Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
File: rUS-GO4-DSdHZwVV6GsACWXoE5s.mft (raw, json)
Hash identifier: ClpphCp3/WW5N/jipXb4idYLb5x4ozNfQDtwL+rAajs=
Subject key identifier: 7A:57:61:93:11:B1:E5:CA:E0:50:A0:A4:96:9D:57:F3:95:6A:23:4D
Authority key identifier: AD:44:BE:18:EE:3E:0D:27:47:67:05:55:E8:6B:00:09:65:E8:13:9B
Certificate issuer: /CN=ad44be18ee3e0d2747670555e86b000965e8139b
Certificate serial: 01988166DA1E7BA5B4DAFFD369F3A8132D40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 22:00:57 +0000
Manifest this update: Wed 06 Aug 2025 22:00:57 +0000
Manifest next update: Thu 07 Aug 2025 22:00:57 +0000
Files and hashes: 1: kX62bL3xBVpkyK0FphmC5iQUK74.roa (hash: GEBZd8qkO5malJhFWg729yyTB3o+issIVlA3FLkcy9o=)
2: rUS-GO4-DSdHZwVV6GsACWXoE5s.crl (hash: m4UrTav4nCFZrkCZRG01pQXrsj/SlL2a+hQtJ3MQ1Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:da:1e:7b:a5:b4:da:ff:d3:69:f3:a8:13:2d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad44be18ee3e0d2747670555e86b000965e8139b
Validity
Not Before: Aug 6 22:00:57 2025 GMT
Not After : Aug 7 22:00:57 2025 GMT
Subject: CN=7a57619311b1e5cae050a0a4969d57f3956a234d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e9:62:17:33:f9:d9:6e:e4:dd:00:51:dd:16:
dd:df:53:88:eb:ba:6a:36:4c:c4:44:32:c7:df:cd:
f3:5d:0b:00:10:fb:9d:a7:2b:80:7e:ae:0e:f5:8a:
fa:75:cc:fe:1d:89:d5:4a:03:bb:dd:cc:22:f6:a2:
43:b1:13:27:51:7a:27:86:da:68:16:9b:2d:a0:2a:
c1:dd:05:9f:a9:44:d1:1a:57:e8:a9:23:fd:df:21:
94:b4:af:2e:2c:eb:5d:bd:02:7c:f3:87:40:81:df:
88:69:4d:01:80:43:b4:01:35:68:a9:04:35:9e:64:
77:5e:e7:67:a1:10:7d:3c:0b:1f:6e:34:74:c8:3f:
e9:64:95:be:b1:84:fe:61:d8:e9:4d:65:83:51:ad:
3b:cf:bf:42:e6:bf:61:a2:2a:72:b0:be:e1:21:45:
0e:f9:30:50:b6:5d:1e:32:5c:7a:ae:cb:f1:7d:eb:
c5:7f:33:20:a2:1b:61:8e:66:d8:42:da:1a:9c:6d:
dc:90:2c:0f:f6:44:fa:77:dd:60:fc:c2:17:05:ed:
76:e5:f2:d8:cb:1e:fa:98:15:3a:e0:98:fc:b1:ca:
5a:6f:12:78:00:f4:75:ac:65:46:9c:72:23:a0:95:
2b:07:4a:c2:0c:69:ab:54:58:4d:73:4f:cc:ea:da:
c5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:57:61:93:11:B1:E5:CA:E0:50:A0:A4:96:9D:57:F3:95:6A:23:4D
X509v3 Authority Key Identifier:
keyid:AD:44:BE:18:EE:3E:0D:27:47:67:05:55:E8:6B:00:09:65:E8:13:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a4:f8:a8:0b:33:ae:bf:14:b7:bb:b9:9a:2a:53:67:7f:71:
59:d2:08:be:bd:0a:d1:89:c9:5f:10:dc:16:7a:bd:2e:cf:16:
e9:bb:e4:75:85:96:36:f1:61:11:1b:b1:96:99:06:c5:19:69:
60:6d:da:a2:fb:f3:c3:97:94:10:31:76:c6:b6:1f:c1:07:e0:
f9:14:8f:02:a2:77:17:35:29:48:46:b9:91:09:36:ce:e4:25:
0e:bf:f6:07:d3:b6:73:ff:0b:b9:9f:3b:a7:df:14:e7:1d:b1:
b1:e5:33:a0:6d:da:9e:f1:7b:17:35:d3:85:b8:b7:0c:7e:05:
16:da:76:b9:12:8a:ec:6c:38:07:ad:13:4b:10:fb:d4:c0:fe:
46:ec:6b:23:4e:52:93:d2:7b:89:cb:38:4e:68:4b:5e:a5:46:
85:3b:79:58:15:e9:de:a0:67:11:53:d4:02:71:b2:d5:61:0a:
f7:bb:0d:2c:3c:a4:e6:51:03:e5:d4:c3:b4:bc:88:3b:bb:a3:
58:55:53:24:21:be:22:5b:3d:f6:fa:00:d4:c6:63:e2:4c:f0:
66:e3:8f:ca:f3:5d:c0:6f:5c:8e:41:cc:79:5b:da:e3:0f:f3:
de:74:7e:7f:65:be:f2:ef:ee:ca:84:86:6d:f5:b4:a8:48:a0:
e7:a6:75:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:16:16 2025 by rpki-client