Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
File: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft (raw, json)
Hash identifier: idT+JSCiOi8GdsMLaSjEWnffirF/TyGLIIDjYeWfLQo=
Subject key identifier: A2:8B:DC:AD:58:8B:AB:29:70:9F:CB:47:D7:21:0D:21:3A:97:CF:D9
Authority key identifier: 45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D
Certificate issuer: /CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d
Certificate serial: 019786C65228794D01C6EB88C7E6BF5F7DB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
Manifest number: 1051
Signing time: Thu 19 Jun 2025 06:00:33 +0000
Manifest this update: Thu 19 Jun 2025 06:00:33 +0000
Manifest next update: Fri 20 Jun 2025 06:00:33 +0000
Files and hashes: 1: GL43VxH_h-aWzE3G-2pFMtY1WM4.roa (hash: GegNsbMfLWk2tMOCfqZsrF9iNh5KkVnxnNq29fJOObI=)
2: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl (hash: YcLbOvAKqTRngj3Me1zbhMqGFh/FVdN97anJb+HUcU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:c6:52:28:79:4d:01:c6:eb:88:c7:e6:bf:5f:7d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d
Validity
Not Before: Jun 19 06:00:33 2025 GMT
Not After : Jun 20 06:00:33 2025 GMT
Subject: CN=a28bdcad588bab29709fcb47d7210d213a97cfd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:32:62:0a:e7:96:ac:4d:10:c0:7d:c2:8c:63:
00:ec:a9:d2:42:a9:59:29:ca:9d:63:18:79:ca:7e:
eb:e0:07:62:77:20:05:02:ad:8e:6d:37:34:02:92:
d9:f8:66:bd:dd:2f:cc:ac:19:13:d3:8f:de:96:e3:
35:fb:6b:de:3f:7a:61:08:f8:c3:7b:5d:79:f2:65:
e2:7a:83:e5:80:0d:18:6f:38:af:21:6b:ab:5d:3a:
af:78:1e:eb:07:fd:98:98:cd:a3:80:aa:b0:3b:53:
3f:d9:e1:7b:8e:42:48:58:36:4a:c2:8f:87:a4:78:
35:6f:ca:a6:8a:e0:b7:41:ef:35:bd:80:c9:3d:73:
87:70:71:97:3b:1a:dc:f6:a8:05:bd:0e:bf:1f:d8:
26:81:40:61:99:0e:be:fe:bc:d1:30:59:aa:e2:87:
a3:89:f9:53:91:61:a6:24:db:83:4e:1b:04:73:4a:
24:e9:ab:9c:48:5a:d8:18:c0:b2:72:51:6d:b0:8f:
a4:c4:07:6b:93:75:d0:8d:5b:d6:19:21:1f:c6:bf:
59:5b:d7:a3:1c:48:48:9e:9f:8d:62:7e:0b:b5:81:
cc:db:b1:fb:9c:a8:44:03:78:cc:8e:3b:18:9f:47:
5b:cc:df:24:cd:f6:79:67:ae:69:35:1d:91:b8:40:
c1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8B:DC:AD:58:8B:AB:29:70:9F:CB:47:D7:21:0D:21:3A:97:CF:D9
X509v3 Authority Key Identifier:
keyid:45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:0c:91:bf:d4:a9:36:63:72:b8:d9:a8:fa:1a:5c:7b:bd:b8:
f0:70:be:ad:c3:b8:54:08:aa:4f:3f:ab:c5:5c:3c:b8:de:39:
f9:fb:53:8a:ed:e5:31:7e:43:28:9a:8d:a1:a9:d4:c8:d8:fd:
70:0c:64:4d:15:57:45:0b:f6:45:38:88:e8:c7:b8:94:3d:11:
4e:e3:9f:08:b2:5d:1e:b3:43:18:70:9a:90:e5:63:d8:af:6e:
26:99:01:17:8e:fd:90:ec:28:f3:0f:86:31:66:8c:bc:45:06:
41:9b:6d:a3:c5:9f:07:27:6e:20:b5:fe:47:95:37:3f:98:77:
30:9d:f2:b4:7a:9b:b2:fb:d2:78:fc:80:70:1f:d1:91:00:4f:
00:b9:28:89:d8:a4:65:d5:91:40:81:07:5e:ad:85:19:82:d7:
21:69:8a:74:ac:d5:ee:09:cc:3c:a7:10:b7:c9:43:de:ed:66:
39:93:28:8e:ed:45:5b:7f:17:d6:fc:97:f3:84:b5:be:1c:47:
be:7c:10:a7:fd:5b:eb:ae:25:b2:8b:94:93:41:22:67:56:6f:
00:c0:f9:3f:c6:95:72:19:bc:16:9c:cf:8f:da:92:40:ed:01:
38:2a:ab:56:c4:1c:04:28:8b:f4:fa:76:dd:23:60:77:f1:0c:
f6:a3:94:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:01:48 2025 by rpki-client