Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.mft
File: RdGncWAlFxEzoyAslGKg6r1mBoI.mft (raw, json)
Hash identifier: SuHUZAWckB2zSYtEId1ZNGeSMnmlNVm4T4o0NjXNC8M=
Subject key identifier: E0:D8:06:40:FB:24:96:70:9A:F7:71:2C:0E:25:63:3F:9F:2B:D8:E3
Authority key identifier: 45:D1:A7:71:60:25:17:11:33:A3:20:2C:94:62:A0:EA:BD:66:06:82
Certificate issuer: /CN=45d1a7716025171133a3202c9462a0eabd660682
Certificate serial: 0197B77C4EDEBC9BA286348C2C6A9FB00135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RdGncWAlFxEzoyAslGKg6r1mBoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.mft
Manifest number: 054A
Signing time: Sat 28 Jun 2025 17:01:06 +0000
Manifest this update: Sat 28 Jun 2025 17:01:06 +0000
Manifest next update: Sun 29 Jun 2025 17:01:06 +0000
Files and hashes: 1: RdGncWAlFxEzoyAslGKg6r1mBoI.crl (hash: heQBsDoik9m8uXD+FidBIE/2VmExnhG4unj9gFTxdwA=)
2: p6pII2yeX9CFzHUBZ-7ECA5XoLc.roa (hash: a0i/QIPJclzVoZAHggGCZw2DH9on4V8xPPUo2d8z17I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RdGncWAlFxEzoyAslGKg6r1mBoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:4e:de:bc:9b:a2:86:34:8c:2c:6a:9f:b0:01:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45d1a7716025171133a3202c9462a0eabd660682
Validity
Not Before: Jun 28 17:01:06 2025 GMT
Not After : Jun 29 17:01:06 2025 GMT
Subject: CN=e0d80640fb2496709af7712c0e25633f9f2bd8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f7:3b:e9:63:3b:94:f0:dc:19:da:f6:cc:dd:
35:08:81:ff:3d:82:fb:5a:25:c4:0a:ad:eb:72:69:
d3:da:e3:6d:1b:ca:d5:ce:b3:66:24:b6:e0:5f:c4:
36:28:67:cc:cb:67:76:a8:92:bd:69:bd:80:2a:d0:
d7:bd:69:f9:1b:93:40:d3:a7:14:e5:1a:b4:98:de:
f2:79:15:10:47:30:d0:94:2a:58:ac:96:44:8b:df:
cf:3e:2d:d8:3d:25:12:7b:98:2f:26:d8:36:2a:80:
56:9d:5e:a2:c1:f0:72:55:24:fb:fd:f4:48:3c:2b:
9d:a3:95:83:ce:a8:8b:0b:db:a5:3a:54:f4:4e:c9:
88:54:fa:b0:06:2d:fe:f2:d0:ff:6c:59:5b:58:66:
25:e7:98:14:aa:24:61:26:1c:10:c4:64:f5:6c:06:
88:cf:f5:44:be:75:2c:bd:81:f8:05:31:af:11:7c:
d0:f7:91:f3:e2:09:7a:91:c0:82:28:6f:ce:54:aa:
14:e6:ae:0d:00:b1:d7:af:bc:36:96:3c:90:af:d6:
a5:fe:26:d8:9c:8a:11:a0:b8:d1:b3:2a:f8:77:f7:
7b:dc:97:f8:45:71:5c:a6:47:6a:76:58:f8:39:6d:
5d:3d:52:2b:30:b4:7b:90:df:86:9f:a8:b9:b1:93:
10:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D8:06:40:FB:24:96:70:9A:F7:71:2C:0E:25:63:3F:9F:2B:D8:E3
X509v3 Authority Key Identifier:
keyid:45:D1:A7:71:60:25:17:11:33:A3:20:2C:94:62:A0:EA:BD:66:06:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdGncWAlFxEzoyAslGKg6r1mBoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:bb:78:f7:2c:16:13:ea:02:3f:35:af:7f:e9:ce:66:5c:4c:
a6:ab:dc:0e:bd:5d:d7:44:2d:9f:6e:0d:75:d8:34:1e:ed:47:
75:4e:dc:ea:2a:9e:be:14:cc:ee:30:2a:a0:70:6b:0e:5e:70:
04:41:d4:e8:2b:7f:eb:ef:f8:b5:14:74:f1:0c:b7:16:1a:7c:
5c:03:5c:c9:64:bd:c5:9f:62:89:f0:47:7a:59:19:4e:33:c0:
59:e4:23:cd:f2:fe:02:52:c1:c5:9a:01:81:0f:2e:dc:18:e4:
b5:4b:1d:4e:fb:31:9f:64:ba:fc:ba:a3:a4:be:8d:4d:b2:3a:
50:86:79:fe:85:e6:f2:46:01:68:d3:d4:70:8e:5f:2a:f2:c5:
47:40:15:97:5e:ae:30:97:ca:12:ff:0e:2e:a0:91:d5:10:98:
8c:e4:7f:ae:bb:3d:bb:07:f1:73:29:52:0b:e5:05:e7:7c:43:
1f:ba:4b:7e:34:04:3d:5d:e0:17:56:61:78:21:d0:10:a2:cd:
88:17:2f:11:bb:27:34:b5:30:c2:6b:00:4e:35:67:c5:1a:06:
75:8f:e7:70:26:20:2c:4e:98:8a:c2:05:ab:4d:30:8f:10:8d:
8a:a2:d7:77:f5:e6:9e:01:34:44:0c:2b:d9:61:17:05:a1:78:
46:5d:fc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:21 2025 by rpki-client