Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
File: Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft (raw, json)
Hash identifier: gP1G4v+Tmq1XmJJ1CCxLRus1UsXLOoOy+BNgPz6GyE0=
Subject key identifier: 93:D5:0C:EF:C5:01:81:1F:68:63:CF:7B:D4:30:52:5E:70:21:19:05
Authority key identifier: 63:59:A6:49:B0:36:10:3E:80:A3:CE:8F:3D:1B:01:38:A6:05:81:D7
Certificate issuer: /CN=6359a649b036103e80a3ce8f3d1b0138a60581d7
Certificate serial: 01977D1E544BC16E8E2AD3164126DB38DE49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
Manifest number: 09A7
Signing time: Tue 17 Jun 2025 09:00:29 +0000
Manifest this update: Tue 17 Jun 2025 09:00:29 +0000
Manifest next update: Wed 18 Jun 2025 09:00:29 +0000
Files and hashes: 1: X6ZYSC-zk_X-vkVmhmsDz5ImQYg.roa (hash: ejdwRSw1lilKiCxqAuj8PMfvm39/1GCNMitYFT+EINw=)
2: Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl (hash: /FoE3lBmvaVxo1c+KLRp1ziJQNlw3RajHZj+neKtAcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:1e:54:4b:c1:6e:8e:2a:d3:16:41:26:db:38:de:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6359a649b036103e80a3ce8f3d1b0138a60581d7
Validity
Not Before: Jun 17 09:00:29 2025 GMT
Not After : Jun 18 09:00:29 2025 GMT
Subject: CN=93d50cefc501811f6863cf7bd430525e70211905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:38:cc:b8:07:58:05:94:6f:1a:f3:c6:46:b7:
99:fd:8b:78:ca:ab:fe:2f:14:46:9b:c0:52:f2:25:
66:27:2d:48:83:07:75:c1:71:67:38:03:4f:2c:dc:
b1:3b:3a:89:39:77:28:c1:1c:66:81:2b:a7:b9:61:
9f:a9:b3:7c:a7:51:58:90:81:47:dd:a2:52:c7:32:
71:64:8a:03:fe:d0:1c:0a:0b:62:ab:dc:91:74:d1:
c4:b1:f9:fe:be:49:e7:ba:e2:d7:e4:d7:24:d8:e1:
c0:15:d2:07:3c:be:56:5e:f1:2a:01:3b:fe:32:b0:
23:ea:57:30:15:ce:f4:0d:d3:5e:e8:89:7f:a0:35:
b8:77:10:54:97:32:1c:54:e3:8c:ca:dd:65:29:82:
1e:ab:3c:44:55:7e:6e:1a:e2:e2:b8:1b:f0:49:b9:
86:5c:9c:b7:df:27:f2:bd:b0:1b:01:c0:38:4f:af:
ea:6d:9e:cf:d3:dc:ed:ce:55:69:f5:98:32:bf:09:
67:98:fb:96:0f:11:6b:63:86:e4:5b:c8:ee:dc:86:
8d:60:a4:bf:4c:d6:72:b3:dd:75:7a:30:4e:30:ea:
5a:bc:2c:9f:67:82:5b:40:d2:b0:13:2a:92:57:9b:
64:02:27:3f:49:eb:2d:91:74:78:0f:6a:6f:e2:52:
2c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D5:0C:EF:C5:01:81:1F:68:63:CF:7B:D4:30:52:5E:70:21:19:05
X509v3 Authority Key Identifier:
keyid:63:59:A6:49:B0:36:10:3E:80:A3:CE:8F:3D:1B:01:38:A6:05:81:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:53:3a:43:53:1a:fd:4d:de:60:08:fc:09:40:e7:dd:7c:96:
c8:99:16:7e:6f:8a:ef:13:99:93:01:3b:3f:19:7c:63:26:dd:
45:1a:6c:7b:6d:0a:30:28:c1:e3:8e:17:95:e5:de:9c:03:fe:
10:4a:d6:5d:e7:40:ec:44:ae:49:df:95:63:fd:03:b1:c8:12:
7b:d0:29:ad:a2:60:af:2b:ff:8a:cf:56:15:75:26:98:8a:58:
ba:8f:43:77:df:ef:ee:83:79:52:40:5f:9f:9d:13:5a:e4:0d:
91:77:2e:c3:0d:34:00:f6:67:83:ea:8d:60:21:eb:68:c6:19:
3e:1c:fd:a0:45:e7:22:1a:a0:35:80:5e:9d:01:3b:b4:1d:c7:
4d:29:79:8d:76:f2:99:45:85:c6:3f:d4:83:2f:13:c3:db:41:
03:3b:09:82:a5:13:90:80:79:9d:4e:d3:3a:a0:0f:90:93:8c:
c7:82:a9:6e:15:19:ec:87:b1:f5:57:4f:74:01:00:73:b8:03:
06:5c:cd:2f:3c:b2:0d:d4:24:e0:4b:76:3a:29:90:46:27:24:
de:c5:6a:d1:5e:40:7f:3b:38:b7:6e:ab:7e:27:90:24:98:24:
91:64:dc:02:d5:2a:1f:6e:26:10:55:08:1f:e2:98:95:a9:c9:
67:06:ad:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 15:53:30 2025 by rpki-client