Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
File: RGFYx1seMgOyK1g8wYTD9UiLJdY.mft (raw, json)
Hash identifier: vkvnYQFvYfZKl27qiX2XYFufyOQUdwBimau1hw7WYp0=
Subject key identifier: C4:32:88:DA:4B:36:3E:91:D0:45:D2:E9:E5:DF:37:BD:65:9F:F1:F0
Authority key identifier: 44:61:58:C7:5B:1E:32:03:B2:2B:58:3C:C1:84:C3:F5:48:8B:25:D6
Certificate issuer: /CN=446158c75b1e3203b22b583cc184c3f5488b25d6
Certificate serial: 0197D851565BA8EA86906003F54DDA057FA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
Manifest number: 1393
Signing time: Sat 05 Jul 2025 02:01:38 +0000
Manifest this update: Sat 05 Jul 2025 02:01:38 +0000
Manifest next update: Sun 06 Jul 2025 02:01:38 +0000
Files and hashes: 1: RGFYx1seMgOyK1g8wYTD9UiLJdY.crl (hash: eXA2RAGwxRkGD29Oyos/N0e96rABP68MfCWaIwzINOs=)
2: VIvZu8tQokm1xiej3HARVMmJcks.roa (hash: ZzmGdbDE4kWOnJhlJzMP8vBrXKF4L54dsaKlIHnEfEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d8:51:56:5b:a8:ea:86:90:60:03:f5:4d:da:05:7f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=446158c75b1e3203b22b583cc184c3f5488b25d6
Validity
Not Before: Jul 5 02:01:38 2025 GMT
Not After : Jul 6 02:01:38 2025 GMT
Subject: CN=c43288da4b363e91d045d2e9e5df37bd659ff1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c9:74:f0:7c:9f:6c:d2:6b:75:f2:ab:40:02:
3e:c8:a9:80:49:f7:de:2d:0e:5f:e1:68:ed:c9:06:
c1:52:10:9a:ce:12:51:e4:32:10:f2:5a:a2:24:46:
67:34:7a:48:79:30:3d:a4:0f:31:39:4c:04:75:9e:
78:bb:0d:7f:d5:c2:99:40:31:a3:2e:bf:bb:81:ee:
bd:9c:1b:59:ad:13:7c:e8:99:97:fb:ab:cf:c0:13:
bc:98:9c:a6:06:7d:9c:f4:67:40:eb:25:79:90:ad:
51:fa:5c:4f:ac:a8:a9:25:14:d7:a1:7e:02:a8:fa:
4e:e3:64:1b:61:41:1e:ba:0c:2a:9b:e0:41:f0:cc:
b8:bf:84:09:5a:ad:ae:ff:9c:8a:fe:01:6d:75:24:
dc:30:83:f4:c9:57:70:8e:a2:99:e0:52:57:bb:fe:
ea:90:e5:2b:f2:7c:73:7c:ea:74:46:72:83:c8:be:
7f:5e:c9:5b:52:d7:74:e6:66:d6:d8:ce:98:71:37:
7c:41:17:ee:14:a8:f8:1b:2a:fa:2e:a4:50:90:a2:
da:07:c7:4c:43:f9:10:05:53:bf:de:d7:eb:00:58:
f3:fc:9d:28:6f:87:55:d8:a9:f6:b2:72:eb:d6:df:
bc:30:51:8c:66:86:de:60:d4:be:2b:c3:19:aa:6b:
16:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:32:88:DA:4B:36:3E:91:D0:45:D2:E9:E5:DF:37:BD:65:9F:F1:F0
X509v3 Authority Key Identifier:
keyid:44:61:58:C7:5B:1E:32:03:B2:2B:58:3C:C1:84:C3:F5:48:8B:25:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:72:69:54:08:84:d8:01:84:4c:94:7b:14:8a:f7:3b:c1:f9:
50:23:6c:5d:f3:ea:3d:36:e4:04:fd:ea:6b:33:ca:20:8d:80:
5c:4b:a8:c4:98:07:21:05:ac:76:8a:59:b3:8d:10:a0:ee:d4:
21:ef:f4:e3:ad:97:42:23:2f:97:9d:55:47:a8:57:25:93:c7:
07:20:08:78:0b:02:cf:e8:87:05:ad:dc:99:20:29:8c:81:6d:
27:94:53:67:8e:51:ec:37:f9:12:00:76:c6:9b:04:09:81:a3:
a1:83:99:99:5b:5c:57:fe:e4:7d:03:ee:3c:89:b7:6a:88:97:
f2:a8:cc:3b:9b:28:2f:75:28:64:5f:3e:67:57:7c:72:39:06:
f2:8e:05:54:74:e6:d7:1e:bb:c0:da:fb:ba:ca:a8:82:98:7d:
0e:df:40:b0:77:e1:f8:db:7c:be:47:ef:5d:4e:8b:df:ed:3d:
30:86:45:7b:a9:c2:26:59:73:11:76:d1:dc:2c:5a:2a:99:62:
d5:35:c7:33:22:d3:ba:55:07:b5:56:51:c0:84:7b:8d:1d:1d:
c2:ba:4d:9a:73:51:38:1c:8d:79:3c:d6:e8:5d:0f:a0:04:c3:
44:7a:16:60:fa:fa:86:74:9a:e6:13:e1:ca:b0:da:50:4c:3f:
89:79:3a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:11:30 2025 by rpki-client