Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
File: RlDGwCqb3k4XGH8FsOypUEg7-S0.mft (raw, json)
Hash identifier: MuFitJV9udhiU1C81sF16iQceCCIqa1hYTzgKigUTGI=
Subject key identifier: 65:62:2F:49:87:20:DF:CD:57:43:91:4C:57:6F:62:F1:E9:DF:8B:9D
Authority key identifier: 46:50:C6:C0:2A:9B:DE:4E:17:18:7F:05:B0:EC:A9:50:48:3B:F9:2D
Certificate issuer: /CN=4650c6c02a9bde4e17187f05b0eca950483bf92d
Certificate serial: 01976E8727C9204431A365E9ED819FA0780A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 13:00:40 +0000
Manifest this update: Sat 14 Jun 2025 13:00:40 +0000
Manifest next update: Sun 15 Jun 2025 13:00:40 +0000
Files and hashes: 1: 3NLIuHMmWgQs4wJxVy9Hy-aW-pg.roa (hash: E1YEQO+V+WEVpKPvVd6pcBugEFAnXKdDCtGzwwDY3UY=)
2: RlDGwCqb3k4XGH8FsOypUEg7-S0.crl (hash: SW0WUhIJtK6uJF/1CvBjYOv7RbKwakR4DE0ADvdEuZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:27:c9:20:44:31:a3:65:e9:ed:81:9f:a0:78:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4650c6c02a9bde4e17187f05b0eca950483bf92d
Validity
Not Before: Jun 14 13:00:40 2025 GMT
Not After : Jun 15 13:00:40 2025 GMT
Subject: CN=65622f498720dfcd5743914c576f62f1e9df8b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:54:91:02:48:59:2e:5d:d3:f7:12:99:e4:
4e:9e:74:ce:82:2a:ca:6a:87:73:01:36:43:ed:22:
e5:58:c5:f2:b7:c2:b8:fe:0f:ba:f7:36:d8:33:a6:
b5:b5:6c:a5:64:21:31:3b:a6:78:8d:f1:c5:f4:aa:
79:7a:5e:f3:fb:da:07:a8:2c:7e:21:34:bf:40:4e:
d9:e6:1d:b5:89:a4:1c:16:75:54:66:45:71:f8:b0:
29:b7:c3:84:21:c4:2c:70:ba:20:85:75:9d:db:62:
36:fb:e8:eb:eb:9d:f3:62:3d:43:ba:a8:f5:77:a0:
c6:cd:11:05:6a:9a:ae:98:72:d7:89:22:23:d5:c1:
3b:c2:ef:10:fc:2f:f6:30:07:12:d5:ac:14:fc:c3:
08:92:d7:4f:e2:9b:50:78:26:d5:6a:75:1f:c4:f8:
b8:50:40:8e:27:3a:f7:e0:28:ab:61:5e:5e:e2:1a:
f9:3d:f8:c4:49:f4:26:7a:bb:bf:5f:13:10:fe:e7:
5a:3f:57:25:d2:70:82:df:8b:e6:f6:54:19:69:bc:
6a:50:49:fc:d7:1e:a1:e5:35:91:7a:80:67:27:66:
01:dc:53:da:10:a0:b0:e1:a9:4b:69:60:bf:13:d5:
14:86:60:58:1f:60:76:c6:6c:d3:18:b1:b7:5a:5f:
3a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:62:2F:49:87:20:DF:CD:57:43:91:4C:57:6F:62:F1:E9:DF:8B:9D
X509v3 Authority Key Identifier:
keyid:46:50:C6:C0:2A:9B:DE:4E:17:18:7F:05:B0:EC:A9:50:48:3B:F9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:81:eb:ff:cf:42:0f:16:49:9f:ac:94:e6:af:e1:bd:0f:22:
42:9f:b4:e7:ef:53:2f:27:12:ff:96:a1:28:65:e8:45:29:36:
8d:0f:ab:c1:41:a9:9f:12:68:2e:21:78:a3:b5:79:0c:3d:75:
a1:fc:cc:3d:27:a7:40:8d:dd:7a:2b:eb:5d:28:b7:65:81:cb:
d2:21:b1:a2:7b:62:32:9a:85:e4:ad:f2:40:d6:48:5d:d8:0f:
9a:f4:f9:94:2f:4d:87:14:26:fa:97:eb:17:9c:dd:b2:4e:e5:
68:eb:2a:73:96:80:e6:8e:a0:ca:88:60:7b:00:53:e9:2c:13:
1b:75:e2:63:e3:07:01:c7:42:0e:3c:21:b9:be:96:39:f0:f5:
17:b1:d9:b6:1b:7b:f4:95:c9:de:89:2c:0d:c0:f1:6a:c6:89:
c5:e8:de:cd:ca:17:86:55:c4:ed:20:c4:b5:6d:f5:2e:28:02:
cd:fe:7a:b0:04:b1:47:3c:50:7e:af:71:c3:d2:81:9d:53:05:
e9:3d:71:18:50:63:27:05:c8:55:f5:44:ea:df:07:ea:c0:bb:
10:1e:4d:e9:63:e0:08:8e:a7:30:0e:68:b4:67:06:95:58:99:
d7:e7:60:ee:b4:d9:4e:cf:e7:d4:25:2a:9c:03:af:dd:8e:65:
77:17:56:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:16:38 2025 by rpki-client