Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
File: RcXBJi6D17-pAsLIYqFfHkLSVZE.mft (raw, json)
Hash identifier: T66orXD2kiiKiNBJoFFSzzTI8F+SFlJB7wGyjP6IU2w=
Subject key identifier: 4F:78:F6:44:BA:8F:9E:F2:BF:A7:9A:92:7A:BB:C0:AD:14:A5:99:1C
Authority key identifier: 45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91
Certificate issuer: /CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591
Certificate serial: 0197B70E5D93ADB6F99A3BF6551EAD4EE720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
Manifest number: 0586
Signing time: Sat 28 Jun 2025 15:01:01 +0000
Manifest this update: Sat 28 Jun 2025 15:01:01 +0000
Manifest next update: Sun 29 Jun 2025 15:01:01 +0000
Files and hashes: 1: 85JP1EmlrjP9cMbgQ-NLAJZsWYU.roa (hash: MO0sgGxlXYh61dJ8SPvOD77mPT9iIScGfPHBaJnXid0=)
2: RcXBJi6D17-pAsLIYqFfHkLSVZE.crl (hash: /IDEsOas0yK684trWUKDMq5/WSe8o1M+ObIjjBHimMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:5d:93:ad:b6:f9:9a:3b:f6:55:1e:ad:4e:e7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591
Validity
Not Before: Jun 28 15:01:01 2025 GMT
Not After : Jun 29 15:01:01 2025 GMT
Subject: CN=4f78f644ba8f9ef2bfa79a927abbc0ad14a5991c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a3:58:99:cc:bf:28:53:48:22:ae:5c:c4:4d:
98:97:42:36:b4:da:ce:5b:70:4e:6e:f9:68:3c:1e:
4c:4a:a7:57:b7:53:3a:d9:82:ea:99:80:d7:06:c0:
73:8e:9a:f2:ed:c1:8b:7e:86:01:f3:31:1e:a0:e2:
b9:50:2b:7a:48:a5:5c:bd:bb:67:27:32:50:c1:13:
b0:0c:c2:74:b2:22:86:71:b5:9c:3a:44:1d:17:3d:
2d:f4:a2:af:38:e1:3e:9f:0b:77:d7:e3:02:34:a7:
5a:1f:7d:16:ba:1f:35:71:ff:7e:fa:e8:7b:8b:f7:
f7:18:61:00:3f:a4:a1:32:7a:ec:1e:d4:34:91:e4:
d3:ba:96:0a:35:86:0c:81:93:a4:cb:ff:6d:bf:3f:
93:5d:e9:b9:22:14:da:ca:dc:f2:8e:71:94:0a:a1:
0b:95:25:16:bf:fd:30:0a:68:96:52:f7:7e:1c:04:
ba:6e:06:12:ee:c6:7d:7d:b0:aa:9b:1c:4b:ad:c8:
ac:df:da:cd:38:78:05:8f:e7:dd:ee:33:9d:f2:49:
d1:08:57:24:6b:89:ae:8c:d3:39:bb:78:bc:a9:9f:
d3:9e:92:eb:7c:b4:70:af:4f:81:64:33:9b:23:9e:
76:bd:3e:19:15:18:fe:92:9e:e6:65:04:78:82:48:
06:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:78:F6:44:BA:8F:9E:F2:BF:A7:9A:92:7A:BB:C0:AD:14:A5:99:1C
X509v3 Authority Key Identifier:
keyid:45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a6:31:c8:42:bb:55:07:b6:06:c6:30:99:e9:81:6c:eb:e3:
46:9b:53:01:af:db:ad:81:01:86:bb:73:cd:39:07:e6:1c:ed:
fb:9c:72:67:71:15:82:69:fb:eb:6d:75:c1:e7:75:4d:e6:04:
a9:33:65:6e:61:31:44:e8:95:ed:9d:2f:f8:f4:a2:ae:78:c2:
32:b9:ff:45:8b:aa:99:b4:7e:9d:41:f2:1e:bf:f2:e2:3a:4f:
85:5a:a9:a5:32:47:21:d0:14:c4:84:58:de:63:f6:9a:e0:e7:
f3:eb:fe:26:98:98:86:95:3c:04:db:24:c1:60:1d:0a:38:d6:
f4:29:24:a5:63:6b:b8:2c:15:e7:73:46:63:41:b2:19:88:84:
7a:f2:d1:b4:92:89:17:ee:20:bf:79:0c:50:a4:7c:09:ca:d0:
9c:9f:16:88:66:63:0a:03:52:2f:c2:f2:06:71:99:32:9c:b6:
c1:d8:bc:dd:ad:2e:eb:35:0e:0a:20:59:71:41:0b:11:20:b6:
6f:25:ee:d3:d5:47:f5:c7:17:e0:bd:d0:d1:d7:f6:dd:0c:7b:
6b:d0:c0:ea:98:f4:31:05:b7:4c:1f:d5:09:e6:d6:6c:38:b7:
2b:b0:80:78:63:fa:5d:ca:d6:2f:77:1c:2c:33:cd:b9:e3:6d:
a4:53:8f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:56 2025 by rpki-client