Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
File: RYg0xSq-MEJ_CiKqRv09CAntRYU.mft (raw, json)
Hash identifier: tKaQ4stHq9BqZ6vPRjlLIPmMF0xTeqCt/rpwfQVRIgM=
Subject key identifier: D7:70:B1:38:6A:3C:0F:94:A0:9C:BA:A4:CF:A0:6F:30:B2:14:EC:8F
Authority key identifier: 45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
Certificate issuer: /CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Certificate serial: 019768F29F3D2F8FC4CF528F4B82D62CCC13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
Manifest number: 1592
Signing time: Fri 13 Jun 2025 11:00:20 +0000
Manifest this update: Fri 13 Jun 2025 11:00:20 +0000
Manifest next update: Sat 14 Jun 2025 11:00:20 +0000
Files and hashes: 1: 9EAsH9WiZD4VxilaYIDfYTgwfr8.roa (hash: S6lIJn8kLzJ0SR0mYeMv6RwOAdGOeRdde/Wo386MMZ0=)
2: RYg0xSq-MEJ_CiKqRv09CAntRYU.crl (hash: PxW+dULVy504sZ1nam7fFBFSFO3V+gTd97fVpjBAV6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:9f:3d:2f:8f:c4:cf:52:8f:4b:82:d6:2c:cc:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Validity
Not Before: Jun 13 11:00:20 2025 GMT
Not After : Jun 14 11:00:20 2025 GMT
Subject: CN=d770b1386a3c0f94a09cbaa4cfa06f30b214ec8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fc:61:20:9c:08:22:e7:a3:7f:db:36:04:a5:
6e:0b:c6:87:a2:1d:91:65:c0:ff:b9:52:11:e0:e7:
ae:ba:e0:77:5a:c2:7f:b6:ff:88:cb:0e:08:53:0c:
cb:6e:da:01:4b:2d:c7:df:02:a1:a0:9b:48:08:18:
15:3f:45:da:2a:84:61:93:80:b1:7d:f3:a4:1b:39:
2b:06:16:a7:71:30:d8:07:14:7f:c7:9c:35:d7:e3:
b6:14:61:0b:37:33:7c:4d:74:ee:71:0e:2d:85:f0:
45:27:bb:aa:d1:07:13:4a:99:fa:b9:c8:06:b0:35:
b0:42:c1:0b:73:72:d6:33:7f:31:a1:8e:7f:0c:5d:
97:57:bc:59:f5:d5:c3:bf:15:ff:45:68:c3:ff:2b:
2b:51:b1:31:c3:a2:bf:a3:39:d9:87:9b:b3:34:99:
68:9e:43:e7:27:61:12:64:96:34:24:ba:88:51:58:
39:98:56:6d:26:ab:bf:dd:2d:80:cb:35:68:fb:8f:
ea:e5:73:c1:38:76:cc:a3:bd:28:30:a8:b6:c6:8a:
f7:74:90:b9:47:6c:e4:3a:fe:f2:b2:f6:09:08:f5:
ea:ec:d4:e6:03:4b:5f:f7:f3:88:fb:ac:f2:42:4e:
14:43:20:32:fc:4e:27:64:ef:d0:be:34:4f:9d:c7:
90:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:70:B1:38:6A:3C:0F:94:A0:9C:BA:A4:CF:A0:6F:30:B2:14:EC:8F
X509v3 Authority Key Identifier:
keyid:45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:87:6c:4c:04:32:ba:6f:dd:44:52:20:4d:7e:b7:c2:0d:b9:
19:84:fb:9f:7a:38:6c:96:37:41:0b:01:36:48:2c:06:84:16:
dd:af:c6:4c:b9:46:42:f8:d2:1e:4c:94:dd:70:bf:9a:02:79:
3d:54:3d:4f:79:08:de:41:4f:a8:8f:d3:4d:68:9b:65:a6:a2:
28:5d:9b:fd:e9:1c:6b:28:8d:00:72:be:6f:00:74:d5:36:22:
d5:98:3c:83:e8:4e:4c:5d:81:f3:8a:ae:2d:f7:df:04:a0:5e:
45:d2:96:ff:8d:e1:15:ce:d8:be:15:42:c9:8b:e0:5f:ad:05:
c8:99:41:e8:29:8f:0d:d6:66:56:db:4c:96:a6:45:1e:e4:75:
01:67:cd:b9:29:3e:b0:31:1b:e5:34:f8:a4:f5:e2:1f:03:c9:
56:f6:05:12:a3:71:81:99:bf:55:ac:04:c6:c8:9f:5e:de:46:
3d:e2:72:50:06:ba:5a:10:d7:f2:0f:a4:9d:10:74:5e:61:55:
62:43:30:2f:42:91:da:30:f9:36:1d:76:9e:cd:9e:9e:78:8b:
93:83:e7:e1:f1:ad:07:c5:8c:ab:96:52:3c:0e:74:61:92:74:
46:9f:b8:46:dd:18:8d:60:2c:a0:5e:33:36:56:20:d4:70:0b:
e1:dd:0f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:12 2025 by rpki-client