Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
File: S1ejnbXHqja-gs11HlDLkCMDPco.mft (raw, json)
Hash identifier: yCw1mnYGR1OiTtAybL7I/3s2k5/xz9GDrbrRsoK7WBw=
Subject key identifier: 69:D7:E1:C3:8A:9D:BC:A8:FF:2F:21:A6:86:11:AD:E0:4E:22:78:3B
Authority key identifier: 4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
Certificate issuer: /CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Certificate serial: 019873E35D5722BEF02E59AC4106B5B0C587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
Manifest number: 01DC
Signing time: Mon 04 Aug 2025 07:02:17 +0000
Manifest this update: Mon 04 Aug 2025 07:02:17 +0000
Manifest next update: Tue 05 Aug 2025 07:02:17 +0000
Files and hashes: 1: S1ejnbXHqja-gs11HlDLkCMDPco.crl (hash: BDGNbT5Qp6kbbk2qjb39vuB4y56YR7Mghsxi0TRF16o=)
2: zO8Iwb0BsWTcNVLMLIiP_wo8DJM.roa (hash: OPJwqPTjOpu2TkWSPAK04GvaPgxXe8e980q4NWTbl0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:5d:57:22:be:f0:2e:59:ac:41:06:b5:b0:c5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Validity
Not Before: Aug 4 07:02:17 2025 GMT
Not After : Aug 5 07:02:17 2025 GMT
Subject: CN=69d7e1c38a9dbca8ff2f21a68611ade04e22783b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ea:8b:e7:4e:5f:99:8c:28:a9:39:ab:8e:03:
57:ad:fa:09:8c:03:de:ab:87:83:af:d2:55:94:83:
b7:a7:7a:c1:b3:74:8f:b5:67:56:71:ef:a2:64:b4:
4d:27:d8:c8:52:a9:a5:24:e1:76:ff:28:a0:6b:e8:
0d:73:f2:cb:fc:90:a6:96:c4:a8:ef:2f:47:2f:b0:
c0:e8:68:44:71:b6:f5:69:4f:3c:01:91:68:9f:da:
34:7e:a6:db:67:ed:2b:fe:32:f7:64:a1:85:f7:2a:
ac:44:2d:0b:6e:68:6b:43:27:d7:a0:6b:76:2a:1a:
01:5d:4a:2d:58:6c:29:3e:1b:fa:a2:2c:bf:2a:07:
40:20:56:9b:a1:b7:e2:b9:9a:58:b8:ec:90:b9:47:
66:f9:46:ad:ee:bb:73:c8:36:ef:62:e1:1d:15:81:
04:7e:b2:8a:d7:d1:e1:90:97:6b:93:8c:63:20:b1:
9d:5e:27:d2:46:aa:57:f2:cb:03:21:92:59:c8:f7:
fc:d5:a7:10:ae:d5:fe:a1:0c:2c:36:c1:85:fb:3c:
be:d3:f8:e0:7d:2a:22:03:6d:88:fa:5e:d1:66:d1:
05:16:63:b4:25:83:cc:6c:85:72:bb:9b:89:1a:21:
87:5f:d4:f0:f2:63:57:54:e5:7b:bc:99:23:02:50:
31:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D7:E1:C3:8A:9D:BC:A8:FF:2F:21:A6:86:11:AD:E0:4E:22:78:3B
X509v3 Authority Key Identifier:
keyid:4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:bc:7f:9a:47:41:1c:48:b7:b0:35:1b:85:f3:18:92:6f:37:
04:9d:1a:41:69:eb:69:ab:91:94:55:50:d6:b1:18:90:be:6b:
d6:81:e2:84:ce:cd:83:6f:bf:76:c6:da:51:83:cd:75:08:1f:
57:dc:80:ee:07:67:09:cd:b6:10:31:b8:4f:a6:8a:96:e7:55:
01:0d:aa:d0:ce:ab:d0:62:2e:ba:0c:ad:37:43:a1:a3:25:a8:
85:71:87:74:44:78:72:26:93:d3:3a:66:aa:a8:40:96:ce:59:
5d:77:09:0a:d2:80:28:17:1f:8b:ca:70:7e:5a:da:ab:a9:dc:
33:5a:35:c7:dd:ae:a1:dd:cf:81:1e:50:b7:8d:c0:c8:8f:01:
b3:16:e5:65:63:29:a8:59:0f:76:04:f4:9c:d4:54:a4:f7:5e:
eb:5e:6b:29:d2:e1:13:b2:04:f9:45:89:b5:bf:ba:1b:36:14:
56:4c:c3:a1:3e:11:d9:76:c3:89:70:9d:2e:68:60:a4:eb:7d:
17:81:dd:ac:9c:17:44:e8:03:a6:ae:71:1e:d9:3a:ab:a4:f8:
de:9e:4a:de:f5:d5:5e:52:b2:88:43:44:c2:50:53:0f:0c:e8:
ff:02:aa:12:1b:39:3f:d9:c7:6c:68:eb:5d:c9:fd:16:da:6b:
81:a7:5e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:39 2025 by rpki-client