Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
File: ySi2NBei54heM4gakkqsnUCqymA.mft (raw, json)
Hash identifier: yLu+OVw1sh6VyoSMcLJJuNvpou45caK1CAwNAY+DZ5k=
Subject key identifier: A4:27:1A:3A:35:1A:F9:D9:5F:95:1C:66:F2:0B:05:A0:32:0A:72:DF
Authority key identifier: C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60
Certificate issuer: /CN=c928b63417a2e7885e33881a924aac9d40aaca60
Certificate serial: 01977075806BAB4146EA041736B702A0CA85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
Manifest number: 03EE
Signing time: Sat 14 Jun 2025 22:00:38 +0000
Manifest this update: Sat 14 Jun 2025 22:00:38 +0000
Manifest next update: Sun 15 Jun 2025 22:00:38 +0000
Files and hashes: 1: 6MMtZ0p0S3UErh0fFksqehnDVrk.roa (hash: aSANX+R++VciglglpvxzYCwuVSwi4gwoCdbTa6Ro3gg=)
2: ySi2NBei54heM4gakkqsnUCqymA.crl (hash: Y01BunW/KtlnUu9Q/HLkTsQ/M+KMmQ4QFw9FLp6tFHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:80:6b:ab:41:46:ea:04:17:36:b7:02:a0:ca:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c928b63417a2e7885e33881a924aac9d40aaca60
Validity
Not Before: Jun 14 22:00:38 2025 GMT
Not After : Jun 15 22:00:38 2025 GMT
Subject: CN=a4271a3a351af9d95f951c66f20b05a0320a72df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:54:c6:f4:b4:83:df:a0:d5:5b:1d:a5:21:69:
a5:18:2f:b1:4e:92:2e:2c:5c:cc:94:b2:71:81:42:
5a:50:cb:41:c6:3e:15:84:f9:e1:52:20:cc:8b:d5:
02:b9:db:d4:5e:ef:c3:1c:a1:91:71:9e:92:c1:0e:
88:fb:a2:30:a9:37:99:8f:9a:ab:a0:68:aa:49:a3:
0c:34:d2:19:1b:b0:90:9a:f1:0f:94:bd:c7:c6:79:
f6:e1:13:21:ed:8f:1b:f9:73:1e:42:85:1e:d4:07:
40:23:a3:60:81:26:5d:b2:c6:f9:cf:1c:b1:1a:3c:
48:50:92:ff:02:1b:84:f6:54:bb:15:1b:22:00:db:
7d:48:ee:40:63:d7:01:a8:55:13:f9:06:43:a8:71:
8e:3c:1f:65:8c:39:e0:a0:b1:60:72:09:26:12:dd:
68:91:96:04:c8:45:80:f4:80:5e:1b:46:91:e3:7b:
0e:a1:61:8f:71:50:c9:05:eb:4e:9e:8e:11:8e:c8:
0d:92:51:3b:7f:7e:f9:bb:6b:69:c8:91:41:d6:57:
ef:29:93:7f:b5:ac:be:f8:14:a7:3e:89:3c:12:dc:
d3:ed:a7:17:03:cd:18:17:c7:07:3c:cf:7c:31:c1:
6e:a5:d6:2e:5c:76:7c:ef:c2:e4:7b:60:6b:b9:0b:
23:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:27:1A:3A:35:1A:F9:D9:5F:95:1C:66:F2:0B:05:A0:32:0A:72:DF
X509v3 Authority Key Identifier:
keyid:C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:32:f7:66:d1:8c:0f:98:b5:df:1c:46:64:35:c4:1d:0d:4b:
86:43:a5:33:ba:1d:91:2e:60:fd:fb:40:68:91:2c:23:2b:9b:
e2:1a:2a:94:23:37:1b:59:8d:09:7f:6e:a4:8b:c8:7c:81:7e:
31:dd:75:b0:ab:32:a8:ef:91:8e:9a:f6:ce:11:95:11:64:04:
ea:65:1e:3e:b5:e5:32:27:04:c1:b0:ed:ba:c7:3a:8c:f5:07:
92:32:db:a7:02:d1:26:e1:c1:e4:b7:1b:f8:2f:17:36:9e:75:
14:76:c8:4b:97:83:89:ef:57:01:70:9c:9c:46:f3:90:8d:47:
e8:54:41:81:a8:73:e6:5c:78:ec:d2:b5:fe:59:1a:7e:63:58:
1e:b1:5b:e2:c0:1b:bb:c3:c3:5e:48:f6:f0:d2:5a:79:1a:81:
65:37:42:e6:60:65:f6:79:6f:5c:23:5d:93:17:93:a9:ca:d5:
4f:5a:89:b8:84:f8:9e:5a:bc:db:50:5e:6c:c0:63:51:61:08:
ae:93:35:11:f6:2a:77:c0:e9:9b:63:8a:01:0d:d3:b0:c1:5d:
08:d9:fd:5c:c1:06:c8:af:fe:2c:8d:b9:39:34:e2:c2:5b:29:
d1:23:5e:85:01:ec:f3:07:97:33:66:8f:68:c4:5d:32:87:78:
7e:04:70:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:00:01 2025 by rpki-client