae:f3:5f:8a:0b:34:b5:3a:88:dd:6e:f4:24:0f:b0:
a4:18:c0:43:e8:6d:e1:57:2c:89:dc:81:2b:53:6b:
ee:e3:a8:32:30:68:ef:0f:2a:71:94:c7:24:72:02:
99:37:14:f3:2d:19:15:87:82:f9:7b:dd:30:48:a2:
44:d9:bf:6e:31:bb:ec:df:20:5d:36:57:c8:a9:88:
c3:da:73:db:a2:21:e6:d6:5f:03:67:b4:ae:ae:62:
91:d3:c9:ef:0a:d2:ce:54:99:1d:d8:21:8f:d8:13:
30:da:fc:ae:f1:3e:b8:49:b8:d2:c3:f5:73:05:de:
04:dc:f2:59:8f:9f:69:0a:db:4f:5b:36:c4:ed:2d:
d0:62:0f:20:09:5b:14:a5:12:06:3e:a5:e1:4d:77:
88:8d:0a:40:01:5b:f1:57:6a:83:1f:e4:a2:95:df:
76:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FC:74:52:48:D6:8B:50:37:6E:0C:A5:72:15:EC:B3:D3:B1:51:FA
X509v3 Authority Key Identifier:
keyid:4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:fc:dd:fc:27:a9:94:c5:64:27:92:86:76:52:70:d6:6d:8a:
c6:62:0d:97:ea:79:22:ae:87:3c:a2:5f:d9:d8:d7:20:4f:eb:
ea:3f:50:9a:06:f2:75:08:44:0e:cf:9e:dd:df:e7:eb:6d:68:
43:0d:35:a3:df:db:9e:f0:e9:b0:97:8e:d5:79:14:d6:b3:12:
67:c5:54:78:f2:33:bf:3e:e7:d9:9e:e5:7d:18:c2:78:88:6d:
e4:50:2c:ba:dc:f3:53:71:35:fd:44:43:94:6d:ef:ba:e4:84:
18:bd:db:d8:24:9d:88:30:94:ca:0a:de:d6:7a:d8:6c:ed:b5:
9a:ca:ea:07:a3:a1:37:9e:5e:f9:fb:81:e8:62:e3:fa:a9:76:
19:d9:57:97:04:e4:60:fb:14:f4:27:6b:3f:6d:a8:8a:0a:97:
21:ae:13:60:df:51:90:a8:14:eb:43:e3:fd:80:cc:09:5b:ad:
2e:cc:5a:c1:12:59:0c:3d:f9:f5:b5:f5:a4:10:89:e2:1e:35:
d5:c5:ca:8e:68:e3:b6:71:3d:55:f5:69:2a:9d:88:0e:4e:7b:
0e:78:fb:26:4a:67:ee:79:5f:39:96:36:bc:9c:b6:44:a4:fc:
30:b6:09:8c:d0:57:e8:1e:e9:8f:3e:a4:32:03:a0:7b:81:59:
d1:e4:58:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:25:53 2025 by rpki-client