Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
File: rUS-GO4-DSdHZwVV6GsACWXoE5s.mft (raw, json)
Hash identifier: PmSvG0flGkJai60IF0jnS2BsgH14Hf3y2f895LEhJUE=
Subject key identifier: 79:82:4F:25:DE:D1:AB:78:F5:4D:5A:90:3C:CC:DA:E6:DA:80:D3:8E
Authority key identifier: AD:44:BE:18:EE:3E:0D:27:47:67:05:55:E8:6B:00:09:65:E8:13:9B
Certificate issuer: /CN=ad44be18ee3e0d2747670555e86b000965e8139b
Certificate serial: 01976960B4C1F96C45C7F8855F3605FEF3CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 13:00:34 +0000
Manifest this update: Fri 13 Jun 2025 13:00:34 +0000
Manifest next update: Sat 14 Jun 2025 13:00:34 +0000
Files and hashes: 1: kX62bL3xBVpkyK0FphmC5iQUK74.roa (hash: GEBZd8qkO5malJhFWg729yyTB3o+issIVlA3FLkcy9o=)
2: rUS-GO4-DSdHZwVV6GsACWXoE5s.crl (hash: vmiSNQ2IGde8MgwxRS9EqMQI7hM3FLgmfq0lXFkX81k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:b4:c1:f9:6c:45:c7:f8:85:5f:36:05:fe:f3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad44be18ee3e0d2747670555e86b000965e8139b
Validity
Not Before: Jun 13 13:00:34 2025 GMT
Not After : Jun 14 13:00:34 2025 GMT
Subject: CN=79824f25ded1ab78f54d5a903cccdae6da80d38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3a:8a:db:94:fc:e2:45:a4:63:6e:34:35:cb:
e0:dc:d8:56:46:d0:fb:ea:bd:f1:e8:f6:78:86:b9:
27:62:09:aa:43:9c:a2:25:de:bb:4b:45:77:df:94:
a4:ce:6a:8d:99:ce:83:d3:c3:aa:fe:97:ca:ba:02:
91:dc:b5:06:6c:f1:f3:e9:9b:43:4a:48:a1:1f:b0:
3f:58:13:aa:a5:ed:4e:32:e5:82:17:23:59:0f:53:
2f:6e:42:1a:ce:ae:d0:f6:28:5a:5b:de:b6:6e:27:
25:16:fb:2c:15:07:1f:4a:b2:5d:bc:18:20:57:84:
98:e6:2e:66:de:d3:bb:ff:2d:ee:9f:83:47:c1:40:
8a:f2:00:fb:bb:8b:83:14:2f:68:6e:41:05:72:15:
38:24:da:15:0a:06:d6:bc:7c:4f:1c:01:25:ce:45:
77:0f:a6:dc:77:93:6b:d7:dc:bf:6c:ec:05:c8:8e:
91:fb:81:f0:ac:4c:2d:0f:4b:7d:97:1a:30:66:a7:
80:c2:3e:16:0b:c3:52:eb:26:86:b5:3d:16:2a:1b:
86:2d:fd:96:52:f0:fc:1c:93:2e:98:f4:3a:1b:7f:
c2:f7:89:36:76:ca:26:7e:75:64:df:63:15:33:7b:
85:f7:aa:50:63:99:34:58:eb:67:4b:72:a0:be:47:
37:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:82:4F:25:DE:D1:AB:78:F5:4D:5A:90:3C:CC:DA:E6:DA:80:D3:8E
X509v3 Authority Key Identifier:
keyid:AD:44:BE:18:EE:3E:0D:27:47:67:05:55:E8:6B:00:09:65:E8:13:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:19:3b:e4:e7:b3:7e:85:65:48:cb:62:6c:a8:dc:f1:8b:04:
72:bc:05:11:e4:48:e4:5b:51:89:9e:b1:26:dd:cd:cc:52:6d:
48:7a:f0:01:c8:f7:74:7c:ca:fb:c5:23:1d:3c:f6:8b:78:1e:
cb:7b:6c:6c:c9:3c:0c:12:c5:6f:3f:16:f4:fb:28:8e:68:e7:
b6:2c:6a:86:0e:d6:5d:37:bb:6e:2a:99:4f:72:44:ad:27:a2:
cb:b9:87:bd:79:db:7b:e6:28:99:4f:b8:6a:43:1b:62:d6:37:
8d:05:d5:26:e1:fa:7b:1d:61:ec:44:81:a5:b6:8e:71:59:de:
5c:a5:27:07:85:c5:7d:22:66:10:a4:e5:48:bc:4e:da:dc:c6:
9b:86:ef:4d:2c:ce:b6:44:87:d1:9c:d3:13:14:d9:81:4b:ad:
5b:b1:76:7d:8d:40:59:d8:eb:5d:97:1f:f5:d9:a1:e4:7a:3e:
f2:10:57:03:c2:f0:d2:64:c8:8e:49:0e:86:61:6e:3b:8c:bc:
5d:29:b7:95:ee:99:66:51:f2:f4:7c:b1:71:cd:23:69:3f:0f:
02:d9:02:df:54:d8:9d:54:88:d7:cf:65:78:de:f4:8a:34:f6:
1c:2d:56:fb:c3:3d:11:b7:c9:73:99:b9:3f:ab:07:bf:57:e9:
d6:b2:91:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:16 2025 by rpki-client