Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
File: mSgtd8Zi5ou4foMzi3ata-rZMYU.mft (raw, json)
Hash identifier: NkgJGnZmLEss7ClGDXqpPf3EaNCymcALmhHFE5RvjVc=
Subject key identifier: 39:8F:49:0E:B1:5F:44:A0:1B:49:C7:82:FC:DC:92:81:6C:A3:E4:9E
Authority key identifier: 99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
Certificate issuer: /CN=99282d77c662e68bb87e83338b76ad6bead93185
Certificate serial: 019774C041CE57CD080A61B0871CB479E5D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
Manifest number: 1594
Signing time: Sun 15 Jun 2025 18:00:46 +0000
Manifest this update: Sun 15 Jun 2025 18:00:46 +0000
Manifest next update: Mon 16 Jun 2025 18:00:46 +0000
Files and hashes: 1: TAIaujQ4VKKsXuUakY0dKEcAcGs.roa (hash: d9TADe0Qn4Oy08MasSNafdYWP3qjs55v/m6HHzPTGmc=)
2: mSgtd8Zi5ou4foMzi3ata-rZMYU.crl (hash: 5Mj2U4LNeqHMm/v7bE19eIRbqEJGJ6B/0NMGRYde/Wk=)
3: osc7ldM1EyAIq-Pc65jfOVsDsEo.roa (hash: jLW59X/F/Mi9You64kz4gdG8TC0tIrDCV1yujScQLmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:c0:41:ce:57:cd:08:0a:61:b0:87:1c:b4:79:e5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99282d77c662e68bb87e83338b76ad6bead93185
Validity
Not Before: Jun 15 18:00:46 2025 GMT
Not After : Jun 16 18:00:46 2025 GMT
Subject: CN=398f490eb15f44a01b49c782fcdc92816ca3e49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:02:1d:c4:dc:e2:3f:fc:94:e9:73:dc:2f:2d:
01:f5:d5:c6:32:cd:aa:34:1a:9b:a9:37:9a:f3:ab:
8e:36:38:48:a9:8e:85:fd:f2:6e:57:f1:1a:03:41:
90:d2:d8:d8:c3:9a:67:3a:af:4d:e0:67:06:f4:00:
90:5b:42:3a:3a:13:21:bd:f4:6f:82:88:6e:46:aa:
f8:7f:0d:65:11:74:90:3d:56:0d:c3:52:f9:1b:f3:
eb:f3:52:6e:7f:2c:18:c2:c2:34:34:ec:8b:43:2a:
7c:52:00:e8:be:d9:1b:34:ae:69:4b:b8:be:c1:57:
3d:75:8b:bc:94:5c:60:b5:ad:80:7e:9e:7a:68:c9:
5d:1b:b8:75:31:bb:6d:03:5b:a2:1e:b7:9a:4a:ce:
6f:7d:21:28:17:f3:29:69:55:f9:ef:39:41:5d:eb:
12:36:9d:e4:5d:33:a5:61:9b:8a:d1:38:35:5a:bf:
9b:e2:63:4a:ed:e2:5c:59:f5:99:2b:13:c0:cf:ef:
2d:bb:7c:0d:7d:8e:7a:11:04:e7:d3:26:d4:bf:2f:
0b:93:7b:5f:66:8e:00:f8:59:4f:ef:23:89:e8:5f:
5b:dc:a4:32:b9:5f:6b:fc:ad:49:ea:06:e3:7f:d9:
6c:7a:b7:64:82:2d:e5:c7:3d:fa:15:58:32:cd:b6:
f0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8F:49:0E:B1:5F:44:A0:1B:49:C7:82:FC:DC:92:81:6C:A3:E4:9E
X509v3 Authority Key Identifier:
keyid:99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d8:61:9d:fe:59:80:9c:78:1c:b6:fe:55:2e:29:3b:db:f7:
47:c9:de:a3:1f:14:0f:bf:fa:d8:13:1c:94:b0:f7:e8:19:45:
b5:87:9e:e3:b5:de:ba:c6:87:64:d4:dd:0f:7a:9a:32:0f:41:
5c:08:39:24:c1:b0:ac:52:98:78:ea:17:a3:48:2d:fb:80:8f:
f0:97:59:b8:ce:11:ec:e3:02:cb:05:6d:7a:8f:70:20:d6:af:
11:66:ea:aa:9e:86:93:ef:57:83:a9:6e:5e:1a:2a:b8:70:d7:
06:83:37:36:56:2d:a1:97:4c:7c:4d:be:2b:fa:7c:23:b5:88:
49:d3:f9:3e:f1:7d:e8:27:68:c9:32:3f:81:0d:4a:8f:6a:79:
63:41:79:3c:15:d6:8d:0f:97:be:5a:0c:c9:15:66:f3:19:ea:
18:44:6b:5e:17:63:04:92:57:81:e9:c8:76:22:84:45:51:93:
c7:75:88:a4:98:f6:a3:b1:94:c7:68:e9:99:66:5d:a6:28:26:
0f:f5:14:48:15:c0:51:4c:84:65:10:02:af:fd:18:3b:a6:b9:
21:d8:5f:c6:fd:5c:05:f7:79:eb:82:03:0f:76:bf:95:ac:8e:
f1:11:04:a2:1c:30:f3:5d:b3:74:08:80:44:04:73:01:b2:82:
e6:20:18:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:27:13 2025 by rpki-client