Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
File: yTfS9vC3jA7XW478KACdeXlhQAM.mft (raw, json)
Hash identifier: 9dFRbqqNHv+TanVW/WHn3svmeCQdrMnIJyKjUgtNLGg=
Subject key identifier: 45:FC:3A:E6:00:D1:9D:65:F8:C1:32:30:9E:03:A0:D3:3E:F6:8D:43
Authority key identifier: C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03
Certificate issuer: /CN=c937d2f6f0b78c0ed75b8efc28009d7979614003
Certificate serial: 019778D40EFBE7272E10F93A15001E5FFE80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
Manifest number: 04E4
Signing time: Mon 16 Jun 2025 13:00:52 +0000
Manifest this update: Mon 16 Jun 2025 13:00:52 +0000
Manifest next update: Tue 17 Jun 2025 13:00:52 +0000
Files and hashes: 1: S4tCuljlSDudC5hWFI16K1vZQrc.roa (hash: IVL1gZ3kqiPfJXguPGcyEwPZH9+ml2IO0/FYl1DVPU4=)
2: yTfS9vC3jA7XW478KACdeXlhQAM.crl (hash: sOKKgTSz0kMRgjNwl7bvQqcElWa/ucMMAWJylzVySm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d4:0e:fb:e7:27:2e:10:f9:3a:15:00:1e:5f:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c937d2f6f0b78c0ed75b8efc28009d7979614003
Validity
Not Before: Jun 16 13:00:52 2025 GMT
Not After : Jun 17 13:00:52 2025 GMT
Subject: CN=45fc3ae600d19d65f8c132309e03a0d33ef68d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:72:18:75:b9:49:e7:69:9b:f3:4e:e0:5a:59:
ca:8c:ab:37:d9:99:36:35:8a:fe:77:65:66:e1:08:
3a:ef:b1:43:da:ba:d3:6a:34:43:fe:2c:41:cd:3a:
6d:c1:26:6d:49:f1:29:9c:eb:39:d1:56:3b:0c:4c:
57:b5:4d:ef:6a:6c:b1:87:10:a6:64:56:47:96:15:
7f:4f:c8:b3:2c:70:27:7e:5f:b6:cd:b1:6d:25:d8:
38:0a:1b:a3:1b:53:de:fc:fb:2e:b6:a5:92:f4:0f:
b8:47:01:eb:ea:95:42:b6:12:ae:47:2c:36:4b:28:
25:7d:20:ef:2c:52:89:99:6c:51:f7:61:29:99:b5:
a0:3e:8d:44:c4:68:a7:c2:ed:9a:71:dc:d6:97:e0:
01:24:21:88:53:91:0c:93:16:80:2a:73:44:50:d9:
63:97:c0:9b:c6:24:21:0b:1f:21:9f:cf:90:46:45:
a3:24:dd:b0:17:0a:2f:c7:f0:70:a6:2c:a9:91:c6:
79:77:cb:35:15:14:de:d2:45:62:cc:58:f7:f3:c3:
13:de:29:46:fd:8a:b9:ae:44:83:fe:48:a4:c6:76:
36:bc:70:07:3b:ab:c5:df:da:f5:ac:08:c9:6d:22:
b4:89:33:2b:c1:f6:94:c4:13:51:41:22:0b:88:de:
75:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FC:3A:E6:00:D1:9D:65:F8:C1:32:30:9E:03:A0:D3:3E:F6:8D:43
X509v3 Authority Key Identifier:
keyid:C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:4f:84:bb:7d:27:f3:bd:1b:40:ea:1d:b9:1b:16:7b:e5:61:
ae:be:2a:e4:4b:31:c0:62:ce:51:c7:17:1f:02:76:c8:3b:aa:
6b:d3:51:ee:01:1f:f3:ff:4a:78:6c:4d:29:8f:f0:bb:59:a9:
41:27:15:bf:92:e4:e2:f1:4d:08:16:04:6a:0c:44:d5:f0:8c:
d1:a0:7f:71:7a:4a:37:bf:d5:65:d8:77:22:8d:4d:6f:60:fc:
0f:f3:b2:c4:c8:a8:7d:2c:b9:2f:02:08:23:ee:39:b6:67:83:
12:35:40:1d:92:49:e9:67:79:a5:56:50:4b:04:53:10:83:5b:
6e:05:8e:cd:47:c3:0f:21:f6:b3:93:52:a2:2f:eb:e3:8c:af:
80:05:96:39:dd:35:c6:81:6a:cc:9d:49:c6:59:32:f2:eb:5c:
05:47:ea:84:4b:58:0c:58:13:7d:97:15:c0:68:a7:f8:6e:41:
93:06:26:f4:31:e8:23:3a:ff:83:23:53:34:92:55:d2:8f:a2:
f4:ff:02:6c:e2:1f:77:fc:e9:38:e6:26:76:d3:1a:47:8a:8c:
cd:6c:1a:ad:6d:6e:6b:ef:47:e2:d7:5f:cc:bc:67:04:25:b2:
9a:73:74:6f:c8:d3:bd:bf:81:38:d6:8a:50:3a:e5:f4:04:a4:
2c:86:6c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:53:32 2025 by rpki-client