Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
File: dygFKufRD9ImGiJI_ADSArDyVXQ.mft (raw, json)
Hash identifier: z95fBSL6l7rRsKkt8CivPVJ90zeIs5udZBwvGECYgo4=
Subject key identifier: E1:66:E5:31:39:12:30:B5:9C:11:D8:10:F2:EB:F6:8A:1D:83:CD:61
Authority key identifier: 77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
Certificate issuer: /CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Certificate serial: 01976DAC1B91C75FFF7B1139D0EB3A3E9B3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
Manifest number: 1597
Signing time: Sat 14 Jun 2025 09:01:25 +0000
Manifest this update: Sat 14 Jun 2025 09:01:25 +0000
Manifest next update: Sun 15 Jun 2025 09:01:25 +0000
Files and hashes: 1: PVmSZDGrn03CmC3ystxrDr3TZfo.roa (hash: Pjr4/1MqbKXy/FJJPo44XPup/Kfr50sF5z3bYT1o0SU=)
2: XU_IzR1XNktTavIx_nI3l6sD7WI.roa (hash: QAWYFwQ7d4DDdntznflGhPwEdw+c4lyHMRKRE5reGnk=)
3: dygFKufRD9ImGiJI_ADSArDyVXQ.crl (hash: HOX+dqkhgWEaKKfERuLE/i7RbYv1L06k175b5/NgvrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ac:1b:91:c7:5f:ff:7b:11:39:d0:eb:3a:3e:9b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Validity
Not Before: Jun 14 09:01:25 2025 GMT
Not After : Jun 15 09:01:25 2025 GMT
Subject: CN=e166e531391230b59c11d810f2ebf68a1d83cd61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:be:ab:53:23:65:0b:e9:8b:83:e0:0b:9a:e2:
eb:4e:5f:a3:af:61:b4:34:52:1b:eb:62:f3:34:63:
28:39:e6:86:7d:77:e8:e9:3a:aa:57:f9:4a:a0:81:
96:b4:31:aa:e4:e0:42:07:80:0d:fa:6b:b7:db:88:
84:0a:0b:4b:ad:b5:51:e0:a3:ee:54:3e:48:a5:20:
15:74:85:b6:3b:00:fe:19:a4:cd:40:8b:30:d8:82:
87:b6:8a:8f:2e:b0:4f:cd:f7:8f:48:fc:71:85:99:
42:3a:ac:7a:07:91:f5:38:e9:61:fe:3d:18:92:35:
5f:4a:87:52:87:dc:88:31:1f:be:97:ff:e8:5d:34:
48:77:3c:d8:4e:24:61:65:f3:16:63:44:98:8c:ad:
b9:f5:11:67:0a:64:2b:44:5f:38:79:a0:4b:fa:f7:
fb:e0:0c:2c:f9:10:36:76:b8:31:94:d4:7a:07:e7:
b3:78:91:13:89:d8:d2:12:27:03:be:c6:75:02:85:
73:52:b6:dd:9f:18:03:8f:06:46:07:d5:db:31:f5:
7f:8e:25:18:da:e4:03:a3:27:04:21:63:90:33:82:
85:f3:ce:64:0e:71:7e:cf:00:49:de:5a:20:b4:24:
3c:3c:d8:30:df:33:20:66:9a:c8:ab:f5:bd:2c:5b:
58:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:66:E5:31:39:12:30:B5:9C:11:D8:10:F2:EB:F6:8A:1D:83:CD:61
X509v3 Authority Key Identifier:
keyid:77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:71:cd:26:08:aa:1d:46:53:ad:20:6f:54:5e:57:87:c5:fd:
0b:f5:df:26:58:17:be:db:17:5e:0c:2b:7e:45:71:09:77:b4:
d0:af:1c:cf:0c:9b:5b:4c:ac:a6:9c:a6:2b:c6:e0:1b:20:ab:
f4:c0:d4:15:04:00:f8:f7:eb:1a:92:22:56:de:81:6c:91:d4:
89:10:a6:92:d3:46:7a:f1:cb:ff:68:d5:14:8f:d6:c3:e7:2b:
c3:c6:b6:90:00:68:2e:2b:d1:4d:ce:ff:8c:64:2e:4b:83:7e:
5e:5a:f6:f6:b3:ce:16:9c:fc:bb:c7:1d:e3:4a:31:fe:55:c6:
b7:f0:b4:5a:18:70:06:38:83:1a:4d:40:be:30:56:55:b4:5a:
d0:4d:79:84:6b:fd:78:a7:8a:2a:bd:34:4c:5d:e1:84:17:96:
89:ce:7e:08:a0:ad:b4:9e:10:f6:ba:d8:5e:ef:4f:8b:36:15:
c0:ff:b9:cd:c5:d8:7d:bd:f4:22:bf:bf:64:3f:3a:3e:e9:a6:
86:e2:2f:fa:f7:b4:06:78:dc:ed:7a:50:b7:3e:75:30:ca:67:
29:7e:c6:e8:bd:cd:ab:37:55:4c:c4:f5:3a:04:ea:d9:5b:22:
d0:d9:7d:b4:f1:84:c8:11:51:1e:f8:a3:e5:26:16:9b:8b:55:
99:e2:50:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:19:15 2025 by rpki-client