Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
File: rUS-GO4-DSdHZwVV6GsACWXoE5s.mft (raw, json)
Hash identifier: GKhqWIH1BuajS5koWFmlf0bBC3Pdj+fJdgvl2bisvsY=
Subject key identifier: 10:BB:17:3F:9E:FA:24:FA:24:1A:4F:6C:74:6E:6D:A0:93:17:A6:B8
Authority key identifier: AD:44:BE:18:EE:3E:0D:27:47:67:05:55:E8:6B:00:09:65:E8:13:9B
Certificate issuer: /CN=ad44be18ee3e0d2747670555e86b000965e8139b
Certificate serial: 0198496504A915E4AF9E319B287C5F09DB42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 01:00:13 +0000
Manifest this update: Sun 27 Jul 2025 01:00:13 +0000
Manifest next update: Mon 28 Jul 2025 01:00:13 +0000
Files and hashes: 1: kX62bL3xBVpkyK0FphmC5iQUK74.roa (hash: GEBZd8qkO5malJhFWg729yyTB3o+issIVlA3FLkcy9o=)
2: rUS-GO4-DSdHZwVV6GsACWXoE5s.crl (hash: lHxkLOumb6fBVegY6EnlU2pa+/xXsD4FUi/j+RGIY1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:04:a9:15:e4:af:9e:31:9b:28:7c:5f:09:db:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad44be18ee3e0d2747670555e86b000965e8139b
Validity
Not Before: Jul 27 01:00:13 2025 GMT
Not After : Jul 28 01:00:13 2025 GMT
Subject: CN=10bb173f9efa24fa241a4f6c746e6da09317a6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:bb:91:9d:8f:82:9c:2b:9c:96:e9:a9:a7:
aa:52:a0:62:db:fa:18:8b:51:2f:21:bd:b1:b0:a9:
ca:81:ad:93:95:ff:6b:63:3a:ce:cd:2d:53:87:51:
f3:7c:0a:f3:2d:6f:cf:72:b1:54:ce:20:4a:07:0f:
a7:d7:7a:f8:d0:33:94:bb:0a:79:37:8d:08:67:bb:
36:7e:d5:21:ca:fb:dd:d8:88:33:8a:36:73:cb:df:
c1:3e:ad:60:cc:b0:bd:07:52:18:94:ef:4a:0c:c4:
32:1d:d0:9e:8c:eb:c0:99:1d:ca:61:94:57:96:9f:
01:97:b5:45:f8:f7:43:86:43:94:c0:4a:50:13:ae:
21:91:78:b1:69:93:41:b3:6e:78:b9:6f:f9:f1:10:
ad:e0:ae:1e:1c:53:ca:6a:5e:c4:a6:1c:3e:7f:c3:
38:9a:08:05:7e:df:fc:06:67:33:c9:08:23:da:90:
9e:c6:50:16:7b:60:36:0e:e0:90:d2:c9:ca:f4:31:
d9:c8:32:53:1b:66:11:53:98:29:11:46:1f:2e:6a:
f2:bd:06:49:4a:c6:5d:42:68:74:db:dd:87:f9:7e:
8d:bf:00:3e:3b:3a:e9:82:8c:dd:b6:af:7f:10:75:
b0:91:e4:ab:1e:8f:1d:a1:c1:c2:d4:6e:cb:f0:99:
a0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BB:17:3F:9E:FA:24:FA:24:1A:4F:6C:74:6E:6D:A0:93:17:A6:B8
X509v3 Authority Key Identifier:
keyid:AD:44:BE:18:EE:3E:0D:27:47:67:05:55:E8:6B:00:09:65:E8:13:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6d:4e:12:e5:c4:0e:5a:31:1d:5d:fd:57:31:43:53:c1:26:
a5:92:c3:28:c1:a6:c9:29:37:61:d1:df:15:29:9e:30:e6:72:
46:4f:77:cf:00:12:c9:94:c9:3f:b9:cf:81:54:6a:8c:be:e1:
9a:c1:cc:cf:f8:60:6d:5e:16:3d:32:4d:3c:a9:7f:a9:b7:e4:
91:37:3f:d7:3c:a0:2d:73:5f:67:61:ff:f2:ff:b9:86:e1:ac:
c1:71:cd:ac:b5:cd:a5:2c:6a:76:38:5b:b2:0b:a9:22:cc:ff:
41:8b:a3:47:cb:2a:46:98:13:4f:70:97:8e:e2:7c:cb:1e:92:
4a:80:7b:aa:b8:ab:3a:fa:ea:d2:96:5b:f2:0d:d4:65:aa:a1:
77:43:64:02:18:f5:27:64:4f:6e:b0:b7:0a:9d:fe:f7:35:99:
6f:29:54:2e:4b:af:e9:eb:8e:86:1d:bc:75:00:73:49:fb:e8:
eb:e3:e5:c3:35:6c:c8:6f:3f:c5:82:9a:60:f7:cb:63:15:24:
4e:31:14:82:7b:94:33:50:7e:3f:22:19:79:ea:27:eb:d4:a9:
aa:df:57:3a:d0:f7:6f:02:29:34:b2:aa:22:3e:55:0f:f1:bb:
b4:cf:b2:00:58:31:a0:9c:4f:78:b8:88:bf:e8:ad:b3:e0:26:
eb:63:48:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:14:19 2025 by rpki-client