Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
File: RS59h5IhKd-QxIcNoqdzhARySFg.mft (raw, json)
Hash identifier: MCc61KJDzDyzIyvZu3wM1iYPj9r2wBp0Z2tgc4OMgSY=
Subject key identifier: 8A:28:04:9A:B2:D0:90:9C:CF:10:C6:5C:12:0D:E4:62:27:E6:11:E9
Authority key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
Certificate issuer: /CN=452e7d87922129df90c4870da2a7738404724858
Certificate serial: 0198A04CC9EBC8E25E793123C26862BC9707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
Manifest number: 0483
Signing time: Tue 12 Aug 2025 22:00:43 +0000
Manifest this update: Tue 12 Aug 2025 22:00:43 +0000
Manifest next update: Wed 13 Aug 2025 22:00:43 +0000
Files and hashes: 1: 4ZmOjsOwgULv_B_QMvBBmXG9f0w.roa (hash: x7k9BFugEad58s4inzjh5oIEa4SPB8OHd1xRzbFg5n8=)
2: BuhLOhQsyBTsy289mKisTf0E47Q.roa (hash: aKuhf01k9TU7vUcFwfvkZL/qxoA5uBGJCmVJQlfg6tY=)
3: RS59h5IhKd-QxIcNoqdzhARySFg.crl (hash: CgovACPOiCHfD9EN5e50g9wp5XT2GUMD7+rP2IVW5XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4c:c9:eb:c8:e2:5e:79:31:23:c2:68:62:bc:97:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452e7d87922129df90c4870da2a7738404724858
Validity
Not Before: Aug 12 22:00:43 2025 GMT
Not After : Aug 13 22:00:43 2025 GMT
Subject: CN=8a28049ab2d0909ccf10c65c120de46227e611e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6d:d4:89:21:38:cf:e6:22:c6:de:78:a6:6f:
6c:04:d4:13:b6:30:89:eb:4a:a2:c7:8c:a6:ab:24:
32:e4:a3:06:4c:38:83:50:90:c2:33:e8:c7:a5:1f:
6a:fb:b9:15:be:b3:17:36:ac:d0:cf:9f:fb:50:6a:
1d:5b:7b:db:ff:fd:ac:14:10:c3:fc:c8:94:5f:72:
6e:59:2a:86:ed:57:ac:c6:bd:b4:c0:2a:bc:36:60:
9c:a0:c5:36:b0:6b:dc:8c:5f:97:0e:be:05:a7:5e:
f9:11:aa:47:95:26:8d:87:c4:93:8e:1b:6b:81:fe:
4d:47:b1:ca:2c:32:b8:84:ef:bf:7a:46:d2:5e:c6:
6f:4e:e3:f9:4d:6e:6d:4e:13:1a:3f:2c:47:81:f2:
bd:a3:e0:72:b1:a8:97:f5:4b:19:5f:d2:dc:a1:44:
8d:c2:96:a8:48:44:d9:88:e5:44:fe:6e:e5:ec:63:
ef:64:f0:9c:03:77:d6:ff:ec:a1:16:fa:67:c1:e1:
8c:ad:cf:2a:98:cb:88:7a:71:4c:4a:dc:69:69:23:
92:0f:af:63:97:61:e1:28:97:cc:ef:87:b6:1a:8b:
22:92:84:f9:4e:d0:c7:53:b0:a4:5d:19:ee:02:98:
19:36:a2:05:a1:b2:61:89:6a:ad:e4:9f:54:1d:6d:
58:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:28:04:9A:B2:D0:90:9C:CF:10:C6:5C:12:0D:E4:62:27:E6:11:E9
X509v3 Authority Key Identifier:
keyid:45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d6:9b:7a:28:72:57:37:4f:d1:3f:36:b4:53:90:42:ce:59:
9a:12:a8:4d:30:2f:73:a0:79:b9:81:00:6c:66:e3:e3:41:d2:
04:c0:72:5e:d3:7d:55:17:89:fb:71:2b:b0:54:9d:89:9f:e7:
ae:be:2f:c7:26:bf:c2:13:50:27:1a:cc:10:7b:e1:4a:18:52:
1f:ac:ea:b1:51:2b:06:94:d0:7b:c6:8d:7a:98:61:65:8b:6d:
f4:af:ea:ec:01:20:42:82:d9:b8:bb:67:7e:bc:6c:76:97:cf:
99:8e:39:c5:c8:d7:e9:41:a5:1f:d8:64:06:b7:57:7d:f6:d1:
6e:1e:86:b6:3b:14:0f:35:78:86:91:ae:25:55:b9:b3:6a:1f:
0e:9f:d2:ca:d9:2c:31:c2:8c:4b:73:43:81:ee:67:07:81:d8:
f4:d8:48:9a:dd:3c:60:28:eb:53:99:ca:0b:b6:4b:89:68:79:
9c:36:76:26:e4:37:16:34:45:bd:c3:59:dc:5f:66:00:50:1e:
7f:d1:c7:72:20:5e:31:3a:7c:d6:6e:88:f7:5e:4e:f6:23:4e:
4e:f8:0c:c3:8d:ae:91:84:7b:5d:a5:5a:73:b3:3f:2b:d7:87:
06:ee:c0:52:c8:82:0e:57:dc:03:cb:d0:2e:c6:75:69:c6:08:
ce:e6:f5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:54:11 2025 by rpki-client