Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
File: RYzFKgcHzDQKycf26QKLZLcCZ7w.mft (raw, json)
Hash identifier: 0TZdeyqIw6X9d+CR93OJ0PessNKKtmuRWMlbh8XY4AQ=
Subject key identifier: EE:B1:D8:D9:DB:03:28:10:61:75:5B:16:AC:8E:9C:2A:10:6D:5A:2E
Authority key identifier: 45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
Certificate issuer: /CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Certificate serial: 019779E64509B5DD5406B7E43F3BA36B3370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
Manifest number: 06ED
Signing time: Mon 16 Jun 2025 18:00:23 +0000
Manifest this update: Mon 16 Jun 2025 18:00:23 +0000
Manifest next update: Tue 17 Jun 2025 18:00:23 +0000
Files and hashes: 1: IkNC-TUcCoYBxsQeLh6_eg3WO0Y.roa (hash: FzBKtoxKdAzZGhoYpGryWwHPZ5WZpqNHKyLplIOiPAU=)
2: RYzFKgcHzDQKycf26QKLZLcCZ7w.crl (hash: 7q7bfy6gKFUyDJm2Nz2ewdBdYESU5swza31AK5qX1n0=)
3: _5WIvJfKyXPt7q3eDEUV4dqzXLc.roa (hash: WY6kQSCLPQqO6U8inB26YKVMLyQQktJDfS2xbDWHzWw=)
4: uDI0D6qr7-usCDL-fgv2aBY_bUU.roa (hash: H5Mm89vS+5YR+a0XeYRvNkRodKD27aIsyfCqNBxXQhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:e6:45:09:b5:dd:54:06:b7:e4:3f:3b:a3:6b:33:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Validity
Not Before: Jun 16 18:00:23 2025 GMT
Not After : Jun 17 18:00:23 2025 GMT
Subject: CN=eeb1d8d9db03281061755b16ac8e9c2a106d5a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f7:18:d9:49:d9:8c:b6:e6:73:6d:94:6f:83:
b2:3c:c1:0c:26:09:95:d7:ff:1c:43:91:a9:28:d0:
36:e7:af:b8:7f:17:85:7c:5e:88:2c:86:bf:bb:b0:
0d:02:51:80:52:d5:84:d6:8b:7e:4c:48:7e:c7:8d:
40:3c:aa:7e:95:b8:2d:30:f6:9f:5e:ed:ec:74:41:
d4:6f:53:09:65:47:00:4e:48:11:2f:08:b0:bf:ba:
91:ef:ef:b4:91:19:51:09:01:66:43:a3:c7:fc:c9:
6f:0b:f0:26:10:b0:8d:8b:b0:aa:e2:92:89:4c:1c:
6c:52:e7:4f:bb:0f:65:9e:bd:cd:a4:52:e9:93:00:
f4:0c:e8:1e:dc:55:25:ab:53:87:79:04:f4:d5:3c:
d0:0f:73:da:97:05:e4:49:4d:68:f6:db:67:90:ca:
fd:bb:2d:ed:51:b4:65:b6:8b:bf:a7:4f:73:ea:76:
d3:e2:cf:8f:6c:dd:98:b6:7b:58:e2:b2:92:fa:11:
33:11:20:4b:45:d4:9a:c0:24:ec:87:4d:15:25:e5:
16:86:5f:b8:16:3f:e9:7f:1f:8c:f7:66:c7:0c:3b:
96:b4:2f:36:02:32:34:00:6c:cd:4d:54:3a:86:01:
3d:d6:e5:fe:73:a8:bc:86:e0:3c:b5:8e:6d:0b:51:
ee:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B1:D8:D9:DB:03:28:10:61:75:5B:16:AC:8E:9C:2A:10:6D:5A:2E
X509v3 Authority Key Identifier:
keyid:45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:86:9b:9b:5c:fd:70:bc:2e:5b:4d:df:6b:f3:60:10:1f:41:
7d:7a:57:4f:0e:82:ab:f4:85:76:69:09:40:8d:05:10:81:56:
54:6a:ec:a7:04:3f:38:9a:0f:ee:71:6a:a3:34:d8:4a:b2:ae:
b3:d8:2b:c2:ef:3f:b2:cc:2d:62:dc:dd:cd:26:96:18:fc:95:
5c:e1:0c:d6:4a:13:79:4a:1b:6e:a4:5a:da:7d:c2:eb:6a:9a:
ba:55:81:fd:57:a9:ae:ee:5b:b7:0f:9d:92:c5:df:3d:e6:99:
9c:cd:6f:67:fe:aa:92:8b:d0:98:cd:a1:85:de:3b:e1:ad:a5:
fb:28:63:d1:e2:b1:b6:89:64:72:76:4e:8f:34:0b:a9:93:92:
65:f7:99:80:8a:f7:bc:b2:9e:f3:d9:95:fa:4f:18:76:c1:16:
77:ba:4b:c0:92:b7:01:e8:fb:dc:13:2a:16:8c:2c:36:fe:59:
42:9c:ce:9d:20:02:06:4f:79:28:9d:88:41:59:0e:d4:f4:00:
88:97:93:f0:42:5a:58:da:b3:29:1b:d3:67:d7:11:0d:f7:92:
45:fa:cd:4e:07:a4:9d:0b:05:17:80:56:21:aa:76:71:ac:74:
89:3b:5a:ff:85:ab:6f:44:61:f1:fb:a7:92:08:47:3f:29:4f:
cb:66:9d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:50:46 2025 by rpki-client