Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
File: y9IWsAV0TBjLOE09CdEkBm1V9i0.mft (raw, json)
Hash identifier: lKddpOk5rqY1BW36EGgPOKOMAwd6Oa6EmBE44m4plvk=
Subject key identifier: 26:77:AC:74:55:87:6A:05:7C:E5:04:DD:F1:F7:0F:06:17:AC:98:5D
Authority key identifier: CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
Certificate issuer: /CN=cbd216b005744c18cb384d3d09d124066d55f62d
Certificate serial: 01976D74857CAD66F541EF18C06C73194F0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
Manifest number: 06BD
Signing time: Sat 14 Jun 2025 08:00:42 +0000
Manifest this update: Sat 14 Jun 2025 08:00:42 +0000
Manifest next update: Sun 15 Jun 2025 08:00:42 +0000
Files and hashes: 1: UP5nddVRXKDFwn0rBo0YDADmUWk.roa (hash: c3q9Feje6DSdFs0M8UM9vMSjOtIoCDA85WxaounA6ns=)
2: y9IWsAV0TBjLOE09CdEkBm1V9i0.crl (hash: 0P8aAaXW4WvlMcdBDepZv8XJ3p5uk/Jb/Yn1Sn6VjTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:85:7c:ad:66:f5:41:ef:18:c0:6c:73:19:4f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd216b005744c18cb384d3d09d124066d55f62d
Validity
Not Before: Jun 14 08:00:42 2025 GMT
Not After : Jun 15 08:00:42 2025 GMT
Subject: CN=2677ac7455876a057ce504ddf1f70f0617ac985d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:33:6b:d1:58:3d:e6:63:1a:d5:f4:a6:f3:5c:
95:26:2a:b0:2c:a8:0c:fc:ea:64:5d:d0:5a:32:b2:
72:66:f0:7e:95:8c:a7:ce:89:9c:38:3a:a2:89:22:
4d:95:f9:ec:9d:ba:d6:24:ba:74:91:e5:ce:64:09:
7d:1b:2c:cd:d3:36:f3:ce:92:f2:9c:92:93:dd:43:
5d:b0:cd:69:90:4f:11:33:1d:62:40:59:10:2f:8a:
88:68:85:a7:d2:8f:06:9f:d3:ef:11:f6:33:e3:93:
54:1e:eb:8c:96:eb:b7:4f:09:27:4a:6d:f6:16:2d:
b4:90:3f:af:98:27:e0:90:02:cf:7d:59:09:25:7c:
0f:97:fe:c3:31:23:a1:70:e6:87:ea:8b:82:a5:d1:
7e:f6:17:39:ff:c5:22:87:0d:0f:47:44:4d:21:16:
71:05:c1:a0:da:cf:f8:fd:e5:ea:ec:ed:85:11:e6:
e4:ca:80:00:e1:c1:d8:04:07:f1:24:38:f0:5b:6d:
c3:ef:fe:dc:34:6d:a3:47:02:d4:57:ca:ee:6e:5f:
71:3a:48:f1:11:67:e5:5e:4b:02:aa:70:35:b0:14:
f3:21:7b:e7:77:9f:90:67:5c:47:ce:5c:d6:f3:77:
5c:51:2f:36:a5:f9:a9:c3:b4:3c:a6:d0:a5:08:1d:
1a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:77:AC:74:55:87:6A:05:7C:E5:04:DD:F1:F7:0F:06:17:AC:98:5D
X509v3 Authority Key Identifier:
keyid:CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a4:1a:2a:17:3c:ba:1c:c3:80:6d:21:72:e6:ac:33:02:bd:
c4:20:3a:cd:42:7f:22:15:f1:7c:d7:ec:62:a3:d8:d1:bf:02:
e1:bf:6a:5c:9d:67:f4:14:be:3c:30:40:50:2f:14:c6:1b:7d:
12:9f:16:3d:fb:54:32:b0:70:0b:67:c3:98:70:b2:c8:47:f0:
64:47:6e:b7:c8:00:18:d5:ba:56:c3:e2:2b:d7:78:b9:fc:5f:
ca:af:3e:12:f1:04:ad:a5:f4:98:2a:11:47:84:1c:e0:a2:bf:
ee:30:6c:ff:92:a1:fb:90:bd:1a:56:a7:21:4d:7f:a8:2c:3f:
ed:33:c7:b9:33:1d:45:18:4d:67:05:88:04:4f:da:7d:64:94:
ba:ad:96:e1:0f:e6:0d:6e:3f:46:ee:b0:47:71:9d:78:b4:e0:
8d:ac:e6:6d:23:b4:a7:7c:7b:47:03:10:3a:14:4d:e2:ad:72:
71:63:17:26:3a:c9:b0:fc:49:4a:63:d4:0e:80:fd:3e:bd:19:
a6:2c:a3:79:dd:15:f6:e1:4c:e6:11:98:77:bd:45:16:d5:27:
0c:7d:89:14:44:4d:50:9c:14:8a:8c:d1:70:0f:73:76:28:22:
3a:88:42:c5:5a:a2:7d:7e:93:34:38:b2:df:5e:6a:90:cf:95:
7c:71:cb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:34:52 2025 by rpki-client