Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
File: dygFKufRD9ImGiJI_ADSArDyVXQ.mft (raw, json)
Hash identifier: LGdGGTEyvLTcimcSddrJfgATn7dDn9bmeep10ssKhrw=
Subject key identifier: 73:1A:6B:F7:1B:28:EB:27:7D:C9:E7:EA:5C:31:CA:14:B9:BE:E1:33
Authority key identifier: 77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
Certificate issuer: /CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Certificate serial: 019895250BDBC636E683075F9BF2B9B0E2B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
Manifest number: 1630
Signing time: Sun 10 Aug 2025 18:01:29 +0000
Manifest this update: Sun 10 Aug 2025 18:01:29 +0000
Manifest next update: Mon 11 Aug 2025 18:01:29 +0000
Files and hashes: 1: PVmSZDGrn03CmC3ystxrDr3TZfo.roa (hash: Pjr4/1MqbKXy/FJJPo44XPup/Kfr50sF5z3bYT1o0SU=)
2: XU_IzR1XNktTavIx_nI3l6sD7WI.roa (hash: QAWYFwQ7d4DDdntznflGhPwEdw+c4lyHMRKRE5reGnk=)
3: dygFKufRD9ImGiJI_ADSArDyVXQ.crl (hash: UZ/0ndWP3vXko3DKc1svVjzYCLcl7QKnpatG96Sxrmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:25:0b:db:c6:36:e6:83:07:5f:9b:f2:b9:b0:e2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Validity
Not Before: Aug 10 18:01:29 2025 GMT
Not After : Aug 11 18:01:29 2025 GMT
Subject: CN=731a6bf71b28eb277dc9e7ea5c31ca14b9bee133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9c:4e:cc:57:de:53:8b:ea:f2:65:f6:69:d7:
a0:13:af:17:f4:39:e7:58:82:b7:28:3c:e9:05:f0:
6d:ac:aa:56:c5:ec:b2:a8:67:f0:ec:20:0a:98:46:
7e:35:25:88:54:ae:a9:ac:31:ce:ca:f0:96:f1:f2:
70:ca:ae:24:59:be:75:95:e0:ff:a9:4e:d0:55:18:
3e:cd:f0:b4:96:cb:1f:5c:bd:61:f1:26:e8:0c:92:
a0:79:77:b8:61:b3:0c:97:28:c5:9a:01:ae:b8:cf:
19:25:6e:06:1f:79:b9:a6:60:5a:fa:07:b6:4b:16:
71:07:4a:9e:63:12:39:25:18:a0:4d:c0:10:13:68:
18:56:3e:59:f0:d4:ed:7c:82:54:2c:80:78:09:99:
02:e6:0e:61:56:23:39:ed:ae:60:60:a8:22:76:98:
14:c3:a6:69:f0:e4:47:6e:a6:8d:ec:70:30:e6:04:
cf:a1:16:39:93:a0:bd:06:a1:87:7c:af:55:7b:95:
65:1b:31:bc:6a:b6:3c:83:fa:16:b8:7a:cd:b0:e3:
1b:f5:89:71:80:b0:0d:64:b3:66:a1:84:6b:34:93:
fe:3e:49:01:ed:68:0b:cd:6e:e8:fc:78:42:96:08:
a2:cb:d1:8f:c5:fd:41:62:35:72:38:92:b8:bd:b5:
53:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1A:6B:F7:1B:28:EB:27:7D:C9:E7:EA:5C:31:CA:14:B9:BE:E1:33
X509v3 Authority Key Identifier:
keyid:77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d6:7e:58:6e:94:ed:6d:5a:01:4a:41:ed:b7:f0:52:33:ac:
ed:05:c6:ea:7b:b9:51:21:1a:e5:03:82:e5:ba:33:b2:d7:5e:
40:34:6b:94:f4:d8:0d:55:b9:de:b2:3b:a1:7c:23:d1:37:d2:
fd:a6:6c:73:75:e9:74:3a:10:03:29:69:70:89:c1:cc:52:94:
b8:87:e6:23:d1:81:9e:e8:4d:34:df:89:ac:eb:ed:6e:ac:7c:
fa:f3:43:62:f6:86:51:54:93:c6:ba:88:30:f7:d9:2b:2e:e2:
e7:2d:fc:36:fd:6c:05:27:c6:32:56:8a:b0:08:a9:ab:0e:9c:
41:27:0f:55:57:53:ca:e3:90:97:5c:5b:d0:b3:d0:91:4e:fb:
7a:b3:89:ad:2c:16:72:da:5d:b7:51:b8:ba:6c:85:7b:a3:77:
63:88:77:2d:1b:e4:f6:57:61:56:ab:3a:65:b6:23:7b:f3:fe:
11:a6:94:85:9a:ee:46:ba:36:3e:00:77:63:f8:ea:ec:9c:3a:
3e:13:88:bd:bc:5f:bb:f2:ce:8f:7b:e1:f5:0d:1a:9e:6f:db:
91:dc:65:24:bc:5f:9f:53:b5:80:db:96:e5:82:3c:6a:79:aa:
a8:fa:cc:dd:e9:6c:c8:d4:53:0e:0c:f6:34:1b:c1:e6:9d:38:
f0:68:95:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:45:04 2025 by rpki-client