Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
File: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft (raw, json)
Hash identifier: I4W8byAsxVWrL047SFtc3zqYyX2fBNikiumn5u+wxb0=
Subject key identifier: 87:A6:94:7C:C7:2E:9F:97:39:BD:AD:C1:86:DD:5E:59:79:E1:BE:C6
Authority key identifier: 63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
Certificate issuer: /CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Certificate serial: 019768F2CA9B85DC591A3356D9BA2699A132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
Manifest number: 0FF2
Signing time: Fri 13 Jun 2025 11:00:31 +0000
Manifest this update: Fri 13 Jun 2025 11:00:31 +0000
Manifest next update: Sat 14 Jun 2025 11:00:31 +0000
Files and hashes: 1: Je7r8p2i15SExZL77Clbe_3pLIU.roa (hash: q5RkBfa8EqGTkb+E8fZ8KT2+q7JMLCFvRnhSE6vnDeU=)
2: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl (hash: PhpJhlnHz4W4FlVTOTrvf0VvM7ZzHqShPiTDBgZnPFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:ca:9b:85:dc:59:1a:33:56:d9:ba:26:99:a1:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Validity
Not Before: Jun 13 11:00:31 2025 GMT
Not After : Jun 14 11:00:31 2025 GMT
Subject: CN=87a6947cc72e9f9739bdadc186dd5e5979e1bec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:40:76:4d:a8:24:5e:ee:0d:94:ad:0a:c2:55:
94:29:4c:e2:53:68:74:45:c8:60:38:fa:5c:96:e9:
c7:ba:3f:2c:9f:a7:9e:f6:83:31:5a:d4:9d:0a:57:
aa:5a:e4:60:35:a7:ba:bd:1c:a2:41:83:21:c0:3c:
db:36:2a:36:ab:3e:d4:5c:ad:68:2e:00:30:d1:00:
cb:77:b3:a0:6c:4a:c3:bb:1e:39:3b:05:02:f9:14:
18:46:9f:77:de:b0:bf:2c:7d:5f:c0:ae:d3:f9:8a:
0a:ea:d4:78:c7:0e:c7:e6:2f:2f:78:28:48:82:6a:
00:1b:c0:80:bf:9b:71:ad:12:64:2f:55:9c:d1:c0:
05:e3:95:cf:24:88:8c:f2:2c:e8:02:d2:47:1c:81:
d6:11:5a:d6:e2:c1:93:0a:b6:ec:8c:a4:e5:9f:92:
63:62:be:a5:bb:9f:4f:1a:ec:2d:2a:91:f6:1c:81:
84:7d:28:82:98:6c:6b:26:98:20:be:34:51:48:74:
d4:73:0a:f5:7c:a2:f3:af:d3:0a:30:a2:c2:8c:b3:
ae:de:36:5e:74:83:09:55:47:68:d7:be:46:28:d3:
74:9a:fa:78:1f:9f:85:86:c8:79:14:bf:31:74:12:
d1:38:d5:27:1f:5b:5f:c0:25:e7:e2:2c:a1:01:41:
eb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A6:94:7C:C7:2E:9F:97:39:BD:AD:C1:86:DD:5E:59:79:E1:BE:C6
X509v3 Authority Key Identifier:
keyid:63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:bd:61:ec:82:df:6a:11:f2:ba:c9:da:da:8f:15:05:b9:f6:
71:57:2d:e2:8b:e5:4d:0c:02:a0:7e:30:a5:fd:4f:cc:ed:66:
ec:f5:37:ed:be:69:e2:ad:1b:f7:71:ef:eb:cc:fb:17:50:5d:
ef:e8:5f:f1:38:50:ef:a3:54:5b:36:a2:59:2c:55:81:cf:ed:
dd:48:08:60:c3:92:e6:fc:3f:54:45:aa:a7:2a:64:56:cf:45:
01:49:8b:12:30:22:57:fa:27:cb:ab:5a:65:fc:ab:2b:b2:77:
37:38:c7:77:66:65:7a:d4:b3:a0:67:f2:4d:8a:04:6c:51:33:
e2:f3:44:7f:59:83:69:e8:e6:1e:e4:8b:72:f4:da:ba:30:78:
4f:05:74:0f:69:b9:e3:f0:b1:a1:30:a3:15:0d:14:35:5c:82:
73:3c:67:93:c7:02:ca:cf:a4:7c:1b:86:7f:98:68:4b:ae:29:
01:96:c4:66:4e:cf:51:1f:c3:6d:90:bd:9f:e4:a2:aa:5f:39:
53:88:b3:ae:36:ce:7d:3a:b7:83:1f:37:09:72:6d:c0:83:0a:
11:42:bc:1b:87:0b:77:35:48:e2:37:dd:73:ef:d1:db:59:13:
73:aa:ce:9a:43:1a:57:ae:45:da:34:1d:13:11:30:1b:60:72:
0d:c9:68:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:45 2025 by rpki-client