Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
File: rUS-GO4-DSdHZwVV6GsACWXoE5s.mft (raw, json)
Hash identifier: VKipFmjiJ7CerSPiWNTjs6332JLCVQ5/apwIyg9O4Yg=
Subject key identifier: CD:12:E9:EE:AB:04:E6:AB:9C:F1:97:B5:38:80:85:70:13:0E:85:7F
Authority key identifier: AD:44:BE:18:EE:3E:0D:27:47:67:05:55:E8:6B:00:09:65:E8:13:9B
Certificate issuer: /CN=ad44be18ee3e0d2747670555e86b000965e8139b
Certificate serial: 0197B6A1AE5878D8C66117216B8418020BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:02:18 +0000
Manifest this update: Sat 28 Jun 2025 13:02:18 +0000
Manifest next update: Sun 29 Jun 2025 13:02:18 +0000
Files and hashes: 1: kX62bL3xBVpkyK0FphmC5iQUK74.roa (hash: GEBZd8qkO5malJhFWg729yyTB3o+issIVlA3FLkcy9o=)
2: rUS-GO4-DSdHZwVV6GsACWXoE5s.crl (hash: R9fY8/XMTwe3xdGtO6VCqfWYgJjnk9P0SZeQ1GC4/Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ae:58:78:d8:c6:61:17:21:6b:84:18:02:0b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad44be18ee3e0d2747670555e86b000965e8139b
Validity
Not Before: Jun 28 13:02:18 2025 GMT
Not After : Jun 29 13:02:18 2025 GMT
Subject: CN=cd12e9eeab04e6ab9cf197b538808570130e857f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6e:4a:22:c1:d7:ee:26:57:01:cf:a7:81:c1:
be:cb:ee:cf:83:46:fd:3d:e0:1b:11:97:39:02:43:
37:6a:d2:bf:91:4b:60:60:ea:12:50:85:04:0b:de:
1b:24:94:eb:9f:00:50:89:f6:f9:a3:21:ac:24:21:
d4:9f:2c:91:be:a8:c2:fd:32:ac:88:42:22:77:f2:
5e:56:ad:ce:7a:35:ea:b1:1d:65:7b:cd:c7:eb:34:
7c:f6:39:68:95:f5:7a:f5:14:5f:1d:51:7a:c5:df:
1b:3c:98:47:98:0b:27:14:10:53:4d:a7:bf:f8:80:
de:4d:ce:e1:53:02:dc:dd:23:d4:ba:f7:18:c7:53:
30:44:64:22:bd:cb:79:58:8b:74:92:24:6f:32:51:
eb:b4:c7:65:cc:02:15:07:5e:3d:b5:06:2e:0c:d7:
d9:97:e6:80:90:67:33:50:d0:72:38:02:e0:a4:a8:
3c:fc:b8:ea:51:10:1a:c9:73:78:5a:64:0e:7e:7d:
a7:ef:4f:20:73:97:f3:02:df:0a:3e:ab:a0:ac:39:
53:4b:78:00:8c:9a:8e:81:45:d2:9b:49:13:7c:81:
12:01:08:a4:c0:4a:73:e5:89:74:bc:07:93:6c:d2:
ac:df:24:34:8c:42:e8:ba:1f:6c:e9:d2:d3:3d:52:
28:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:12:E9:EE:AB:04:E6:AB:9C:F1:97:B5:38:80:85:70:13:0E:85:7F
X509v3 Authority Key Identifier:
keyid:AD:44:BE:18:EE:3E:0D:27:47:67:05:55:E8:6B:00:09:65:E8:13:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e8:08:3b:57:63:03:9a:fd:96:e7:49:78:a8:d4:88:4c:80:
6b:4a:e9:cd:4d:cf:ee:cb:2f:b5:6e:33:4a:24:df:0c:cb:de:
fc:a7:1c:25:a5:d6:83:9e:1a:6d:ee:7d:87:f8:71:72:71:44:
d6:2b:5a:2e:fa:2e:25:5a:b7:e4:62:3c:4a:f6:65:f8:34:df:
a9:1a:d9:6d:df:16:11:e8:f4:51:12:02:44:cf:d4:33:5b:cc:
b2:5d:b2:17:5e:b3:62:7b:4c:25:30:ac:73:e2:bd:e5:92:70:
10:c8:11:80:ad:86:3d:26:60:e4:74:e2:00:7d:6c:83:b4:8f:
24:ea:15:37:2c:04:ec:a7:7a:09:1c:d1:3e:15:11:21:63:09:
4b:c1:a1:70:b9:a3:77:97:b7:d6:b3:0a:15:f9:6a:89:85:ae:
7d:d7:7f:24:75:8c:26:94:7e:4d:0a:d7:2b:58:eb:b9:06:10:
09:ae:0c:5e:69:dd:66:58:58:f9:d3:8f:ea:b4:f3:f1:a2:cc:
b7:c9:a0:a9:da:f5:9a:9c:0d:22:5d:77:46:20:3c:6a:44:9a:
80:b4:fd:3d:a3:38:5f:de:88:48:65:69:32:6f:73:84:14:65:
c9:4f:4e:fa:8a:cd:f0:8e:b0:10:dc:b3:c6:5f:e5:fe:81:0d:
bc:6e:a9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:37 2025 by rpki-client