Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft
File: RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft (raw, json)
Hash identifier: s2zErnBBY35+G/u/jdVQoO3aJcV7BYaX+gP+cptfYIY=
Subject key identifier: DC:35:50:4D:75:08:F2:92:D5:9E:EB:1C:BE:E7:B4:C7:10:23:55:E0
Authority key identifier: 44:F6:10:F8:72:CF:31:B7:C3:22:4C:D2:C1:66:9C:99:68:35:0B:7A
Certificate issuer: /CN=44f610f872cf31b7c3224cd2c1669c9968350b7a
Certificate serial: 0197794232A90F3F09FBE5DF3B72E4C704E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPYQ-HLPMbfDIkzSwWacmWg1C3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft
Manifest number: 1594
Signing time: Mon 16 Jun 2025 15:01:10 +0000
Manifest this update: Mon 16 Jun 2025 15:01:10 +0000
Manifest next update: Tue 17 Jun 2025 15:01:10 +0000
Files and hashes: 1: RPYQ-HLPMbfDIkzSwWacmWg1C3o.crl (hash: hNlio9/rCE2RdvuxuSB6vHrj1uobwfSWITr5mE/mVHw=)
2: ZmJk3i0UqR_uJ_XLaSjGUe2aH00.roa (hash: BCwdh7j1ZUyJ+mVEfLtfrzwX+n9rg9YN807VJjPHsUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPYQ-HLPMbfDIkzSwWacmWg1C3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:42:32:a9:0f:3f:09:fb:e5:df:3b:72:e4:c7:04:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f610f872cf31b7c3224cd2c1669c9968350b7a
Validity
Not Before: Jun 16 15:01:10 2025 GMT
Not After : Jun 17 15:01:10 2025 GMT
Subject: CN=dc35504d7508f292d59eeb1cbee7b4c7102355e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:37:06:f1:a2:6e:bb:05:69:8e:09:73:c6:d4:
e0:6c:04:26:e3:35:23:a4:eb:9a:52:b2:1e:6e:89:
97:f1:58:06:7f:96:8c:2f:cc:8a:da:b0:80:ad:8a:
8e:b8:9f:77:fe:73:ca:4f:2b:39:30:b3:4f:83:1c:
66:f3:6d:04:54:ea:e5:6b:85:c0:1a:84:7a:59:1e:
bd:6d:95:50:28:bd:ea:43:db:6c:ad:fe:9b:ac:5f:
ba:4e:dc:96:42:29:98:a6:ef:49:15:40:08:1c:80:
10:48:69:f0:be:45:27:8c:a7:d9:79:74:89:31:dd:
c5:92:29:fa:7b:63:a1:d6:33:2f:e1:ae:a1:da:ee:
81:d4:51:83:f3:4d:a8:48:25:ae:1c:f2:dd:1a:35:
00:9f:6e:c7:7b:85:b0:a3:6d:7d:47:6c:2e:bc:75:
4c:a8:55:b5:0e:5a:1e:b5:a9:6b:8b:fe:9a:7e:22:
24:9a:91:37:5d:57:8a:8a:02:4d:25:ea:ae:7b:68:
55:f0:f4:b7:91:3e:6e:d8:66:40:ac:5d:44:f2:8f:
9d:d2:1c:30:81:1f:61:5b:ca:99:dc:ff:4b:6e:eb:
fd:a7:4c:24:73:8d:b8:c8:aa:51:46:50:59:1e:86:
0a:e4:e7:af:45:8d:15:a1:0d:8b:de:37:51:c8:20:
b9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:35:50:4D:75:08:F2:92:D5:9E:EB:1C:BE:E7:B4:C7:10:23:55:E0
X509v3 Authority Key Identifier:
keyid:44:F6:10:F8:72:CF:31:B7:C3:22:4C:D2:C1:66:9C:99:68:35:0B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPYQ-HLPMbfDIkzSwWacmWg1C3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:47:d4:80:c0:5b:07:7b:ce:20:3c:9f:e3:b5:22:ae:93:e1:
37:ef:40:62:fd:10:e6:88:29:b9:1a:9e:43:ec:75:bc:fc:21:
54:15:d6:93:10:a1:83:da:b1:0f:96:e5:60:c4:84:6d:83:97:
7a:dc:2c:ae:9c:87:ba:34:08:c3:01:1b:2f:63:37:4a:66:b6:
93:89:ca:55:11:76:3d:f2:f1:d2:c0:a0:93:31:a1:10:f3:ce:
6b:31:bc:5e:2c:28:82:e9:90:a2:20:09:b6:ea:87:fe:57:a1:
65:06:89:91:78:4e:e2:36:83:3f:14:96:77:ec:d2:d2:2a:17:
12:4c:8e:ce:a8:83:1e:18:32:fb:e8:c2:d1:70:b3:8c:aa:34:
c8:d3:45:18:9e:57:44:ca:13:f4:a7:68:45:64:8e:a2:cf:c0:
62:9a:d6:51:6e:4f:c3:01:39:68:c4:87:95:99:b0:05:39:8b:
a1:00:b1:ba:df:0c:fe:db:40:53:33:13:ea:75:1c:2a:d3:4c:
58:ed:b0:ab:16:06:d4:31:80:34:75:6b:cf:dd:72:77:6b:29:
bd:93:30:b9:82:4c:56:dc:97:e6:c3:17:b6:62:79:3d:53:dc:
fd:55:58:05:37:2f:e1:74:aa:25:91:aa:af:30:53:14:13:97:
9e:de:fa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:24:59 2025 by rpki-client