Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
File: RS59h5IhKd-QxIcNoqdzhARySFg.mft (raw, json)
Hash identifier: pN9qoH+uYyEEkzFHaU76k+YGxj6JTpuy1FOBd4hQW4c=
Subject key identifier: 27:C8:FB:B5:80:12:CE:7B:BE:C6:F1:E2:18:10:3B:4C:77:D9:02:27
Authority key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
Certificate issuer: /CN=452e7d87922129df90c4870da2a7738404724858
Certificate serial: 0199180A6C3302AE19D315D819388B6CDB30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
Manifest number: 04C1
Signing time: Fri 05 Sep 2025 04:02:40 +0000
Manifest this update: Fri 05 Sep 2025 04:02:40 +0000
Manifest next update: Sat 06 Sep 2025 04:02:40 +0000
Files and hashes: 1: 4ZmOjsOwgULv_B_QMvBBmXG9f0w.roa (hash: x7k9BFugEad58s4inzjh5oIEa4SPB8OHd1xRzbFg5n8=)
2: BuhLOhQsyBTsy289mKisTf0E47Q.roa (hash: aKuhf01k9TU7vUcFwfvkZL/qxoA5uBGJCmVJQlfg6tY=)
3: RS59h5IhKd-QxIcNoqdzhARySFg.crl (hash: ldaQ8+Y7GU0c3DgWuEvVkxH+rp67EMgC5/yb8O+e7+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:0a:6c:33:02:ae:19:d3:15:d8:19:38:8b:6c:db:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452e7d87922129df90c4870da2a7738404724858
Validity
Not Before: Sep 5 04:02:40 2025 GMT
Not After : Sep 6 04:02:40 2025 GMT
Subject: CN=27c8fbb58012ce7bbec6f1e218103b4c77d90227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:43:60:84:45:27:1f:d1:1b:bb:20:1f:d0:1e:
45:5f:3d:64:d6:04:6c:3d:c0:cd:0d:70:e1:a6:ec:
c0:4e:2d:73:58:ea:a4:70:cd:97:21:62:8b:46:f5:
1c:f4:c7:1e:2f:24:88:36:c4:b6:11:19:80:4c:15:
10:97:37:85:2f:09:b6:45:b2:ea:24:62:e9:99:d4:
c4:7b:57:53:12:a6:4d:67:c5:3a:78:99:70:c8:21:
0b:04:93:68:33:02:21:de:b8:24:c9:64:e6:13:8a:
7a:10:e7:fb:b3:7c:52:75:16:8a:5a:b1:4f:f2:65:
27:db:2b:13:bd:29:2c:67:d6:4f:85:66:e4:6a:e3:
17:df:58:f7:f5:d7:8a:57:26:f8:f6:c5:7a:44:33:
fc:29:34:82:56:82:e7:af:dd:c0:ab:a5:41:1c:a5:
c1:38:0f:ed:9b:85:bb:56:c2:53:b6:68:c1:ce:86:
5d:b6:df:d2:e8:53:78:25:f2:c9:01:2f:e4:3c:e5:
99:7e:a4:11:ad:1e:2d:e3:42:ab:5a:cc:2b:94:37:
15:fb:2d:04:bc:fd:02:76:3c:62:93:7b:2e:1a:73:
59:15:09:14:a9:ca:e6:26:c0:b4:63:f1:3a:7b:c6:
3c:e8:66:05:70:52:ad:8d:2f:93:a4:c0:e1:db:8c:
6b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C8:FB:B5:80:12:CE:7B:BE:C6:F1:E2:18:10:3B:4C:77:D9:02:27
X509v3 Authority Key Identifier:
keyid:45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1a:51:1d:bb:c6:00:0a:9d:4e:13:a9:12:6f:8d:73:fe:b1:
c1:d3:7e:af:2d:da:e3:8c:83:d0:d0:2b:fc:72:1b:3a:27:c4:
72:f8:52:c3:8c:b6:55:1d:ae:9b:3a:46:a2:24:28:16:02:1b:
5a:35:d3:e7:6b:fd:6e:ba:60:cd:dc:1a:1b:58:be:81:e6:95:
b2:20:63:2b:ad:5d:83:bb:a1:bf:86:ba:19:b5:68:ea:80:fb:
ef:73:63:5b:df:e0:92:05:fb:9e:46:09:43:9b:55:e6:57:20:
77:00:93:84:24:1d:2d:67:7c:7a:62:61:d4:c2:d8:9d:e8:ce:
bf:e2:f9:03:f0:46:e9:fb:4a:44:6d:ea:2f:fe:04:5a:bf:20:
1b:6a:aa:00:2c:de:ce:bf:ff:37:32:23:c9:48:7a:81:10:19:
cc:e6:14:2f:5d:b5:fc:4d:62:f8:5a:cf:08:67:8f:b3:81:69:
07:06:0f:f7:b3:ca:bc:73:a0:31:c9:f6:7e:c1:96:ad:7a:bf:
b6:ee:df:de:a3:7a:b1:1f:88:05:2d:76:f8:22:94:ab:14:05:
92:c9:d0:1a:0a:63:5e:88:20:33:1f:11:26:fc:32:12:d4:9d:
ee:61:37:8e:cf:47:b2:b4:98:cb:c6:d6:15:5d:9c:4e:b2:54:
21:cb:cf:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 11:30:19 2025 by rpki-client