Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft
File: RyyyiCCZANGvGpmLsDnsdX5JPdU.mft (raw, json)
Hash identifier: CRPj5rAg5me+4E8EIBUgUf5qCJ5gCCCbfQF42OBNZ1k=
Subject key identifier: 1C:2D:96:73:9C:C6:55:7D:4A:16:82:3F:16:63:52:FC:FE:7C:A2:01
Authority key identifier: 47:2C:B2:88:20:99:00:D1:AF:1A:99:8B:B0:39:EC:75:7E:49:3D:D5
Certificate issuer: /CN=472cb288209900d1af1a998bb039ec757e493dd5
Certificate serial: 019779E659CB46831B14581A5C555B6B0B7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyyyiCCZANGvGpmLsDnsdX5JPdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft
Manifest number: 07BE
Signing time: Mon 16 Jun 2025 18:00:28 +0000
Manifest this update: Mon 16 Jun 2025 18:00:28 +0000
Manifest next update: Tue 17 Jun 2025 18:00:28 +0000
Files and hashes: 1: RyyyiCCZANGvGpmLsDnsdX5JPdU.crl (hash: UMCER+8sQpPii2ssIE6FjBP0baFMjaVBu29suAiLTbI=)
2: S3dIMaIh62_y7HmBxhlxOM_ScHc.roa (hash: wYfLcBDYpc1piz/XiUHEld94m4pY4RAv7rF1GCt4/I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyyyiCCZANGvGpmLsDnsdX5JPdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:e6:59:cb:46:83:1b:14:58:1a:5c:55:5b:6b:0b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472cb288209900d1af1a998bb039ec757e493dd5
Validity
Not Before: Jun 16 18:00:28 2025 GMT
Not After : Jun 17 18:00:28 2025 GMT
Subject: CN=1c2d96739cc6557d4a16823f166352fcfe7ca201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bf:c5:42:b1:5f:68:a3:9d:80:f6:91:97:99:
18:3b:25:14:12:2c:99:3d:bb:13:08:c1:6f:02:47:
92:ab:50:0d:34:bd:89:12:eb:75:54:4c:27:41:ba:
96:0e:c7:f4:45:35:a8:11:91:7d:f1:42:72:38:2f:
27:3a:b6:64:20:60:6c:f4:8f:89:fe:86:01:80:a8:
31:1d:72:79:af:29:e8:7e:cc:46:13:6e:6c:46:07:
cf:7e:74:f7:73:c4:70:42:34:f4:67:b0:16:ce:cf:
98:f6:ac:8d:f2:28:f9:e0:40:99:21:65:58:16:d2:
80:86:1b:88:d7:ea:0f:5d:13:67:ef:4e:e1:96:7b:
82:66:13:e3:a9:7a:3a:3a:c5:a9:80:be:48:6e:cc:
35:96:cd:48:17:3d:d2:3c:cb:00:9e:da:81:93:6a:
8e:ee:0a:6c:22:66:b9:b8:00:e4:65:53:8d:ac:63:
b1:c8:0f:b7:2a:f8:67:46:74:f8:02:27:45:82:46:
ca:03:96:2b:f2:49:a0:2e:ca:8f:1e:e9:cf:4d:6b:
26:bb:c2:e4:ab:3e:4a:e8:5f:cf:ea:78:8c:b2:e8:
7c:ff:99:e3:e7:c6:42:07:19:65:3b:ea:6b:6c:91:
b1:ee:1f:e9:6b:8d:3d:ae:fd:9e:08:7b:36:00:6a:
f4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2D:96:73:9C:C6:55:7D:4A:16:82:3F:16:63:52:FC:FE:7C:A2:01
X509v3 Authority Key Identifier:
keyid:47:2C:B2:88:20:99:00:D1:AF:1A:99:8B:B0:39:EC:75:7E:49:3D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyyyiCCZANGvGpmLsDnsdX5JPdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:14:70:bb:a2:4c:21:70:33:ad:62:d1:f8:0d:6c:90:58:b5:
2a:2d:74:9b:92:f8:cb:1f:77:b5:77:bd:ab:61:5d:a8:f2:78:
a2:dd:c8:58:58:e7:0a:fa:2d:4f:6b:38:48:2f:fd:73:a4:38:
e8:0b:b9:25:01:ae:1b:c3:42:d1:78:e6:48:55:51:58:02:5c:
99:71:5a:7f:ff:bc:b3:ee:2c:46:40:a4:9a:3c:3f:19:78:21:
94:f8:20:29:f3:d5:71:e2:cb:33:b6:2c:19:51:49:76:f6:24:
46:82:87:b3:b8:42:d8:3b:2b:47:fa:b9:47:a4:1e:45:73:4c:
27:0b:ec:07:d9:94:22:28:77:c4:bc:f3:31:0c:9a:2b:bd:34:
4a:d5:9b:80:50:58:89:9c:db:56:af:cc:fb:6e:a0:be:01:de:
eb:9e:78:4b:76:3b:b7:8a:6d:ee:0e:24:50:ce:bd:6b:4b:bb:
1e:7e:e4:d3:b3:b2:33:bb:6d:e7:67:ce:db:6d:c0:bf:1b:25:
95:d0:af:03:49:91:e2:9a:93:1e:8c:d8:dc:36:28:8c:9d:c2:
80:56:ce:33:81:90:ad:7a:d1:f4:da:3c:70:91:96:c1:63:73:
4c:5f:44:40:a9:1b:9e:05:67:5a:aa:23:05:44:94:b8:45:19:
7e:ab:d1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:55:03 2025 by rpki-client