Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
File: RYg0xSq-MEJ_CiKqRv09CAntRYU.mft (raw, json)
Hash identifier: d7nzgqFC2JVxf2aPsoXnXsi9BW6zTKU1CL9BKGYUqQY=
Subject key identifier: 36:B0:C6:B8:EE:5C:9D:65:EF:B2:02:40:C5:B2:7A:3F:D3:ED:98:03
Authority key identifier: 45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
Certificate issuer: /CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Certificate serial: 01974DE9E1849EDB0B83D23391CA15383F95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
Manifest number: 1584
Signing time: Sun 08 Jun 2025 05:01:02 +0000
Manifest this update: Sun 08 Jun 2025 05:01:02 +0000
Manifest next update: Mon 09 Jun 2025 05:01:02 +0000
Files and hashes: 1: 9EAsH9WiZD4VxilaYIDfYTgwfr8.roa (hash: S6lIJn8kLzJ0SR0mYeMv6RwOAdGOeRdde/Wo386MMZ0=)
2: RYg0xSq-MEJ_CiKqRv09CAntRYU.crl (hash: geOTPfW98RETEIsU+n9oYRC3g5TEK0jSvocPZpfRNJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:e1:84:9e:db:0b:83:d2:33:91:ca:15:38:3f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Validity
Not Before: Jun 8 05:01:02 2025 GMT
Not After : Jun 9 05:01:02 2025 GMT
Subject: CN=36b0c6b8ee5c9d65efb20240c5b27a3fd3ed9803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8b:55:e1:06:8d:d5:d1:88:d9:62:82:72:c1:
3e:6e:34:cd:30:5b:9d:ba:29:3e:ef:f8:a7:74:5b:
60:71:bd:07:d6:4a:26:87:7a:1a:40:6d:c5:35:85:
1c:6b:49:4a:a0:22:e6:02:3f:27:36:fb:81:04:8b:
aa:1d:04:80:1d:77:d2:81:50:21:09:7e:07:fd:41:
8d:f0:87:f0:e0:be:78:8c:e6:f1:d3:49:f2:4e:2d:
11:05:02:82:5d:3e:67:6a:9b:d2:ed:99:86:b5:d5:
a5:76:61:1e:16:3e:ea:53:ad:31:0b:59:d3:66:63:
63:df:71:79:13:e5:3d:f7:3a:af:d9:d6:1d:32:27:
4b:90:59:d2:ef:da:2e:37:9e:05:a0:6d:8e:d4:bb:
35:17:50:92:4e:e9:5a:aa:d4:fe:83:db:39:e6:6e:
c1:59:a4:53:a0:6c:03:d9:c0:b2:ba:9d:97:40:ae:
6e:d9:c0:10:3d:c6:99:04:5a:a0:62:a0:18:ac:83:
78:ed:59:8a:39:6f:35:44:49:07:d8:16:e0:0b:d9:
8f:53:4e:45:1e:2a:b4:0a:e9:df:af:ff:d4:2d:56:
50:be:3f:78:81:26:a5:9b:45:fb:0b:2a:02:7b:f9:
8d:83:c4:d7:14:5b:4a:d8:17:6a:6a:88:4f:15:10:
f0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B0:C6:B8:EE:5C:9D:65:EF:B2:02:40:C5:B2:7A:3F:D3:ED:98:03
X509v3 Authority Key Identifier:
keyid:45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:dc:cf:c1:96:1c:c6:91:61:7f:f5:d1:41:71:07:7d:5f:e8:
d4:9a:1b:65:ae:8d:35:22:e4:96:7c:f5:c5:c7:16:5f:c9:56:
5f:9f:b9:24:61:bf:a3:9c:cd:5b:e0:cc:13:ac:8b:0d:22:f5:
46:64:60:28:a2:87:87:c7:14:d1:f1:b6:59:c7:a9:a9:48:f8:
29:0c:e5:bf:63:b9:3a:b3:88:f8:d3:35:36:61:18:16:ff:d5:
f1:0d:b0:13:c1:f1:6d:bb:a7:23:55:6b:b2:27:db:17:e3:59:
73:ba:22:e8:bd:9d:0d:a9:05:68:93:9a:13:ec:b0:68:e5:ad:
7a:31:ac:32:eb:77:fa:fc:d4:68:00:a8:fd:3b:c0:29:42:53:
9c:06:f4:dd:6a:51:c3:b5:38:1d:12:eb:d0:7a:b1:57:9c:29:
5c:89:18:bb:70:d4:4a:81:8c:50:0b:ce:ba:a1:76:fb:95:47:
7c:37:96:7b:0f:02:31:a7:86:bd:79:b1:3d:6a:08:8e:48:19:
3d:81:8a:7d:5a:e8:b8:4c:29:9d:0d:ff:55:0b:cf:13:8d:3a:
37:e5:15:66:ec:0f:f1:a2:37:88:3b:fc:54:53:f6:c7:a5:b7:
8b:ce:84:d0:27:95:24:de:42:9a:35:4f:6a:cd:52:97:ed:d1:
63:95:4c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:11:59 2025 by rpki-client