Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
File: dygFKufRD9ImGiJI_ADSArDyVXQ.mft (raw, json)
Hash identifier: JQ0TBm++2RHEea7lMp1B6N4MO0sDTsf6O5bkKhWLzPk=
Subject key identifier: 71:73:7B:22:C2:1A:94:68:76:39:CF:30:4E:02:73:7E:C6:22:21:E7
Authority key identifier: 77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
Certificate issuer: /CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Certificate serial: 019748FA33AB31B85454A4ACDE2EA7A4B667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
Manifest number: 1584
Signing time: Sat 07 Jun 2025 06:00:46 +0000
Manifest this update: Sat 07 Jun 2025 06:00:46 +0000
Manifest next update: Sun 08 Jun 2025 06:00:46 +0000
Files and hashes: 1: PVmSZDGrn03CmC3ystxrDr3TZfo.roa (hash: Pjr4/1MqbKXy/FJJPo44XPup/Kfr50sF5z3bYT1o0SU=)
2: XU_IzR1XNktTavIx_nI3l6sD7WI.roa (hash: QAWYFwQ7d4DDdntznflGhPwEdw+c4lyHMRKRE5reGnk=)
3: dygFKufRD9ImGiJI_ADSArDyVXQ.crl (hash: kHyssMDG58FVBKQe/J/tmsl7HRghM1ZqrubLUS2mpsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:33:ab:31:b8:54:54:a4:ac:de:2e:a7:a4:b6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Validity
Not Before: Jun 7 06:00:46 2025 GMT
Not After : Jun 8 06:00:46 2025 GMT
Subject: CN=71737b22c21a94687639cf304e02737ec62221e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a4:2f:12:69:4d:e7:31:1d:e7:28:15:04:a4:
ce:52:6e:c1:d6:0d:82:e1:a2:fc:41:2f:34:1f:56:
5d:42:02:90:ef:e1:32:71:c5:da:78:58:d0:c6:a1:
c5:63:61:b0:e1:7f:74:f8:a7:d0:4f:37:80:aa:f6:
4f:0f:04:5c:11:90:e7:9c:b3:77:b5:88:0d:c7:88:
b5:fa:2f:59:dc:7d:be:1b:95:f0:2e:2c:57:4f:d9:
0b:e5:5f:23:ff:4d:4b:90:ec:b4:ab:b4:03:96:52:
01:3b:18:90:fa:3f:b8:87:eb:b4:32:52:f6:64:bd:
f5:ca:0f:47:cf:7d:cb:58:fb:1e:4b:24:50:a1:53:
0b:62:12:66:46:67:eb:90:b1:dd:64:9f:9b:39:56:
8c:82:34:4a:50:b7:50:f4:56:61:98:3f:5a:98:5a:
3b:21:18:5c:00:c6:ff:a3:f2:b5:60:b4:87:2d:c0:
d4:a2:21:d4:3e:97:f2:e9:0f:87:8a:df:e5:1c:5c:
7a:a0:fb:92:f6:a5:9e:8e:bb:32:42:b2:9c:8c:70:
76:37:10:f0:3b:db:29:82:b5:1f:c6:01:9d:fb:0a:
ab:cd:4a:68:33:86:2a:52:a6:5b:1c:dc:ad:cf:f5:
92:83:31:7b:cc:50:21:ca:9b:47:b8:23:34:a4:ba:
ab:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:73:7B:22:C2:1A:94:68:76:39:CF:30:4E:02:73:7E:C6:22:21:E7
X509v3 Authority Key Identifier:
keyid:77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:22:1b:bc:3b:66:1f:16:bd:e0:d6:e5:3d:ec:17:c3:96:43:
86:82:27:7b:a9:f2:8e:f3:c4:c3:ff:87:0e:cf:38:f0:d0:20:
df:9f:b2:4d:27:d4:0c:48:e9:d5:65:83:3c:50:67:13:74:b9:
d4:db:c2:10:b3:1a:00:90:44:d5:03:e4:8c:9c:2b:ae:dc:24:
fa:f7:0e:42:30:bb:25:f3:71:11:69:f6:32:b7:42:18:2f:45:
b4:bc:b2:ae:11:05:ab:48:f0:86:44:50:87:46:cf:b4:13:da:
2d:38:d5:41:3f:02:2e:da:0d:7c:12:40:c1:38:71:0e:f6:8d:
d7:98:98:13:6b:d5:0f:8f:06:3c:71:5a:15:f0:f5:87:87:86:
d6:d0:5b:c8:a2:c9:1d:50:99:06:ca:95:af:a1:c6:fe:51:93:
cd:a7:5c:88:69:12:99:cb:f8:8a:c7:cf:c4:69:59:43:82:64:
63:54:93:e4:9e:eb:8a:02:e0:05:3f:bb:48:2b:8c:48:85:59:
9f:62:4b:39:75:64:2e:c7:77:99:58:da:b5:21:6f:da:47:15:
e8:09:12:82:67:5f:f8:60:08:87:15:88:61:04:05:60:66:98:
76:0f:cc:2f:d0:81:ca:8c:a1:d2:6e:5e:93:c7:ba:eb:9f:78:
ae:6e:64:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:35:25 2025 by rpki-client