Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
File: RGFYx1seMgOyK1g8wYTD9UiLJdY.mft (raw, json)
Hash identifier: DTgsQSqd88qIM/M6luQIL8Nk569DEaaE/Aty9+PY11k=
Subject key identifier: 9B:BD:4B:FF:EE:F7:DA:F9:9D:F8:B6:09:DA:05:EF:DC:C1:66:3D:7E
Authority key identifier: 44:61:58:C7:5B:1E:32:03:B2:2B:58:3C:C1:84:C3:F5:48:8B:25:D6
Certificate issuer: /CN=446158c75b1e3203b22b583cc184c3f5488b25d6
Certificate serial: 0197665F98BE7711EC5C9B42C630FA790E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
Manifest number: 1358
Signing time: Thu 12 Jun 2025 23:00:30 +0000
Manifest this update: Thu 12 Jun 2025 23:00:30 +0000
Manifest next update: Fri 13 Jun 2025 23:00:30 +0000
Files and hashes: 1: RGFYx1seMgOyK1g8wYTD9UiLJdY.crl (hash: vFWJEdItbxm51DXwdP/Rf0KMR7vWZxzJwR9bQaazlso=)
2: VIvZu8tQokm1xiej3HARVMmJcks.roa (hash: ZzmGdbDE4kWOnJhlJzMP8vBrXKF4L54dsaKlIHnEfEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:5f:98:be:77:11:ec:5c:9b:42:c6:30:fa:79:0e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=446158c75b1e3203b22b583cc184c3f5488b25d6
Validity
Not Before: Jun 12 23:00:30 2025 GMT
Not After : Jun 13 23:00:30 2025 GMT
Subject: CN=9bbd4bffeef7daf99df8b609da05efdcc1663d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c4:cc:40:9d:b9:4c:86:88:33:02:ee:ea:76:
93:f8:64:86:e4:2d:9a:1b:70:d2:8a:7a:f2:37:1e:
ed:8b:cb:0f:bc:ab:0f:1c:06:8c:5b:89:75:16:73:
7f:63:89:77:12:75:1a:89:b2:36:98:cd:4c:58:d5:
ea:8d:6e:ab:72:29:a3:a0:a2:4d:fe:b9:bb:3e:1e:
fc:da:2e:c8:77:7c:14:34:61:fa:bb:0b:96:44:bb:
9d:79:d3:54:e5:34:bc:3f:85:22:84:1a:0a:5d:11:
57:3a:6c:4c:7d:5a:7e:0d:b8:ea:78:b2:69:77:df:
8c:43:74:53:ac:66:b2:c1:94:c4:a6:60:e0:5c:06:
cf:09:78:b6:9b:da:81:e9:00:24:75:dd:44:2e:ab:
93:a5:b7:ac:a9:e3:a2:aa:67:d5:8a:a7:10:5b:88:
08:e1:5e:18:5d:38:34:cd:d5:8d:85:ed:e7:0d:17:
05:ef:64:c8:b4:6b:94:76:91:71:97:cc:92:09:c5:
df:29:bb:cf:03:dd:dd:e2:4a:0b:ed:04:3d:e8:fa:
74:e3:8c:41:7a:24:02:2f:79:c1:e8:00:9c:e5:b2:
cc:34:f8:24:f3:6f:44:06:99:9b:18:01:39:e6:d7:
9a:56:23:98:73:ee:6a:60:75:09:6d:5e:c0:8a:1c:
33:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BD:4B:FF:EE:F7:DA:F9:9D:F8:B6:09:DA:05:EF:DC:C1:66:3D:7E
X509v3 Authority Key Identifier:
keyid:44:61:58:C7:5B:1E:32:03:B2:2B:58:3C:C1:84:C3:F5:48:8B:25:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e6:74:7f:1a:87:e2:0d:6b:5b:1c:db:ff:27:e5:d0:8c:a8:
c8:dd:a3:96:cc:5c:1b:30:e8:d5:84:7f:d7:59:5e:87:1e:bc:
da:98:3a:b5:f5:5e:96:9a:7e:80:54:05:9e:13:11:35:43:cc:
63:0f:84:a0:8e:51:e8:93:af:21:64:72:95:87:70:39:82:35:
f9:68:22:6d:9d:94:24:0e:13:98:28:b5:3b:53:d0:49:2e:9e:
92:6a:d3:0b:21:2a:2f:ff:ae:aa:11:91:f7:f3:98:bd:47:e4:
ca:01:aa:91:04:d4:7c:b7:e6:01:0b:df:ce:38:6f:f4:2e:6f:
ac:b7:75:f5:0d:6c:77:43:6a:57:79:20:88:4b:7e:23:99:11:
b3:03:b7:ab:dc:d4:55:34:31:4c:78:c3:d4:7e:97:f9:b6:ad:
dc:58:b0:d2:62:15:77:13:22:af:39:b3:23:c2:2e:79:c5:fe:
33:40:bf:61:ff:18:9e:4c:f9:5c:6d:7c:91:2b:d3:26:e7:64:
09:d7:4f:65:10:20:e9:0f:61:ed:1f:44:c4:c2:b7:02:ae:8a:
b5:77:8a:85:be:60:c9:5f:cb:46:41:7b:65:df:10:03:d4:59:
22:88:1e:cb:4a:d9:38:15:1e:21:fd:8a:4f:8f:50:fd:a6:39:
50:5b:d7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 07:02:04 2025 by rpki-client