Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
File: rYg6hugtDZEPz1n4_5978aZxSHA.mft (raw, json)
Hash identifier: y3vMvnf8NPsk5C9oxwg76OSwUicjLvwkUMDsRdMPHi4=
Subject key identifier: C6:34:CD:C3:C8:D5:FB:41:CA:84:FB:7B:F9:F8:91:24:21:AE:18:32
Authority key identifier: AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70
Certificate issuer: /CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
Certificate serial: 01976960E560B4C93EA5F154B34EBBEA626F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
Manifest number: 07DC
Signing time: Fri 13 Jun 2025 13:00:47 +0000
Manifest this update: Fri 13 Jun 2025 13:00:47 +0000
Manifest next update: Sat 14 Jun 2025 13:00:47 +0000
Files and hashes: 1: od7ExObCxDqzHqRis0nMtXmus2Y.roa (hash: WoaJOBOnB6iTsR77zkPSuoVOWwQU/LjcUNKKgIIFfv0=)
2: rYg6hugtDZEPz1n4_5978aZxSHA.crl (hash: y6imuXA92aYw6/R63hStp58ZEMR98vB0Zi1wbLUCt0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:e5:60:b4:c9:3e:a5:f1:54:b3:4e:bb:ea:62:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
Validity
Not Before: Jun 13 13:00:47 2025 GMT
Not After : Jun 14 13:00:47 2025 GMT
Subject: CN=c634cdc3c8d5fb41ca84fb7bf9f8912421ae1832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:27:e1:53:dd:dc:b5:d9:df:be:ef:3d:58:b8:
00:bb:f1:f1:e8:bd:3b:89:29:14:96:c8:ae:74:25:
a2:81:84:0b:9e:24:1a:b0:8a:09:fa:30:c1:20:ef:
a9:7b:2b:8c:67:1a:52:05:a2:2d:86:62:8b:29:63:
74:31:66:f8:9d:85:a4:ea:3f:6d:4c:81:5e:78:8b:
dd:d2:1e:19:31:5d:61:21:fa:90:dd:a1:8d:7d:7b:
11:27:c0:a5:70:05:e6:c1:17:7c:fe:05:d8:8e:0c:
17:a5:4f:77:eb:6a:b9:01:e1:9e:f8:8e:c0:5b:4a:
44:fa:e5:02:82:d9:3c:68:e6:ed:d7:48:0b:bf:64:
71:48:0e:af:7c:23:28:53:fe:47:17:9a:ef:85:f6:
88:e9:7b:f8:b7:6e:65:c3:a5:2d:2f:9f:51:62:cc:
af:60:a8:92:ad:ae:ab:17:fb:83:40:ce:6c:81:52:
eb:ac:69:26:41:32:cc:d2:3a:57:82:45:b0:3f:2f:
7d:91:aa:e7:63:c5:72:d5:6f:0e:bf:9e:1c:40:dc:
da:fd:ea:11:c1:ff:0c:21:f1:19:2c:5a:e1:50:66:
45:f9:02:c7:d4:63:5d:2f:49:b7:eb:0f:c5:7d:7e:
00:10:fd:38:ff:59:65:58:d0:e9:60:fa:bb:bd:c1:
ab:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:34:CD:C3:C8:D5:FB:41:CA:84:FB:7B:F9:F8:91:24:21:AE:18:32
X509v3 Authority Key Identifier:
keyid:AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:6b:58:e8:87:47:09:6e:c4:eb:89:6a:70:96:9c:ba:d2:91:
51:9f:28:30:29:e1:d3:ff:f8:c3:79:ef:90:71:2f:87:06:9e:
25:55:5f:fe:8e:0c:10:49:73:16:bc:c3:a9:ef:df:b8:0a:25:
b7:3e:c6:79:f5:96:c5:03:69:3d:de:80:c1:f6:7f:c8:b9:97:
80:e2:09:06:7e:a4:85:65:5d:74:91:44:fe:18:d2:24:0f:31:
84:cd:5f:c5:17:d7:8c:33:f4:fd:2f:04:54:bc:76:84:9c:57:
18:44:f1:71:88:29:f8:32:c1:32:23:8f:00:51:42:64:69:63:
79:83:f3:39:e1:4d:de:97:0a:98:b3:92:18:2a:0a:e3:4d:f1:
d9:51:64:02:37:41:40:e4:b1:63:ba:70:f4:a0:5d:fe:ef:42:
da:b4:27:2a:0f:51:7c:5b:c0:52:12:4a:eb:8c:92:f2:a1:b3:
8a:42:f0:38:24:43:c3:92:7e:6e:70:f0:25:0d:ea:08:7b:c7:
ef:18:6e:bd:23:5b:07:4d:cd:9c:31:7c:c9:67:29:9e:d4:20:
5c:2d:b3:25:d0:66:09:23:be:f2:a3:30:bd:ab:7f:8f:c8:9d:
c9:16:21:8e:31:9f:09:86:b9:6e:7f:59:15:a3:eb:56:35:fe:
b5:5a:f2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:15:40 2025 by rpki-client