Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
File: MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft (raw, json)
Hash identifier: P8VtDs51d0wF1CFYgAyPrJuaZFZpSxbxVe9Lu0iI/Ok=
Subject key identifier: 6B:B2:30:66:55:85:7E:96:F5:3F:AD:98:C3:1E:B2:49:C6:34:D6:DD
Authority key identifier: 33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB
Certificate issuer: /CN=332293d0399160788b31e438760dc3bd1ed882eb
Certificate serial: 019881682665010B285A0390B47EEDED4902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
Manifest number: 0472
Signing time: Wed 06 Aug 2025 22:02:23 +0000
Manifest this update: Wed 06 Aug 2025 22:02:23 +0000
Manifest next update: Thu 07 Aug 2025 22:02:23 +0000
Files and hashes: 1: MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl (hash: k6T7c8IAsery+g1RX5lJqVpOJA+x7TFxCLTdhB3xQB0=)
2: i6CWENtAdnXqPwuX227uTDykXkg.roa (hash: nuLqIrBizKW+oU2TGkl7L2LqgilWGWZ/QKZgoAyDfPY=)
3: scpx1tsDeDfxUzO1xx1MvIOWYyI.roa (hash: mBTPbPt26EcSH4AMmR65D0K6YSKToMbRhFmYaz8u+KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:26:65:01:0b:28:5a:03:90:b4:7e:ed:ed:49:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=332293d0399160788b31e438760dc3bd1ed882eb
Validity
Not Before: Aug 6 22:02:23 2025 GMT
Not After : Aug 7 22:02:23 2025 GMT
Subject: CN=6bb2306655857e96f53fad98c31eb249c634d6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:82:71:d1:c3:e2:8a:9c:71:d2:21:13:6d:02:
e3:57:a4:e6:81:ab:dc:54:6f:14:56:c4:89:af:dd:
9c:4b:a9:5a:51:90:7c:91:a8:c9:9b:a3:59:42:d8:
40:88:85:b1:bb:98:fe:ce:30:e2:f8:13:61:81:49:
d4:ed:f0:dd:3f:6b:b5:0d:f5:cc:24:47:a7:3d:1b:
e9:c2:fb:4f:1a:ac:ca:46:5c:7c:4e:16:9e:60:21:
62:f6:f4:e2:21:67:ba:13:b0:5a:57:9c:29:c9:57:
8f:b3:b0:a5:8d:fa:a1:35:73:16:09:c8:fd:53:e3:
80:2f:d6:18:05:e2:d7:0d:03:ce:c0:e9:f1:9c:ea:
3b:da:b7:18:52:9e:43:7c:00:b3:b9:8a:6d:6d:75:
97:ed:6c:ac:44:a3:25:12:80:be:b7:51:5c:62:6a:
05:87:a6:5c:c1:73:90:30:d5:5d:a4:4e:51:0b:3a:
52:f3:b3:82:1c:0b:25:30:dd:61:86:0a:2c:59:2d:
71:88:d2:94:1d:36:83:f4:ad:82:ea:aa:8e:30:ac:
cf:75:70:84:13:7b:af:03:49:4f:0b:68:77:0b:b7:
26:4b:65:81:a2:93:99:83:d6:d0:f4:67:d8:c1:09:
1e:a7:23:15:92:a4:e7:6a:24:54:b1:70:d0:0f:82:
92:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B2:30:66:55:85:7E:96:F5:3F:AD:98:C3:1E:B2:49:C6:34:D6:DD
X509v3 Authority Key Identifier:
keyid:33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fb:2e:fc:5d:fb:cd:64:55:41:b6:25:7a:43:25:65:74:28:
90:f0:50:e4:ee:55:fd:0a:37:ce:8c:11:7a:d7:51:1f:57:d1:
9d:d7:54:45:0a:f8:2d:7d:4a:88:81:c3:90:a9:7c:10:02:63:
90:b8:38:ef:9c:83:e6:26:60:f4:50:35:fb:7e:8f:5d:d2:38:
4e:51:e8:b6:f3:a1:d0:d4:89:d1:cb:51:d8:ea:2b:b5:ab:c9:
35:54:2f:e3:e7:ac:7f:b5:4a:1a:b6:2d:ef:23:e2:32:fa:27:
0a:a8:57:4f:03:bf:3a:5a:03:28:f4:7b:3d:98:5a:cb:ab:51:
f5:74:6f:9b:7f:df:b2:b2:f6:ee:12:75:51:5f:94:3b:18:8d:
97:b0:2e:25:d5:f2:59:ce:3d:43:d8:85:67:4c:c1:43:31:e3:
98:9b:29:6b:0d:61:f7:c0:ac:c6:77:3a:b1:48:12:81:74:55:
5a:b5:14:31:e2:45:34:6c:72:66:2f:f4:d9:10:f7:de:41:80:
c6:7b:dd:c8:e7:9f:eb:68:32:49:ea:63:0b:9c:4b:73:a5:0f:
50:82:73:8e:71:a9:c1:80:78:6e:f3:6b:7c:d0:12:ca:6f:79:
77:2e:5f:3e:a8:cd:08:6b:f0:2f:dd:af:74:de:1f:88:94:68:
8c:d5:8e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:03:13 2025 by rpki-client