Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
File: RYg0xSq-MEJ_CiKqRv09CAntRYU.mft (raw, json)
Hash identifier: zChJa+VPenpfthT7HdQ18mOhaGZZrX9pbx50LYbTey4=
Subject key identifier: F4:72:10:3F:AA:FE:78:DD:B5:66:AF:1F:B3:EF:00:32:3A:7F:7D:67
Authority key identifier: 45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
Certificate issuer: /CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Certificate serial: 0198D6CCF844D1BBA367F86FBDE7F613BC66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 12:00:13 +0000
Manifest this update: Sat 23 Aug 2025 12:00:13 +0000
Manifest next update: Sun 24 Aug 2025 12:00:13 +0000
Files and hashes: 1: 9EAsH9WiZD4VxilaYIDfYTgwfr8.roa (hash: S6lIJn8kLzJ0SR0mYeMv6RwOAdGOeRdde/Wo386MMZ0=)
2: RYg0xSq-MEJ_CiKqRv09CAntRYU.crl (hash: DbUi9/pYyMN6j6RBmYEeSYojikw89dGRjOS02FcfwLk=)
3: Rd3HOWCgIifcE20uT6ZwMTd010E.roa (hash: Iyh7ZN8yRmO6xUm0HuFbl9LY6LaOBla7JBeUoV6oKtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:f8:44:d1:bb:a3:67:f8:6f:bd:e7:f6:13:bc:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Validity
Not Before: Aug 23 12:00:13 2025 GMT
Not After : Aug 24 12:00:13 2025 GMT
Subject: CN=f472103faafe78ddb566af1fb3ef00323a7f7d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:e5:f4:04:9f:f4:d9:86:f5:7f:d6:8f:a9:
53:61:19:69:22:a3:e8:db:79:ab:88:76:8e:56:ee:
df:80:cf:78:1e:2a:91:59:10:59:cb:c0:d8:05:ad:
ce:03:df:b9:77:71:9c:70:63:d0:3a:d9:a4:dd:56:
90:d8:19:a8:1c:29:c4:45:6e:87:3d:3d:18:dd:53:
66:6f:03:cf:54:21:0b:3f:72:aa:b7:04:3b:60:94:
0f:97:c4:44:74:0a:d0:33:9d:ba:f1:7b:4d:3a:7d:
2c:69:af:57:94:22:d8:94:e2:70:70:83:2e:cc:39:
eb:cf:c5:2a:ea:cc:94:a0:b1:c5:c0:62:23:4f:d4:
97:2f:b0:61:5c:bc:89:d1:1b:92:06:55:82:ed:9a:
66:99:e5:1a:6f:21:3d:bb:b1:73:3a:5e:fd:ec:ac:
df:c8:47:00:7e:cb:5c:03:e1:8b:ab:6c:82:16:fb:
f8:1e:ce:1b:36:cb:08:d4:a8:f0:48:37:d5:c8:56:
8e:9a:46:ed:b4:72:c7:36:b0:9f:ea:a4:28:19:06:
b3:a6:56:47:3e:3c:91:4a:83:f9:ed:fb:63:c6:b4:
7c:cc:ef:5b:22:1c:31:af:cb:e6:a5:96:8d:7e:e0:
de:29:51:9a:13:85:46:42:a2:93:02:4a:c7:74:6f:
67:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:72:10:3F:AA:FE:78:DD:B5:66:AF:1F:B3:EF:00:32:3A:7F:7D:67
X509v3 Authority Key Identifier:
keyid:45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:52:bf:0b:e5:13:8c:bb:2e:e6:a7:5a:27:07:73:40:4f:1f:
15:39:c8:9a:30:8a:3a:e4:63:0b:96:db:06:2e:bb:3c:f7:65:
86:fd:8e:c7:1c:61:06:25:d9:c4:af:d7:61:56:19:c2:4e:42:
cb:d2:69:02:7c:c5:05:f4:64:4a:23:b9:dc:ee:5e:d4:61:61:
ea:2b:11:71:77:68:bd:39:0e:9d:cf:53:d2:d6:79:f5:25:82:
63:fa:ac:7b:d5:f7:47:ca:6c:d6:a8:fa:2a:27:85:34:e1:c8:
1e:00:60:a2:63:2d:b2:de:44:56:31:23:52:12:e0:5e:fc:51:
6d:e6:1e:ce:2a:4d:50:ea:25:eb:0f:d6:6e:0d:a6:6c:ee:fb:
31:f8:9c:8a:64:1d:b6:79:f7:28:43:22:61:8b:f0:77:52:c0:
dc:02:87:65:44:c2:5a:bc:74:d3:a9:10:49:32:ba:59:ab:d9:
02:37:74:36:5a:79:5b:28:01:c6:e3:dd:95:77:40:59:f1:ce:
9e:79:3c:76:9a:de:f4:57:d0:d1:37:1f:d4:94:1e:24:bf:62:
f9:60:ab:10:30:82:da:aa:9e:ea:2c:f0:a5:61:47:b9:e0:86:
51:9b:43:58:2d:cf:ea:4a:4d:ec:b6:db:7a:f3:65:7b:06:f4:
56:79:b2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:25:36 2025 by rpki-client