Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
File: S6mv0hy4--a4UIAM1LSfJWLJK6A.mft (raw, json)
Hash identifier: wAu6x7zmGCeuVDjUrqLMwjp9OhLdE41xB/XFJ7WnMgw=
Subject key identifier: 32:A9:5D:53:DD:5F:4C:43:DF:DA:19:04:BC:45:15:73:22:41:99:21
Authority key identifier: 4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
Certificate issuer: /CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Certificate serial: 019872CFA4DFBB2661E5CCEFBD46533D1EBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
Manifest number: 09F9
Signing time: Mon 04 Aug 2025 02:01:07 +0000
Manifest this update: Mon 04 Aug 2025 02:01:07 +0000
Manifest next update: Tue 05 Aug 2025 02:01:07 +0000
Files and hashes: 1: 7qAkcUK8ZlpOQk4HP0uuF0lhspY.roa (hash: ZilTYghFnWRS/ebtjdIbZ9Dk7wTzY0JMcLcLjLJ+fE8=)
2: S6mv0hy4--a4UIAM1LSfJWLJK6A.crl (hash: gF3RlxEMbAPKfOxjBeJhoep+e7/cT7lAGM+1FuHPsjs=)
3: vrYtR17Us0uRR4gxZn7liWGR4no.roa (hash: iPAbeEWSZ9JV1k70IoKGFIA+pbF0zGakCFdiJ4Nxk/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:a4:df:bb:26:61:e5:cc:ef:bd:46:53:3d:1e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Validity
Not Before: Aug 4 02:01:07 2025 GMT
Not After : Aug 5 02:01:07 2025 GMT
Subject: CN=32a95d53dd5f4c43dfda1904bc45157322419921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d5:c5:93:c6:4f:16:d5:48:50:78:b7:ab:b7:
4d:ec:9c:cc:e7:31:34:50:38:4f:d7:b3:9f:16:8b:
46:de:a8:f2:dc:55:ee:57:97:b4:af:9e:15:7d:b7:
85:be:94:28:2b:73:9f:e8:03:50:ed:65:f1:c6:6f:
ff:11:65:ae:08:f7:ed:62:71:61:b9:58:52:74:fa:
e5:ac:ed:73:03:fd:ad:c5:04:18:20:02:a4:e5:13:
f8:2c:8f:c7:29:3b:2a:8a:c8:77:26:95:5d:ec:98:
c7:ff:21:44:67:cc:34:dd:14:c6:d6:00:6a:55:7e:
a3:3f:7f:52:5a:1b:8f:c8:72:bf:fe:cb:f2:c0:de:
13:f1:60:4b:32:35:ba:00:b0:6f:29:37:dc:ec:f3:
ca:78:7b:de:82:78:f3:75:aa:44:63:5c:18:a9:c7:
11:7c:34:1d:09:71:d1:68:51:6e:c2:ea:3e:df:97:
15:6c:98:97:9a:8a:39:cb:1d:82:44:91:fe:c5:b9:
4b:34:90:00:29:bc:56:de:0e:54:cd:be:6e:d2:64:
a3:56:31:20:58:d0:8e:e7:20:fc:fe:23:46:4a:30:
a2:bd:4b:ad:19:28:fa:2d:00:b3:ae:11:43:2b:0b:
66:c3:6e:af:63:58:74:81:3e:71:fb:a8:86:7a:41:
64:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A9:5D:53:DD:5F:4C:43:DF:DA:19:04:BC:45:15:73:22:41:99:21
X509v3 Authority Key Identifier:
keyid:4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:96:4d:f3:43:84:6c:1d:f1:8c:e5:20:44:95:89:3d:05:4c:
01:05:e5:35:b5:f4:e8:45:e5:c3:94:07:fe:d3:d2:c3:2c:40:
33:3b:a8:9b:e3:b5:12:7c:2b:69:9b:38:51:cd:d8:b0:c9:8a:
4a:3a:ad:6d:81:4c:f7:b2:dc:2b:4a:30:11:d2:e2:93:aa:9b:
9c:7c:26:fb:fd:f5:42:f0:f8:e6:0f:88:f5:b8:b7:3f:9a:88:
d1:28:87:43:cd:8a:5b:70:94:59:e2:32:8d:aa:96:5a:3e:c1:
05:c5:e5:21:7d:57:60:37:98:aa:03:be:3a:c1:ec:cf:aa:60:
b6:d5:86:97:16:ca:82:30:02:3c:a0:a0:a5:4b:ff:16:cd:e5:
4e:6a:4b:10:25:4d:4c:fb:cf:24:44:35:0a:0a:66:24:40:fe:
b6:8c:44:6d:f8:14:0c:4c:e1:70:74:61:6e:19:ef:88:c3:f3:
c0:d5:ef:ac:2a:41:87:d1:e3:8b:18:c3:b4:32:dc:bf:bf:4b:
84:67:46:5a:c1:df:de:88:c0:9d:06:d4:3e:60:5a:7d:55:db:
ac:7b:30:78:fe:f9:cb:b5:5c:5f:91:72:b9:53:46:ef:1d:f1:
66:75:cf:6c:36:08:08:8a:d6:43:67:c0:36:ec:ec:58:eb:f2:
60:d7:f7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:54 2025 by rpki-client