Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
File: mYS56xIiNxEcH4yldwfscwcpHug.mft (raw, json)
Hash identifier: RKpFddt20HPEQRtPrVMhDketqxWKcFIXqQLgX9HAa7Q=
Subject key identifier: A3:9F:50:8A:96:ED:56:11:FB:18:A3:94:FA:FD:53:E1:BB:A7:52:2C
Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
Certificate issuer: /CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Certificate serial: 01977E681432C751256BC6C4CADEC5C97E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
Manifest number: 159D
Signing time: Tue 17 Jun 2025 15:00:39 +0000
Manifest this update: Tue 17 Jun 2025 15:00:39 +0000
Manifest next update: Wed 18 Jun 2025 15:00:39 +0000
Files and hashes: 1: 6xQaOng6ybJiigzf2XvWmzrMXU4.roa (hash: VWLbjjUJx9s0aleI0gYr1/W1oVoltzBATX0SfpaTSw8=)
2: XEpy5lCOl0Tmub4xGBtkQEupj7o.roa (hash: VFCRN96ZupXuhJWonAUO0kRSMoyUuFboGTCKurSs1xw=)
3: mYS56xIiNxEcH4yldwfscwcpHug.crl (hash: RdwO6m92cP5kFlPKYQRhz6M2zEIxn/V3NlXW/Rp7+mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:68:14:32:c7:51:25:6b:c6:c4:ca:de:c5:c9:7e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Validity
Not Before: Jun 17 15:00:39 2025 GMT
Not After : Jun 18 15:00:39 2025 GMT
Subject: CN=a39f508a96ed5611fb18a394fafd53e1bba7522c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:de:72:95:7c:8c:88:cd:09:83:80:e2:57:b8:
8b:1a:29:5c:3a:f4:c9:04:cd:fb:7e:f8:ba:d4:45:
f6:5b:16:e4:11:70:a8:36:7b:f2:68:9a:aa:e3:da:
37:06:5d:bc:5f:14:f1:90:ac:ca:91:84:81:db:ab:
65:a9:0b:2c:4b:bb:98:9b:cb:90:a7:62:28:f4:64:
87:b4:02:9b:f7:43:a1:ef:a2:b3:df:ca:75:e4:7f:
9a:78:f7:c5:a2:95:4c:f3:06:51:38:10:f6:76:0b:
36:36:c6:19:b5:dd:3f:82:81:61:00:3d:bf:b1:df:
df:68:7d:f1:5f:55:1c:5c:bd:6e:96:5b:34:22:29:
08:ff:9a:a7:1c:e4:99:5f:f1:18:68:ef:2a:6c:82:
91:45:bc:16:68:5d:b7:01:c9:dd:8e:0b:7a:d7:5d:
2b:bb:a3:1f:e9:72:fb:f9:03:b2:91:de:52:c0:14:
c8:15:eb:b2:6d:66:d3:e1:47:42:73:bf:4b:f4:f2:
65:3d:10:ab:ac:48:0a:a5:38:64:b6:37:e9:a0:4e:
aa:b2:ba:56:eb:8d:aa:11:c9:6c:a8:cd:d6:e5:e1:
05:9b:ab:c0:55:98:23:3a:70:a8:1f:77:89:84:1c:
66:22:f3:8a:37:3e:02:72:1a:59:3e:dc:1a:eb:e9:
9b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9F:50:8A:96:ED:56:11:FB:18:A3:94:FA:FD:53:E1:BB:A7:52:2C
X509v3 Authority Key Identifier:
keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:cf:4e:95:41:fa:12:85:96:ec:e5:55:56:54:8e:50:ce:bd:
0c:12:9b:8b:55:99:9e:75:cc:95:7c:92:1e:e8:ee:45:18:73:
da:e0:17:99:5e:b4:35:05:50:e2:9d:ef:e4:8f:fa:03:92:0f:
71:2e:32:88:5a:e9:a8:f1:da:c3:c9:6d:dd:87:4a:8b:2b:16:
fd:a7:d6:37:90:f1:0d:20:5a:63:8c:86:f8:55:f2:0f:df:33:
fe:8f:d8:18:54:fe:af:2d:99:f9:ca:76:70:1f:15:38:c2:c2:
4e:9a:17:65:ed:7f:64:e4:83:2b:9a:3a:5c:0f:4d:85:79:c9:
4a:6a:57:c2:ff:95:20:52:f3:41:1d:e1:34:3a:27:8d:0e:6b:
4f:fc:9e:b9:db:f0:28:39:4a:a1:7c:62:55:5f:41:fe:ad:8f:
85:3a:13:c7:a8:f3:53:60:6d:9d:54:26:f2:e6:95:bf:bb:ed:
c5:25:31:11:b0:2e:99:95:5f:f5:56:8d:10:32:b6:20:92:67:
25:d3:76:af:5b:c5:ff:77:0e:8c:a5:8b:e8:f4:91:ad:d2:4c:
71:69:cf:56:86:06:3c:4f:d4:98:75:e2:56:97:2f:a2:77:0e:
08:75:a3:87:05:36:77:4c:97:72:d5:9c:4c:3c:ea:1e:46:70:
af:0a:ee:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 18:06:42 2025 by rpki-client