Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
File: RJ5CUryyLqLGz7OSTI-Evd56dHE.mft (raw, json)
Hash identifier: aGYsh9iqbyq2XxeyWadJCKJF4roSIXeTY3bsq5fCqc8=
Subject key identifier: 4A:FA:22:AA:0D:AE:1B:BB:49:ED:BF:A1:F5:96:0D:79:78:5C:9F:B3
Authority key identifier: 44:9E:42:52:BC:B2:2E:A2:C6:CF:B3:92:4C:8F:84:BD:DE:7A:74:71
Certificate issuer: /CN=449e4252bcb22ea2c6cfb3924c8f84bdde7a7471
Certificate serial: 01988166954048BB400184ECDE249B72B36C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
Manifest number: 1620
Signing time: Wed 06 Aug 2025 22:00:40 +0000
Manifest this update: Wed 06 Aug 2025 22:00:40 +0000
Manifest next update: Thu 07 Aug 2025 22:00:40 +0000
Files and hashes: 1: IuxDHR_CV3eNS1S5clbvfJ1hK_k.roa (hash: Hz3aDArINU9rGaWmuAjDTNSRDFd5qodJqjOuXUvn7hM=)
2: RJ5CUryyLqLGz7OSTI-Evd56dHE.crl (hash: 68Rj6P/HR/tadNhTmuqek6iYEDpla9bdaTLBZL2RHzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:95:40:48:bb:40:01:84:ec:de:24:9b:72:b3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449e4252bcb22ea2c6cfb3924c8f84bdde7a7471
Validity
Not Before: Aug 6 22:00:40 2025 GMT
Not After : Aug 7 22:00:40 2025 GMT
Subject: CN=4afa22aa0dae1bbb49edbfa1f5960d79785c9fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f5:75:87:74:2f:44:52:2d:95:4e:42:96:50:
07:e5:1c:36:f2:65:f8:9d:30:39:67:33:91:a7:64:
c3:36:ab:64:21:7c:ca:3b:65:5d:4e:a9:6a:44:54:
48:d5:98:ad:86:fe:04:f7:09:01:b6:ee:f4:c2:34:
e0:fa:d0:f2:03:1a:f6:18:01:dc:c5:66:9f:42:c0:
03:da:f5:c3:1a:f2:b5:5a:28:c7:5c:19:c4:c3:77:
36:86:96:d2:3a:6f:33:b0:e4:e4:80:78:a5:fb:79:
eb:b3:51:07:c3:94:2e:18:46:10:92:d9:72:bb:51:
04:5c:d4:be:62:5c:ee:89:c1:6c:56:a6:2d:68:50:
f3:f0:88:e3:d8:4e:c4:d7:01:c8:f2:06:0a:f2:77:
67:aa:ad:75:f5:55:2d:6b:9f:1d:eb:ad:05:56:2d:
83:57:54:01:ba:4c:d7:87:59:5e:18:5a:de:5e:5c:
8d:b7:11:b7:0d:89:41:8f:a6:eb:a5:45:c5:8a:09:
60:78:bb:08:23:4b:69:77:4e:02:14:63:ee:92:b3:
07:0c:a4:ee:ad:df:c4:fc:01:09:9b:ba:a6:5b:79:
7f:68:4c:58:ab:17:12:4b:54:98:ba:c7:02:08:9d:
92:c1:46:17:3f:6e:20:e3:a3:4a:eb:d8:1d:99:a5:
2c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FA:22:AA:0D:AE:1B:BB:49:ED:BF:A1:F5:96:0D:79:78:5C:9F:B3
X509v3 Authority Key Identifier:
keyid:44:9E:42:52:BC:B2:2E:A2:C6:CF:B3:92:4C:8F:84:BD:DE:7A:74:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f3:b9:2f:7c:d2:9b:2e:fd:60:05:31:c9:ba:64:3a:57:1d:
6c:61:ba:7a:1f:26:49:35:17:1b:17:27:ac:4c:00:01:c2:3c:
66:9c:17:f9:96:af:f2:3e:f7:dd:54:6e:62:52:1b:82:1a:c3:
87:2f:03:6a:4f:09:61:3e:6b:8e:46:3c:48:c2:32:9d:87:5d:
cd:ad:dc:52:b0:66:c6:95:e0:03:ec:4e:fb:b1:56:8f:5f:27:
1e:56:85:f7:e1:d7:55:44:00:81:66:df:85:c9:94:ad:00:c2:
5a:05:02:54:22:40:84:76:47:e1:10:be:e9:23:94:e6:cb:5d:
8a:1b:c7:bb:4c:58:29:83:cb:2a:75:05:29:b6:03:4a:58:9f:
c2:80:54:97:6e:0e:d7:8a:41:a9:9e:21:54:39:1c:96:05:62:
ff:ba:44:49:60:ca:6d:5f:03:e9:58:46:69:b9:ad:3b:8d:ed:
6a:6b:cc:e3:d3:6d:28:56:97:d5:f9:44:9f:9a:fb:5e:fb:0b:
01:00:98:67:03:1b:5d:bb:e9:34:27:7d:ba:26:07:da:f3:17:
32:b5:11:bd:32:49:bf:05:98:88:7a:3a:28:de:17:c3:60:f8:
ad:66:04:28:c4:25:35:b6:9a:8e:33:bf:5f:3b:cd:b4:b3:63:
64:63:42:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:00:04 2025 by rpki-client