Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
File: MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft (raw, json)
Hash identifier: T/5DHrVBANF9bQHZBfdGYYZEoPYbKPoZ9gkhqHo3BH4=
Subject key identifier: D5:5D:A9:2F:15:B7:FB:2D:27:11:58:EF:9C:C0:2E:61:DB:D6:92:21
Authority key identifier: 33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB
Certificate issuer: /CN=332293d0399160788b31e438760dc3bd1ed882eb
Certificate serial: 01976D06A433233CD8BE3B4A30D12A3AE377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
Manifest number: 03E3
Signing time: Sat 14 Jun 2025 06:00:41 +0000
Manifest this update: Sat 14 Jun 2025 06:00:41 +0000
Manifest next update: Sun 15 Jun 2025 06:00:41 +0000
Files and hashes: 1: MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl (hash: ru16sXI9PJ1N6J5HknMh7WWASwM2uY5OVp4vcN8futg=)
2: i6CWENtAdnXqPwuX227uTDykXkg.roa (hash: nuLqIrBizKW+oU2TGkl7L2LqgilWGWZ/QKZgoAyDfPY=)
3: scpx1tsDeDfxUzO1xx1MvIOWYyI.roa (hash: mBTPbPt26EcSH4AMmR65D0K6YSKToMbRhFmYaz8u+KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:a4:33:23:3c:d8:be:3b:4a:30:d1:2a:3a:e3:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=332293d0399160788b31e438760dc3bd1ed882eb
Validity
Not Before: Jun 14 06:00:41 2025 GMT
Not After : Jun 15 06:00:41 2025 GMT
Subject: CN=d55da92f15b7fb2d271158ef9cc02e61dbd69221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f6:2e:f8:d6:1c:e2:7a:ae:1c:87:dd:33:74:
54:63:72:06:85:1c:4f:33:98:c9:d7:73:93:05:e9:
1a:c7:74:eb:48:4e:0f:14:a8:ab:d8:06:22:9e:ec:
bb:0e:26:d3:1c:e4:da:18:7c:da:66:a4:61:b4:98:
32:a2:ea:21:b0:96:a9:73:b8:12:cd:88:b1:f3:05:
8d:62:a1:81:10:18:fc:6c:ea:06:49:be:53:2b:11:
49:9c:d2:ab:52:4a:dc:50:f9:eb:c5:3e:c2:fd:65:
b6:23:91:0b:c7:39:78:d2:3a:f3:16:50:2e:bf:d8:
10:92:63:3c:75:6e:e7:82:2a:65:13:da:ca:5b:92:
de:83:aa:d9:29:cf:49:bf:a4:9b:75:29:54:40:4f:
8a:17:12:de:29:fb:76:d9:54:b2:6b:24:b2:b5:f8:
17:c1:a5:1f:6a:a7:04:ff:c5:cd:31:2c:96:56:5a:
15:6a:9c:8a:bb:b0:14:dd:ef:8d:cd:ce:c8:1d:00:
2b:8c:1c:66:77:34:61:52:2e:ef:bb:ee:5d:1a:37:
dc:4d:f9:3a:c8:e0:05:e6:cb:7b:23:6b:28:17:7a:
18:08:25:24:af:71:9f:de:f7:42:b8:a4:7f:3b:44:
8b:87:cd:b8:1a:ad:75:f0:f7:39:ad:04:30:8b:67:
dc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5D:A9:2F:15:B7:FB:2D:27:11:58:EF:9C:C0:2E:61:DB:D6:92:21
X509v3 Authority Key Identifier:
keyid:33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ba:da:3f:bf:38:8a:6f:91:20:fd:00:ff:e0:9b:33:83:05:
52:fc:62:23:59:e8:34:e6:01:bf:64:dd:b2:8b:c3:ce:42:93:
24:8e:53:ba:45:98:18:35:19:73:f9:ac:fa:57:fa:03:3b:7d:
bd:7c:ad:51:fb:2c:9d:6d:09:c8:19:b1:64:8f:d5:c0:73:30:
47:7c:20:7e:ba:0f:65:2a:1b:6c:78:b9:62:c7:02:4b:4c:81:
29:19:08:5d:54:cb:2d:85:de:ef:a2:40:2e:96:a3:72:4a:a3:
6d:47:4e:26:51:9f:3a:e1:8b:fb:7d:ec:45:c3:67:e5:f3:89:
a0:07:51:d5:17:59:19:b3:c0:ad:e2:c2:30:c7:3f:82:a8:b8:
a9:58:7e:77:cc:92:01:df:1b:8b:00:85:08:27:5d:c8:05:af:
24:20:5b:c8:5c:cc:a0:b2:5b:00:6f:b7:28:27:a0:6b:f7:4c:
bc:46:1a:c6:b4:b5:88:65:0d:8e:88:8d:d8:38:e1:7f:c2:f9:
93:d7:85:a3:41:90:15:8a:7a:52:59:a5:35:c7:c9:6d:fb:cc:
60:b1:51:0b:ba:f6:75:6b:2e:ff:9c:bd:4e:a6:91:62:dc:68:
68:99:20:fd:aa:96:5c:80:8e:07:60:52:ba:6f:d1:85:cc:44:
e2:3f:2d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:46:42 2025 by rpki-client