Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
File: mYS56xIiNxEcH4yldwfscwcpHug.mft (raw, json)
Hash identifier: CQQ6MFEWg4RAqxeYGFdZJ56I739gxoZqWjGYfthKjvg=
Subject key identifier: 45:FE:BE:8F:73:01:E6:F1:A4:FA:B3:E3:D8:ED:EC:E9:18:8B:73:C4
Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
Certificate issuer: /CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Certificate serial: 01974A43E39C964B5E356D518A6234977B12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
Manifest number: 1582
Signing time: Sat 07 Jun 2025 12:00:52 +0000
Manifest this update: Sat 07 Jun 2025 12:00:52 +0000
Manifest next update: Sun 08 Jun 2025 12:00:52 +0000
Files and hashes: 1: 6xQaOng6ybJiigzf2XvWmzrMXU4.roa (hash: VWLbjjUJx9s0aleI0gYr1/W1oVoltzBATX0SfpaTSw8=)
2: XEpy5lCOl0Tmub4xGBtkQEupj7o.roa (hash: VFCRN96ZupXuhJWonAUO0kRSMoyUuFboGTCKurSs1xw=)
3: mYS56xIiNxEcH4yldwfscwcpHug.crl (hash: LlkIbbABoRcy8i7IOSRMIQcvzLgD45TuJtXkFGzjzvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:e3:9c:96:4b:5e:35:6d:51:8a:62:34:97:7b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Validity
Not Before: Jun 7 12:00:52 2025 GMT
Not After : Jun 8 12:00:52 2025 GMT
Subject: CN=45febe8f7301e6f1a4fab3e3d8edece9188b73c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0a:9f:48:07:fb:fd:6f:1e:9a:23:8a:dd:af:
c1:e6:1d:8d:09:f5:2c:6d:96:0c:05:a0:58:2f:cc:
14:11:ea:6e:56:73:82:ae:65:79:04:ca:e5:80:c6:
31:2f:74:d2:34:9a:f6:65:e6:52:e9:45:9a:11:b9:
5e:2c:08:8f:69:ab:57:f0:72:ca:18:56:02:62:21:
98:f7:d1:e8:50:53:26:92:ac:cf:b8:92:8c:9f:14:
89:b3:9d:a7:2d:b7:dd:57:48:d1:d7:3e:59:8d:16:
06:4d:10:0f:be:fb:eb:5c:48:13:e3:09:13:80:2a:
69:f1:ec:23:a9:61:9f:30:57:ff:13:23:21:e4:22:
9e:bb:1f:ad:68:d9:ee:4c:0b:b5:49:a6:33:0b:57:
cf:b1:89:12:a3:d0:66:75:9f:a9:39:b4:43:94:60:
de:3d:0c:63:c7:77:65:2f:ec:a6:e1:94:d1:df:0c:
1b:93:9c:2a:4a:51:42:51:b9:cc:d3:20:65:2c:7a:
53:c7:01:d5:e1:f4:66:3f:0e:57:90:1d:8c:e4:27:
c0:55:dc:a2:37:64:09:77:c4:f4:aa:71:53:84:fb:
f2:bd:cb:09:80:64:a7:82:41:5f:1b:ff:b6:0f:ee:
1c:c2:56:50:a0:08:61:35:d7:c6:5d:c2:ee:17:41:
e1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FE:BE:8F:73:01:E6:F1:A4:FA:B3:E3:D8:ED:EC:E9:18:8B:73:C4
X509v3 Authority Key Identifier:
keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:8f:5d:3d:ac:cb:95:c5:fb:01:71:49:75:ee:c4:2c:73:24:
ef:8c:21:48:71:45:3b:2a:d0:a1:3a:8b:67:e3:c7:ad:56:ca:
08:f5:bc:96:67:35:0b:e9:33:16:f2:8a:ee:86:0d:71:31:ff:
1f:13:c0:52:f8:4f:76:e7:2f:2d:67:1d:cd:bb:c9:1d:be:48:
ee:67:fd:06:7e:a4:15:38:4e:16:d1:29:56:66:8e:a2:a7:f5:
b0:96:73:41:93:c3:44:c7:dd:50:14:c9:52:2a:25:ed:d1:b9:
7e:eb:94:7f:df:a7:ad:ed:63:91:e6:a2:30:e8:ae:e2:53:55:
8a:3a:7b:e6:63:70:af:b0:dc:cd:05:74:25:34:5c:57:91:76:
f3:37:1b:03:3f:15:5e:dd:4a:a6:17:0b:8f:d2:c0:86:f7:45:
2d:5b:af:e9:da:2c:9f:c3:bb:87:0c:48:54:01:95:75:08:cc:
9a:7d:c7:48:b2:18:10:86:a7:2b:1d:a2:e2:f2:61:34:62:46:
37:d7:86:aa:90:de:3b:c1:3c:68:ae:bd:df:e0:a0:80:1d:b1:
5a:5d:13:7b:06:e3:c9:6f:f4:e9:36:99:bb:91:0c:a0:c1:8f:
a4:2b:2a:9a:c0:f9:49:9e:02:ba:4d:cb:f6:fc:80:8d:6c:d7:
ee:31:7e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:10:44 2025 by rpki-client