Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
File: Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft (raw, json)
Hash identifier: ckQdJZZgsuoRJEp6ya+EKIMlJH9KTexCSx5NfTaHcnE=
Subject key identifier: 89:D3:CF:4A:F5:21:37:1E:09:69:54:CC:C1:13:5A:EE:A6:AB:D4:6D
Authority key identifier: 62:AF:1D:7F:36:B1:86:58:02:53:5E:49:A7:33:1E:03:5A:D0:10:08
Certificate issuer: /CN=62af1d7f36b1865802535e49a7331e035ad01008
Certificate serial: 01976F2BF939EAACEBB905D7680A29991B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
Manifest number: 09F3
Signing time: Sat 14 Jun 2025 16:00:42 +0000
Manifest this update: Sat 14 Jun 2025 16:00:42 +0000
Manifest next update: Sun 15 Jun 2025 16:00:42 +0000
Files and hashes: 1: Yq8dfzaxhlgCU15JpzMeA1rQEAg.crl (hash: MRrTdPbGtI8nyk4hf6Pu7hNc7Y/tFTpftbRMbxJqaKM=)
2: y9JMR_ZxLXrYLvgRShORqLwJidY.roa (hash: Uw28deLkoDLLwc6/RTXYzT+/L0LSFoqfWT5M5xI68aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:f9:39:ea:ac:eb:b9:05:d7:68:0a:29:99:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62af1d7f36b1865802535e49a7331e035ad01008
Validity
Not Before: Jun 14 16:00:42 2025 GMT
Not After : Jun 15 16:00:42 2025 GMT
Subject: CN=89d3cf4af521371e096954ccc1135aeea6abd46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:27:ec:da:02:c0:2b:55:b7:92:f9:36:66:e0:
e6:1c:e4:51:04:03:63:b6:ac:94:01:f7:20:3f:ac:
55:8a:47:f1:35:99:5a:7f:8e:81:8a:29:82:c0:9e:
2d:e9:d6:44:bd:af:50:90:74:66:3c:20:27:bd:40:
53:bd:9a:04:5f:ed:17:a1:f7:1e:1a:66:21:fb:48:
c8:c2:e9:5a:14:20:f3:2d:a5:76:92:05:40:cc:4c:
27:a1:9e:71:29:87:bd:da:14:b4:14:9a:58:4a:93:
0e:44:f8:f1:22:13:87:2d:11:90:58:e6:18:62:80:
25:96:1d:f7:1e:5d:ac:e6:ef:af:df:4b:0f:2f:1b:
15:5f:ad:a2:45:d7:85:5e:5e:56:c6:46:7d:b3:26:
42:9a:13:03:9a:1b:68:09:62:c0:68:2a:d7:51:6d:
2f:db:2c:b4:4f:86:c3:5f:0e:7a:2d:27:fe:76:51:
28:c7:36:bd:17:11:7c:09:c4:3e:60:54:c0:a4:b9:
46:bb:31:45:41:01:0e:f3:bc:1f:a0:bb:74:ad:f4:
3e:65:a6:f0:34:61:9b:36:ca:bf:e8:b4:95:7e:3c:
2e:62:5f:a1:fe:12:b5:f3:04:b1:df:c8:74:a2:79:
41:a1:7a:e7:df:50:75:14:72:19:0c:87:39:68:6a:
1b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D3:CF:4A:F5:21:37:1E:09:69:54:CC:C1:13:5A:EE:A6:AB:D4:6D
X509v3 Authority Key Identifier:
keyid:62:AF:1D:7F:36:B1:86:58:02:53:5E:49:A7:33:1E:03:5A:D0:10:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:69:18:c7:14:46:cf:da:e7:2b:d5:c1:a8:6c:86:eb:4a:29:
21:51:7f:2e:7d:45:31:67:54:6b:80:f9:ec:02:22:da:5e:37:
1e:51:85:4c:df:46:7b:d6:e1:bb:58:53:02:ba:99:57:b6:11:
a4:9a:ff:bc:2f:be:0e:61:2d:6e:7f:8a:e6:b3:fd:29:9f:25:
ef:1f:fa:7e:0b:25:b8:92:4c:07:ea:45:ea:3c:c2:ad:c2:07:
4c:3e:f8:bc:4c:93:91:e9:59:98:43:70:55:c1:ef:3f:e9:40:
f7:fd:fe:1e:36:af:d8:c5:cf:73:48:6d:43:04:a4:e9:a6:30:
85:e5:f5:5d:74:a3:26:fe:5e:fa:4c:c2:26:f7:74:aa:db:04:
fc:2f:f8:f7:df:16:a8:9d:6a:4a:02:55:00:56:4b:db:6c:84:
5b:86:1c:72:53:f8:0b:29:62:63:a9:5e:22:dd:1b:da:20:a1:
35:08:e8:f3:02:21:22:f7:76:cd:f5:25:e2:f4:98:8b:b4:57:
e0:3d:92:f5:6b:8c:7e:a3:7a:9c:b2:6e:36:0f:ae:46:70:8b:
83:4b:4a:e4:9c:a0:34:03:6e:78:03:27:c8:e7:20:32:d0:1e:
ba:21:4c:4b:de:68:7e:0e:d2:45:15:2d:65:67:da:52:74:d3:
28:40:6a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:09:54 2025 by rpki-client