Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
File: S7vBBpd1qASAa1C67X7OhIq96Kc.mft (raw, json)
Hash identifier: 9tQDmHWaUTDIK6+x3eeqYXfvaEDst/km+6jQFpTQ5Xo=
Subject key identifier: D9:87:D0:7F:0A:8B:08:09:D5:84:00:2E:D4:AD:AA:77:B9:EB:2B:61
Authority key identifier: 4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7
Certificate issuer: /CN=4bbbc1069775a804806b50baed7ece848abde8a7
Certificate serial: 019882B08EDD9BDFE58109F6686614299668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
Manifest number: 0EF5
Signing time: Thu 07 Aug 2025 04:01:05 +0000
Manifest this update: Thu 07 Aug 2025 04:01:05 +0000
Manifest next update: Fri 08 Aug 2025 04:01:05 +0000
Files and hashes: 1: S7vBBpd1qASAa1C67X7OhIq96Kc.crl (hash: Rdzg4VFDJoqaquUPqMFzs+v3AbbYf3pHb4wmu4nFaZA=)
2: kOwiiAs2eR9pLFxLIBL1AOIYN3E.roa (hash: 3SQNAvfGJwEZLUa1WsSC2ImeHyAv94EKwUzIAUYUAnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:b0:8e:dd:9b:df:e5:81:09:f6:68:66:14:29:96:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbbc1069775a804806b50baed7ece848abde8a7
Validity
Not Before: Aug 7 04:01:05 2025 GMT
Not After : Aug 8 04:01:05 2025 GMT
Subject: CN=d987d07f0a8b0809d584002ed4adaa77b9eb2b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:99:39:b0:b2:01:f3:96:10:f5:e1:0c:5d:04:
6d:a2:91:5e:85:5b:a6:51:ac:bf:bc:a8:4f:de:05:
2c:7e:c3:0e:34:63:b9:ca:e6:2a:1c:e8:52:51:01:
ea:bb:62:af:d0:b4:05:89:27:f6:75:29:c3:6b:5d:
0c:fa:2f:07:1c:82:e0:67:e6:d5:a1:37:ff:5c:92:
60:33:2b:33:4b:ba:af:fe:54:eb:c5:8d:2d:59:3f:
33:cd:05:75:ad:c7:e5:c7:ed:48:4b:ff:d3:93:1a:
1b:f7:50:aa:b5:50:12:97:7f:80:11:04:fb:89:ab:
1b:47:ff:b4:05:79:b9:49:48:50:4a:fa:b2:bd:f7:
29:e1:60:ee:c9:d4:81:5d:17:1f:ce:fd:da:63:5c:
98:ae:ff:e5:82:91:b5:6e:7f:ee:98:91:70:86:50:
d4:f3:be:df:16:45:e3:9d:a3:93:f4:db:5a:2b:67:
15:09:f2:bd:a3:79:fa:59:5c:42:20:8e:d8:24:80:
f9:97:9f:a8:c4:6d:9d:c3:32:2e:ad:1a:77:c1:5b:
90:09:1a:dc:8a:b8:95:86:57:11:d8:9a:b6:af:a2:
04:5b:9f:da:bf:b4:26:bd:6d:90:dd:81:f7:c4:9a:
68:cb:e2:77:32:50:a8:5a:07:cf:10:b0:a9:5b:13:
94:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:87:D0:7F:0A:8B:08:09:D5:84:00:2E:D4:AD:AA:77:B9:EB:2B:61
X509v3 Authority Key Identifier:
keyid:4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:af:cc:77:89:8d:9a:70:24:c2:93:11:5f:3d:f7:0a:01:52:
77:63:5b:7e:8b:ac:9e:4a:df:4e:f6:3c:c2:c8:02:ca:42:74:
16:a4:2c:e1:60:41:ca:ee:e6:00:51:d8:d7:54:48:12:32:9c:
62:27:99:e0:43:cb:98:ab:5d:19:b8:d7:5c:29:10:e2:42:2d:
84:0e:ac:31:dc:eb:68:0a:dd:29:ed:4e:d1:4a:6d:7d:41:7f:
f0:62:39:db:f1:ba:0e:bc:98:6e:10:49:04:9d:77:9a:e0:0a:
b6:53:18:56:28:41:49:93:25:9d:c8:5f:71:8d:95:7a:36:74:
43:ac:15:9c:72:03:27:ad:f8:20:67:f4:cd:9f:85:a9:ce:7e:
73:a5:19:49:a8:ad:fc:5f:9d:67:61:d1:72:0e:b0:70:bc:1e:
42:97:d7:6d:5a:e3:d5:28:65:d6:a1:62:66:31:24:dd:59:d4:
2e:bd:e9:61:d2:82:8a:ad:7b:d5:64:86:e4:36:8a:44:f5:39:
03:08:9c:68:a0:3f:f4:db:fe:98:fb:c7:b0:34:68:44:84:6c:
7e:91:2d:62:3b:ad:13:5e:67:13:57:d7:10:ad:a4:0e:4b:5c:
e5:e5:8b:15:94:7c:d5:c8:68:e2:e2:ae:8d:31:35:1d:59:55:
ea:68:31:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:11:35 2025 by rpki-client