Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
File: mYS56xIiNxEcH4yldwfscwcpHug.mft (raw, json)
Hash identifier: s5TSjoJi8A59NIIS6+N3JX/wwrGXvbLPaf5ii8lLKJA=
Subject key identifier: 4E:01:0A:95:A1:BC:2B:86:FA:CF:59:4F:54:5D:88:CB:19:63:77:CC
Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
Certificate issuer: /CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Certificate serial: 01983DCF2A6557BECBD977987CDAFC6D585A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
Manifest number: 1600
Signing time: Thu 24 Jul 2025 19:00:43 +0000
Manifest this update: Thu 24 Jul 2025 19:00:43 +0000
Manifest next update: Fri 25 Jul 2025 19:00:43 +0000
Files and hashes: 1: 6xQaOng6ybJiigzf2XvWmzrMXU4.roa (hash: VWLbjjUJx9s0aleI0gYr1/W1oVoltzBATX0SfpaTSw8=)
2: XEpy5lCOl0Tmub4xGBtkQEupj7o.roa (hash: VFCRN96ZupXuhJWonAUO0kRSMoyUuFboGTCKurSs1xw=)
3: mYS56xIiNxEcH4yldwfscwcpHug.crl (hash: +Ap4ujwyIPriPncabxPCVvr3FpZEkjtLkVeMXlXZibU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:cf:2a:65:57:be:cb:d9:77:98:7c:da:fc:6d:58:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Validity
Not Before: Jul 24 19:00:43 2025 GMT
Not After : Jul 25 19:00:43 2025 GMT
Subject: CN=4e010a95a1bc2b86facf594f545d88cb196377cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:88:94:b7:6c:27:88:f6:1d:64:24:45:b1:fd:
e5:ab:2c:d7:12:ce:cf:0e:df:5d:5a:09:81:86:e2:
93:0e:eb:99:8a:52:56:bd:9c:09:86:ae:12:df:90:
c0:88:f3:da:2f:a7:07:12:fb:1e:17:6d:fc:89:a5:
71:8a:7b:29:35:aa:31:48:fd:17:13:aa:69:96:04:
84:14:4f:3c:91:83:29:89:2f:ab:bc:7c:fc:c5:4a:
d6:7e:be:00:18:7d:ae:05:55:e5:ed:cf:72:ac:3d:
a6:cd:f2:a6:bc:2e:b1:40:ec:7f:99:f0:41:f7:af:
96:32:e2:03:2f:37:b1:06:cd:8e:14:e8:45:73:63:
2e:fd:23:26:0d:76:eb:67:2f:a8:47:7f:b5:15:81:
f3:75:fb:a7:e0:6a:aa:42:cb:e0:42:a8:9d:23:9d:
c0:4f:44:aa:35:5c:61:4c:50:93:2b:f7:68:2d:20:
b3:f3:4c:ea:ed:d6:c9:82:94:57:71:d2:4a:1c:d3:
29:5d:b6:41:a5:3e:15:84:7e:4e:10:0b:ef:d2:c3:
b3:79:04:63:0b:20:0e:14:b2:fe:01:7b:6d:5c:4f:
72:9d:cc:14:44:5d:5c:12:a5:de:ae:c7:10:4e:61:
8b:c5:16:42:c5:2b:32:ec:34:7d:d3:92:97:d4:0a:
ec:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:01:0A:95:A1:BC:2B:86:FA:CF:59:4F:54:5D:88:CB:19:63:77:CC
X509v3 Authority Key Identifier:
keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:5d:71:24:c5:71:59:f4:61:93:51:c7:68:50:5e:72:78:06:
c9:99:8a:04:aa:77:af:1b:08:ee:9d:ed:73:a5:9b:ae:cd:9a:
67:d2:e7:3c:36:fb:d9:60:04:a7:f0:cb:c0:a4:7a:f9:af:da:
1e:7d:65:d9:2f:e9:7e:f1:c9:94:0a:59:f6:fe:98:ad:08:07:
6e:d1:93:12:da:40:71:f1:c0:4a:ea:48:9a:47:a7:c7:24:5c:
4c:ea:27:8f:3a:ea:c5:bd:f8:73:1a:1c:2a:f9:24:5b:c9:d1:
7c:c3:e2:6f:51:e9:50:b9:9c:9e:97:2b:3a:0f:25:db:39:cb:
53:d2:20:79:7c:0f:57:3c:71:aa:91:04:d0:d9:26:29:9a:82:
c2:8e:84:4a:ac:e6:a3:7c:09:53:93:fb:87:ff:6e:8b:c7:2e:
32:65:67:68:9f:7f:24:7f:f3:be:f2:30:6a:fe:49:4b:b2:9c:
b7:c7:e1:1c:b9:0b:da:ed:88:81:74:60:d2:5c:73:24:eb:5d:
38:ee:ce:e7:98:2b:d8:dd:99:e8:9e:e4:57:97:91:9e:79:c2:
3b:78:5d:07:a3:79:20:2e:c9:4f:8c:ac:bc:bc:84:eb:11:65:
5e:25:02:f5:8d:8c:09:a2:ff:95:bf:b1:b2:23:8c:b3:01:d2:
e5:b5:cc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:04:08 2025 by rpki-client