Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
File: RYg0xSq-MEJ_CiKqRv09CAntRYU.mft (raw, json)
Hash identifier: Zz6aNaEsBBtize7s2Mv1DazXUHchLKBruhOi9AKxs1U=
Subject key identifier: 43:59:FC:EF:0D:23:E5:ED:CD:10:3F:AF:74:5A:52:CA:CD:9C:C3:83
Authority key identifier: 45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
Certificate issuer: /CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Certificate serial: 0197B632D98717387A6CDC282C12AD2618A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 11:01:15 +0000
Manifest this update: Sat 28 Jun 2025 11:01:15 +0000
Manifest next update: Sun 29 Jun 2025 11:01:15 +0000
Files and hashes: 1: 9EAsH9WiZD4VxilaYIDfYTgwfr8.roa (hash: S6lIJn8kLzJ0SR0mYeMv6RwOAdGOeRdde/Wo386MMZ0=)
2: RYg0xSq-MEJ_CiKqRv09CAntRYU.crl (hash: 0woUuwURxpgyiwTIAc1XEg6OanGQdAtnXtEM3ug04P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:d9:87:17:38:7a:6c:dc:28:2c:12:ad:26:18:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Validity
Not Before: Jun 28 11:01:15 2025 GMT
Not After : Jun 29 11:01:15 2025 GMT
Subject: CN=4359fcef0d23e5edcd103faf745a52cacd9cc383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dd:bb:c5:c1:ec:a3:aa:9f:44:03:55:15:90:
73:68:ce:7b:4e:5c:91:dd:29:92:21:4a:55:82:b7:
aa:95:cc:f8:1e:8b:d3:0a:f8:8f:e3:fd:13:c0:8b:
dd:f2:6c:f0:c8:3a:9d:19:46:24:12:c4:01:05:a4:
80:ec:21:4f:e0:f1:28:f4:53:9b:71:84:c0:ec:63:
15:41:b7:bd:e1:ef:41:5a:fe:4e:1a:19:89:25:17:
d9:ba:7f:2b:d7:39:76:8e:90:81:9c:7b:6e:1d:3f:
29:a9:4e:62:ad:bc:79:90:15:14:14:8b:cc:88:ec:
de:5b:b4:17:18:7b:04:ea:81:a1:e3:cb:9e:d3:bd:
27:34:2a:d0:c7:d2:27:98:5e:fd:77:d0:64:70:c7:
87:9e:f9:99:1d:c3:7d:df:04:0f:ad:59:02:2b:03:
34:6c:f6:4b:b3:0e:a2:71:0c:06:fc:c4:d1:1d:27:
22:45:55:a3:60:27:48:11:da:56:c3:7f:7c:52:cf:
65:15:20:7f:d5:04:2f:24:04:16:a5:cf:e5:2e:bc:
1d:70:d6:42:76:7e:08:2d:d1:ac:45:0a:af:15:88:
a0:98:c0:4c:f8:e4:1b:d2:89:2d:de:17:80:83:34:
8f:e7:96:52:b7:fd:15:6f:aa:0e:57:9d:31:96:ab:
5b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:59:FC:EF:0D:23:E5:ED:CD:10:3F:AF:74:5A:52:CA:CD:9C:C3:83
X509v3 Authority Key Identifier:
keyid:45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ae:d8:0c:ef:80:ee:34:29:60:b0:f0:00:04:75:23:ec:4d:
3c:a3:9e:ac:55:6e:44:bd:1e:8c:0b:85:dd:df:fa:89:51:ce:
b0:70:db:08:b4:83:2a:aa:a9:be:bb:a9:0e:19:f5:23:2f:36:
de:e3:ed:2b:79:bd:46:27:98:ae:89:f6:97:5a:47:57:eb:d6:
cc:86:e1:a2:30:97:fc:64:27:b6:55:04:95:69:bc:d7:84:ea:
e0:fe:c2:25:2e:62:cb:c8:d6:53:9d:3b:d0:b3:48:ed:18:4c:
db:f2:0b:3a:32:53:bc:76:18:16:6d:08:cc:ed:81:27:52:2c:
5e:36:6f:90:4c:a1:ba:5e:2b:7d:56:d9:29:05:64:40:a8:63:
e0:f6:84:d9:55:25:c5:6a:ce:a9:74:03:f8:be:e5:54:01:e2:
b2:9c:2d:d0:9b:12:fe:96:70:a7:d6:84:e7:6e:a3:88:c6:9f:
a8:7f:94:7a:8f:49:2d:c6:71:98:55:67:83:8e:6a:27:99:47:
1b:a0:85:5d:f2:35:af:d5:fc:89:b3:00:99:f9:ed:e3:65:7d:
ac:67:82:a9:c4:c6:ad:ca:90:b5:8e:45:da:f2:ef:48:ea:61:
e7:17:9e:13:7c:46:d3:e5:47:c8:3e:33:73:80:d6:31:82:fd:
e2:a0:7e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:04:49 2025 by rpki-client