Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
File: RGFYx1seMgOyK1g8wYTD9UiLJdY.mft (raw, json)
Hash identifier: 4g12O7RiIGnlHxCPOSms/QDCKtkeHeW85loPsdCzenU=
Subject key identifier: 4E:7F:0F:AE:E0:F8:78:3D:6C:C6:2C:8C:0C:EE:AB:97:A7:CF:F2:22
Authority key identifier: 44:61:58:C7:5B:1E:32:03:B2:2B:58:3C:C1:84:C3:F5:48:8B:25:D6
Certificate issuer: /CN=446158c75b1e3203b22b583cc184c3f5488b25d6
Certificate serial: 01975EA604097B9A4FD2B5B42629D14C0C5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
Manifest number: 1354
Signing time: Wed 11 Jun 2025 11:00:27 +0000
Manifest this update: Wed 11 Jun 2025 11:00:27 +0000
Manifest next update: Thu 12 Jun 2025 11:00:27 +0000
Files and hashes: 1: RGFYx1seMgOyK1g8wYTD9UiLJdY.crl (hash: tFpuXtjl2pRwssQNmbGCy9D0KiN9oi85g3pomBAd6CM=)
2: VIvZu8tQokm1xiej3HARVMmJcks.roa (hash: ZzmGdbDE4kWOnJhlJzMP8vBrXKF4L54dsaKlIHnEfEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:a6:04:09:7b:9a:4f:d2:b5:b4:26:29:d1:4c:0c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=446158c75b1e3203b22b583cc184c3f5488b25d6
Validity
Not Before: Jun 11 11:00:27 2025 GMT
Not After : Jun 12 11:00:27 2025 GMT
Subject: CN=4e7f0faee0f8783d6cc62c8c0ceeab97a7cff222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5a:7d:3c:cd:8b:b6:a8:2e:45:d1:db:6d:32:
a0:28:97:ca:31:71:1b:7a:18:00:ed:41:9b:1d:b3:
ce:6c:cf:ff:9c:4d:d5:b1:eb:ec:e6:25:89:c9:84:
49:73:48:1e:61:fb:f7:0c:90:eb:0a:13:e7:7f:4a:
54:01:ec:1d:8b:8d:d2:e6:2c:c0:05:89:75:9b:6a:
65:fb:5b:9a:28:0a:56:d5:b2:dd:51:2b:e1:b5:f2:
1c:49:d6:23:7f:04:cf:86:99:d9:f0:85:c4:50:76:
ac:6b:03:35:71:4c:66:70:dd:58:37:f5:78:8b:88:
85:f3:a2:e7:31:79:3f:4d:c7:d9:23:f4:f1:86:33:
a7:b2:ca:21:97:b8:90:7b:74:1c:9f:8f:29:ac:9c:
fe:4f:90:3c:90:f2:ac:54:e8:8a:25:12:8c:c3:44:
80:8e:62:33:18:0e:0e:c7:fe:1d:a0:24:b4:42:2d:
80:62:88:a1:38:13:e6:99:33:74:a9:93:d2:6d:2d:
06:88:01:3b:70:cd:fa:9b:ad:0c:0b:1a:00:53:48:
79:6e:0c:1e:f0:ac:b7:46:ea:13:87:cc:ae:1d:50:
31:a5:37:d7:6a:00:45:1f:76:e5:f3:9a:1d:82:7a:
ae:46:20:33:8d:70:29:b7:f9:cd:0f:29:0f:04:c2:
14:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7F:0F:AE:E0:F8:78:3D:6C:C6:2C:8C:0C:EE:AB:97:A7:CF:F2:22
X509v3 Authority Key Identifier:
keyid:44:61:58:C7:5B:1E:32:03:B2:2B:58:3C:C1:84:C3:F5:48:8B:25:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:cc:fc:5c:83:7a:78:c5:c8:8f:75:e5:50:9e:22:70:09:81:
53:b0:79:aa:98:c9:75:ae:d7:48:eb:6a:5e:8d:46:7b:66:0f:
b8:a5:3b:14:a6:7c:69:80:dd:e5:dd:66:99:58:08:6c:b8:c8:
36:73:3f:1f:6a:c6:85:51:4b:b3:d4:4d:a9:e1:34:81:56:03:
51:d6:ef:1c:f3:3f:8b:44:10:6d:80:c9:f8:68:73:e8:58:8b:
6c:56:87:a0:7a:13:29:18:18:4d:62:b0:fd:63:24:92:da:da:
f5:dc:b8:b9:1f:d7:c5:1d:11:75:89:02:b9:cc:10:65:1b:2e:
db:e6:a7:d7:5a:38:f9:3e:36:a2:c2:51:f4:b7:5e:ca:a3:24:
eb:5d:8f:08:1b:d7:c9:88:ce:9a:87:97:dd:8c:0c:f1:b1:88:
e7:ff:46:e9:86:0a:9a:76:c1:b9:c8:6a:48:a0:56:7d:25:96:
33:f7:85:8b:13:59:50:3e:ca:b4:e4:80:0d:63:65:cd:27:90:
9a:ab:cb:69:ad:7a:57:0a:31:ac:14:8d:da:e2:53:6f:6b:a2:
66:29:de:fa:fd:4b:10:9f:f6:15:02:19:de:ee:35:c8:0d:7e:
c6:bb:68:b4:5e:75:68:b7:3c:78:59:a8:2d:bd:d1:99:2d:c1:
27:f1:76:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:49:28 2025 by rpki-client