Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
File: dygFKufRD9ImGiJI_ADSArDyVXQ.mft (raw, json)
Hash identifier: h1a9UvrQjQWfL5XBPavzmT68lzbCpSMOPZCP/u53kPw=
Subject key identifier: C9:11:BA:1A:2E:78:9A:3A:12:64:CB:75:FE:3A:5D:5D:10:1B:64:F0
Authority key identifier: 77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
Certificate issuer: /CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Certificate serial: 0197B8FD9835A061E1F0962A188DD31B5B99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
Manifest number: 15BE
Signing time: Sun 29 Jun 2025 00:01:56 +0000
Manifest this update: Sun 29 Jun 2025 00:01:56 +0000
Manifest next update: Mon 30 Jun 2025 00:01:56 +0000
Files and hashes: 1: PVmSZDGrn03CmC3ystxrDr3TZfo.roa (hash: Pjr4/1MqbKXy/FJJPo44XPup/Kfr50sF5z3bYT1o0SU=)
2: XU_IzR1XNktTavIx_nI3l6sD7WI.roa (hash: QAWYFwQ7d4DDdntznflGhPwEdw+c4lyHMRKRE5reGnk=)
3: dygFKufRD9ImGiJI_ADSArDyVXQ.crl (hash: At006afI4hiuyAUd7g6NO2odiKtnmyhrCRG1RdxR43c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:98:35:a0:61:e1:f0:96:2a:18:8d:d3:1b:5b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Validity
Not Before: Jun 29 00:01:56 2025 GMT
Not After : Jun 30 00:01:56 2025 GMT
Subject: CN=c911ba1a2e789a3a1264cb75fe3a5d5d101b64f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e8:ed:8c:bc:82:27:9c:49:98:02:2d:28:9d:
0c:d2:64:8f:71:b8:86:75:f2:d4:1b:63:94:4e:15:
d8:0c:0e:79:7f:72:e4:25:37:17:5b:c7:3b:96:ea:
bb:3c:31:e9:1a:30:36:eb:9f:dc:dd:37:17:b7:62:
72:3e:5e:1a:79:41:e4:58:2e:81:da:7b:25:92:69:
78:ce:0c:63:f4:29:e0:72:26:3d:b8:04:8b:6c:ad:
79:f7:af:2b:82:31:85:f9:b1:6e:27:18:e8:8c:44:
83:cc:f6:16:a6:f7:70:10:2d:9f:2b:76:ea:6c:df:
d4:d2:8e:54:a5:a9:95:e5:4e:31:13:a4:f7:54:33:
75:1e:31:66:db:8b:35:5e:27:6a:4c:7f:f1:e7:e7:
46:37:0c:f9:0a:21:22:a4:a6:2c:3e:1b:57:d9:6d:
28:0f:36:50:ed:d1:95:5c:65:20:55:7a:b6:aa:f4:
b1:62:29:b8:1a:0b:6d:01:3f:b9:df:f7:07:eb:a4:
c3:a7:52:16:c3:d2:e1:67:2d:66:32:e8:4b:08:2e:
a8:54:23:64:d6:15:bb:90:13:54:1f:d7:2d:f3:71:
6d:e6:44:be:21:23:c7:50:84:72:0b:b4:b6:f1:59:
aa:6e:ed:6e:bb:c6:bc:51:a5:86:92:d5:77:b4:2f:
28:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:11:BA:1A:2E:78:9A:3A:12:64:CB:75:FE:3A:5D:5D:10:1B:64:F0
X509v3 Authority Key Identifier:
keyid:77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:dc:01:49:1f:ad:17:d3:02:a3:d5:cf:27:2a:1e:7a:0c:3c:
b2:2a:4e:6c:8a:fa:e6:8d:0a:e7:79:01:7c:70:42:ae:94:16:
e6:01:1d:e2:37:3d:52:9f:63:5c:95:32:96:e1:91:6a:51:e0:
c1:b3:87:b1:70:ae:2c:01:81:f7:77:0e:63:e0:fa:a4:22:f5:
df:0b:6f:cd:ee:57:b9:7a:6d:74:7b:6b:4c:d2:6b:c4:7c:46:
15:f8:76:1c:0d:22:ed:60:71:5c:74:3a:f4:9a:08:84:20:4a:
76:28:60:e6:3e:81:d1:58:31:9f:92:cc:e1:a4:14:fc:cb:34:
2d:9f:83:3d:25:b1:78:2a:08:17:95:2e:be:f1:16:3b:7c:51:
3a:4f:2b:3f:1e:b3:7b:16:50:0c:fc:32:5e:16:d1:75:b0:9f:
90:1c:ef:ed:14:af:11:ff:ef:fb:e4:59:9b:cc:6d:5f:c4:de:
bf:91:36:90:af:47:49:12:82:cd:8e:76:0b:a1:29:60:04:6d:
df:fa:66:f6:42:1f:cf:ca:8d:b7:d6:f4:f7:e7:cf:52:b9:63:
72:16:31:cd:22:72:89:8b:37:4e:fb:93:be:bf:8d:2c:6e:5a:
49:c8:f9:96:9e:7c:14:6c:6f:18:09:65:c6:c2:fc:bc:f6:8f:
2e:7b:df:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:23:55 2025 by rpki-client