Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
File: usA65sVFitKAdlulUnmAoG_sI6g.mft (raw, json)
Hash identifier: gsR6F1t4vJndH8QIdKdRLg7x6CIUuJIn2+KMQrByJ/4=
Subject key identifier: 3F:53:BE:2C:C7:E7:D2:DB:C8:49:1C:33:79:3A:1D:E2:17:3C:5E:CE
Authority key identifier: BA:C0:3A:E6:C5:45:8A:D2:80:76:5B:A5:52:79:80:A0:6F:EC:23:A8
Certificate issuer: /CN=bac03ae6c5458ad280765ba5527980a06fec23a8
Certificate serial: 01984A77EB00EC74358ACD74BB1D8DFFFCC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 06:00:29 +0000
Manifest this update: Sun 27 Jul 2025 06:00:29 +0000
Manifest next update: Mon 28 Jul 2025 06:00:29 +0000
Files and hashes: 1: umBmq8XFX-zXziXQ4pyACUgy-FQ.roa (hash: JuI2qHr6MZgrFWdKqrf8sXobXSWHVnMHISH4QdZzmLE=)
2: usA65sVFitKAdlulUnmAoG_sI6g.crl (hash: NKgN6DiuqLzhBR9oJjolHUBzfm1/V1+830Cul5w7W+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:eb:00:ec:74:35:8a:cd:74:bb:1d:8d:ff:fc:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bac03ae6c5458ad280765ba5527980a06fec23a8
Validity
Not Before: Jul 27 06:00:29 2025 GMT
Not After : Jul 28 06:00:29 2025 GMT
Subject: CN=3f53be2cc7e7d2dbc8491c33793a1de2173c5ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5b:b6:16:08:fc:40:5c:89:83:7a:6b:5b:7b:
67:01:7b:5e:96:0f:43:64:5c:c6:78:20:4c:00:74:
d0:2d:74:8b:bd:53:aa:4d:1b:06:1e:a7:53:4c:65:
64:5a:74:28:ac:8f:5a:39:25:0a:b8:71:21:69:44:
28:1d:c5:c6:cd:b7:47:c6:4a:0d:1c:0d:cb:b7:73:
b6:6b:4c:ec:15:6e:1c:b4:2d:4f:36:36:03:65:dd:
aa:91:ce:03:5d:55:f0:4f:e6:95:76:1d:74:72:5b:
65:58:61:2c:4a:67:38:bd:5a:0d:11:e0:aa:d8:25:
c4:5e:ee:d1:96:6c:4c:92:4a:9d:8a:89:60:9b:9e:
d8:91:7f:ad:32:ec:ff:81:40:1a:2a:14:9f:56:23:
06:81:3c:78:a4:18:64:a1:01:1e:fe:3f:45:90:86:
8e:63:06:22:04:5a:47:78:97:17:2c:33:fd:33:d6:
d1:f4:bf:17:71:fb:01:31:5b:fd:84:b4:7e:32:a4:
8b:a5:84:c2:f2:9c:86:19:e4:68:f2:7b:48:4b:bc:
34:1d:93:be:5a:a3:8d:3e:dd:94:cb:87:c2:42:1e:
bf:b0:fa:2c:1f:d1:34:50:b7:8a:13:4c:4e:74:7c:
d9:67:a1:53:6d:76:54:5c:7c:5f:2a:27:b7:19:1a:
24:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:53:BE:2C:C7:E7:D2:DB:C8:49:1C:33:79:3A:1D:E2:17:3C:5E:CE
X509v3 Authority Key Identifier:
keyid:BA:C0:3A:E6:C5:45:8A:D2:80:76:5B:A5:52:79:80:A0:6F:EC:23:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:56:f4:7c:f1:49:49:c2:9d:aa:f3:79:01:ea:ba:55:bf:01:
f7:05:ad:6f:11:e9:a6:13:c0:af:1d:bc:45:87:ea:2b:60:e4:
71:6a:10:40:73:a7:f7:2d:f6:4e:03:40:d5:37:00:76:ce:bf:
94:2c:09:4f:7b:f9:a0:29:25:94:43:ea:be:17:88:71:6c:76:
5c:32:0b:c6:d8:e5:06:b8:69:6d:a3:6b:db:c4:61:09:90:84:
7a:0d:9a:7f:8e:5a:eb:ac:da:51:00:ff:86:38:34:11:22:5f:
84:fd:30:65:b1:cc:aa:42:a7:52:66:36:b9:d9:c6:70:ee:0c:
34:e9:29:c6:3c:bc:d1:1b:cd:d8:0f:9d:94:43:c3:95:e5:53:
21:9a:f1:30:ff:4f:01:8b:4e:89:a7:de:f1:c8:e3:55:07:1f:
37:31:65:94:30:97:16:66:84:5c:ef:65:4f:14:ee:9f:43:6f:
1d:c4:0c:c6:b8:eb:85:c5:fc:5c:fe:a4:b2:0e:ba:79:96:e5:
ab:fd:4f:6a:af:70:2f:fd:35:be:61:ca:ba:de:87:43:bf:96:
90:a3:c6:d7:44:58:ae:28:e5:11:4f:06:a0:e6:db:e5:9f:c3:
8c:e6:1c:56:e6:f2:14:c2:51:48:35:36:ae:c3:60:32:23:55:
c3:34:48:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:22:05 2025 by rpki-client