Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.mft
File: RdGncWAlFxEzoyAslGKg6r1mBoI.mft (raw, json)
Hash identifier: 7xKIj4q8uZkQa7eONZQmVo01k79zB1bWolQaGGvPSxQ=
Subject key identifier: 39:92:2F:58:E8:26:2E:DE:78:01:89:D8:9C:8E:20:E8:42:AD:DF:40
Authority key identifier: 45:D1:A7:71:60:25:17:11:33:A3:20:2C:94:62:A0:EA:BD:66:06:82
Certificate issuer: /CN=45d1a7716025171133a3202c9462a0eabd660682
Certificate serial: 019851FAC07FE049730F50E08252B13243A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RdGncWAlFxEzoyAslGKg6r1mBoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.mft
Manifest number: 059A
Signing time: Mon 28 Jul 2025 17:00:44 +0000
Manifest this update: Mon 28 Jul 2025 17:00:44 +0000
Manifest next update: Tue 29 Jul 2025 17:00:44 +0000
Files and hashes: 1: RdGncWAlFxEzoyAslGKg6r1mBoI.crl (hash: bvO4Z7bxz5Zw51W5i5fDluaX7WidGYr7mnt8F7NzQWU=)
2: p6pII2yeX9CFzHUBZ-7ECA5XoLc.roa (hash: a0i/QIPJclzVoZAHggGCZw2DH9on4V8xPPUo2d8z17I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RdGncWAlFxEzoyAslGKg6r1mBoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:fa:c0:7f:e0:49:73:0f:50:e0:82:52:b1:32:43:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45d1a7716025171133a3202c9462a0eabd660682
Validity
Not Before: Jul 28 17:00:44 2025 GMT
Not After : Jul 29 17:00:44 2025 GMT
Subject: CN=39922f58e8262ede780189d89c8e20e842addf40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:9d:1d:cb:09:09:1f:36:20:de:45:99:ac:
98:5d:72:a5:0a:df:19:16:8a:fb:21:91:81:cc:85:
c3:99:be:93:26:6f:8e:7a:94:0b:3c:e9:7a:2b:e9:
f7:80:1d:4c:c8:a9:1d:c5:22:cb:c9:86:fe:9d:3b:
54:6f:c8:39:4b:11:06:7e:fc:ce:f3:ae:c2:d5:1f:
d5:a2:c9:96:52:cf:a8:86:e6:c4:7f:38:a8:f9:53:
8e:8d:46:97:24:7b:aa:3e:a7:0a:7a:d2:19:96:ed:
94:5f:5e:d3:df:31:c1:52:91:10:19:9d:1e:7d:13:
67:e6:1d:e9:44:65:3a:e7:9d:0c:0f:82:d0:e5:c9:
03:00:de:ea:39:9d:94:61:40:55:41:90:39:db:fd:
68:90:20:81:fd:f4:b0:8d:80:61:27:ce:32:43:27:
99:1e:02:8f:f7:ca:59:35:0d:44:4a:26:e0:80:4c:
dc:97:e9:af:b3:b9:91:b2:1b:0e:5b:a4:76:f7:5e:
ae:ce:17:5c:ef:87:38:1b:e4:c1:af:c6:5f:5f:ca:
55:e2:db:86:77:a1:fb:b6:52:de:22:57:d1:36:a0:
7e:6c:fb:1e:49:53:20:cd:29:ca:cc:8c:af:80:66:
d7:a2:60:47:df:28:61:76:58:b2:24:09:c3:e3:bf:
ad:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:92:2F:58:E8:26:2E:DE:78:01:89:D8:9C:8E:20:E8:42:AD:DF:40
X509v3 Authority Key Identifier:
keyid:45:D1:A7:71:60:25:17:11:33:A3:20:2C:94:62:A0:EA:BD:66:06:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdGncWAlFxEzoyAslGKg6r1mBoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b9:77:74:17:86:19:af:1a:c6:33:22:3a:43:8e:bb:59:43:
04:89:f5:e5:61:4a:5a:e0:38:72:c9:59:86:d8:2d:de:bb:d4:
9e:22:d7:f7:98:71:9e:2d:1c:3b:5a:43:2c:64:a6:cb:ba:61:
42:76:9a:9b:0a:35:e1:27:c6:e0:e5:3f:c8:c9:80:9a:aa:ec:
68:fe:44:22:7a:1e:8f:67:b9:6d:0e:eb:bd:31:fc:14:17:4d:
6a:6d:6b:41:8d:b7:29:97:3b:4a:fa:b1:19:58:9b:68:4c:af:
82:5f:66:dc:96:bc:41:f2:fe:61:c0:32:5c:41:a5:30:bd:e0:
7a:04:8c:93:cf:0a:71:8d:5a:34:69:5e:f5:44:88:27:a4:9a:
ad:65:06:6d:eb:7c:1a:81:3b:99:22:69:e8:4a:4d:ce:36:20:
29:e6:e3:ed:41:4c:bd:74:f5:78:11:4c:a7:46:b1:c2:1a:b2:
d7:30:a0:8a:07:aa:d6:71:fa:b6:43:0d:5d:70:bf:93:e8:1d:
ea:ca:98:e3:93:24:ea:02:d0:7f:2c:1d:7b:29:78:24:3f:a2:
1e:7b:fe:04:41:5b:02:ac:bb:58:d1:a5:e2:b0:be:cb:25:6c:
1b:09:34:df:47:d1:28:a4:b8:24:55:c2:de:1b:7a:c6:c0:bb:
77:ab:9d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 23:02:25 2025 by rpki-client