Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
File: RYg0xSq-MEJ_CiKqRv09CAntRYU.mft (raw, json)
Hash identifier: Lp5F5kNWlX7g5EoWsMS6tPwUO9xNeqt7bEUqrW4IPmY=
Subject key identifier: FB:B8:C7:FB:7C:6A:E4:CC:CF:5E:9E:C8:BB:28:CB:10:E8:7F:8D:04
Authority key identifier: 45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
Certificate issuer: /CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Certificate serial: 019849D2D8B2C121588EB308786861FC9A0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
Manifest number: 1607
Signing time: Sun 27 Jul 2025 03:00:11 +0000
Manifest this update: Sun 27 Jul 2025 03:00:11 +0000
Manifest next update: Mon 28 Jul 2025 03:00:11 +0000
Files and hashes: 1: 9EAsH9WiZD4VxilaYIDfYTgwfr8.roa (hash: S6lIJn8kLzJ0SR0mYeMv6RwOAdGOeRdde/Wo386MMZ0=)
2: RYg0xSq-MEJ_CiKqRv09CAntRYU.crl (hash: uY6kT/txEU2558AaVhDz9DVE+EuGf4G1DutYFymdyug=)
3: Rd3HOWCgIifcE20uT6ZwMTd010E.roa (hash: Iyh7ZN8yRmO6xUm0HuFbl9LY6LaOBla7JBeUoV6oKtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:d8:b2:c1:21:58:8e:b3:08:78:68:61:fc:9a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Validity
Not Before: Jul 27 03:00:11 2025 GMT
Not After : Jul 28 03:00:11 2025 GMT
Subject: CN=fbb8c7fb7c6ae4cccf5e9ec8bb28cb10e87f8d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:89:8c:a0:f4:fe:05:30:8e:19:09:bb:39:cb:
40:b5:b6:4a:ad:a2:f6:92:a4:a0:72:48:64:06:b4:
3f:b7:42:54:0d:a4:2b:57:28:d3:5a:2f:7f:bf:e4:
4d:b6:20:8d:2c:51:88:fa:fc:e2:b4:91:ef:16:ed:
33:29:ac:73:f4:09:81:b6:c8:e9:58:fb:ab:c3:ae:
05:ce:60:b3:c7:a2:36:92:0f:40:c1:bd:35:07:44:
88:e2:63:de:13:a9:92:f3:40:82:c9:c4:19:05:83:
de:37:60:49:77:05:f1:8f:d3:48:70:43:9e:af:4e:
63:6a:23:c2:d2:67:46:54:d5:bb:6e:4e:8f:3c:6a:
01:3e:67:3b:82:dc:aa:43:dd:4a:39:73:f0:ca:a6:
5e:78:e7:92:2c:52:04:4a:28:2c:19:87:7e:33:bc:
cf:4b:11:6a:ce:a9:85:ad:04:51:98:42:b2:dd:83:
f8:20:c4:3d:cd:df:72:87:cc:52:22:c5:43:ae:03:
e4:3a:bf:2c:8b:1e:f8:d0:7e:1b:72:3d:7b:a9:4e:
54:b2:72:0f:62:62:89:ea:07:62:bb:4e:3d:13:9d:
8f:8a:42:98:0d:30:20:ef:14:94:fd:b8:30:df:fc:
64:21:26:c8:1b:04:4d:13:d0:8b:2b:40:07:7f:4c:
e3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B8:C7:FB:7C:6A:E4:CC:CF:5E:9E:C8:BB:28:CB:10:E8:7F:8D:04
X509v3 Authority Key Identifier:
keyid:45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:82:3e:d2:4e:82:cb:9a:73:6f:fe:f9:74:1b:f6:47:c1:84:
5a:60:bb:da:2b:50:b6:93:10:03:45:16:07:86:ab:15:7b:58:
21:13:5c:92:ce:31:65:a8:ac:18:b0:3b:46:ba:c5:3e:1a:d1:
73:a0:33:4e:b7:81:05:15:84:21:52:4e:85:91:2a:8c:c4:8a:
89:fe:7e:92:a0:4e:1b:7f:6c:f5:cb:ef:8d:ec:f7:e5:a2:8c:
28:8f:49:5e:ad:94:05:f0:a8:dc:2b:42:47:29:cc:85:4e:17:
49:e2:1f:1e:48:a6:86:dc:02:8e:44:aa:4d:7f:a2:e4:76:18:
84:e9:4a:4f:53:d6:8f:09:ca:69:ae:d5:ec:db:cb:55:4c:b8:
eb:c8:ec:90:cc:64:83:d9:9a:ea:e4:8b:a3:a6:22:88:ff:a1:
5f:ce:cf:8c:a3:93:c3:cf:c6:8b:74:88:b9:1d:c5:3a:15:ec:
88:f7:b8:8e:2a:87:24:67:e8:7c:34:74:aa:e9:e3:54:2b:bf:
87:da:e5:e7:53:6a:74:4e:5b:19:61:fb:6a:d2:90:83:6b:db:
c9:93:a4:3a:52:35:09:2b:38:88:31:2c:7f:3d:3b:70:f4:f6:
11:4e:ad:b4:dd:da:02:4d:aa:45:91:0f:4f:62:55:cc:03:eb:
8e:2e:a3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:09:29 2025 by rpki-client