Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
File: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json)
Hash identifier: FlQtckq80YwqTdLx6UvfDa2WcTXjj+iUQut/Odu05lQ=
Subject key identifier: 9F:D8:E6:F7:52:BF:0C:19:69:18:2D:3C:50:D4:D7:48:E7:82:36:F5
Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Certificate serial: 0197715118D3402F260C83B712912C9D8CC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
Manifest number: 0C15
Signing time: Sun 15 Jun 2025 02:00:29 +0000
Manifest this update: Sun 15 Jun 2025 02:00:29 +0000
Manifest next update: Mon 16 Jun 2025 02:00:29 +0000
Files and hashes: 1: 1c8AtbAMfHlASe1nRmNmVLi-IPE.roa (hash: Yc6B/ACFRjBHZdeDucnbU591dd3oO9WG4VeSfIdJAWg=)
2: B-YGSnw6mlzmsy9e1WdnYiYl8uA.roa (hash: dqAKP/dgHYPVRyqQIAqMlRLtWiN+IpM+mjudxWdaulM=)
3: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: 3S4ItZwwZhzDNS5Xzl/b/hGbFDzfmU0J0qgkpDNLJ+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:18:d3:40:2f:26:0c:83:b7:12:91:2c:9d:8c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Validity
Not Before: Jun 15 02:00:29 2025 GMT
Not After : Jun 16 02:00:29 2025 GMT
Subject: CN=9fd8e6f752bf0c1969182d3c50d4d748e78236f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e4:97:ee:17:35:01:b4:c8:30:92:2a:03:b5:
9a:4b:68:3f:d0:6c:3b:93:ad:68:06:88:cc:81:3a:
ae:1f:9d:02:0f:35:4d:e1:fc:5a:a4:b7:00:59:8f:
12:92:6d:db:d4:55:16:0e:73:48:b8:44:9b:39:38:
49:57:23:11:f1:ad:e1:11:9f:7f:73:79:45:32:6a:
c0:9c:4f:13:25:e5:3b:24:3d:be:24:1c:bc:39:a2:
9d:fb:cf:6e:a9:31:d7:67:99:55:1f:1a:bb:99:de:
94:ee:8f:82:9e:17:72:04:d0:c0:20:f3:32:57:f2:
cf:79:44:19:9e:98:4b:ce:8f:80:77:bd:78:e4:b7:
b6:10:ef:4f:c5:e6:c4:4e:68:28:c1:e6:9e:fc:d7:
24:4a:52:0b:56:7c:a2:ce:db:ca:6d:71:a3:f5:d4:
a7:11:10:cd:72:75:21:62:ce:ef:cd:7b:41:b8:2d:
15:b2:9d:af:55:c1:a0:84:2f:e0:1a:37:48:32:8b:
33:4e:fc:7f:2c:35:bd:67:72:56:63:66:28:e9:cc:
d1:1a:31:c7:59:5a:d4:40:02:89:5e:4e:21:12:da:
db:94:e8:b0:82:e6:85:67:96:61:40:b7:40:70:ca:
ac:34:39:04:a6:9f:06:45:ca:b2:24:98:08:9b:cd:
71:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D8:E6:F7:52:BF:0C:19:69:18:2D:3C:50:D4:D7:48:E7:82:36:F5
X509v3 Authority Key Identifier:
keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:82:84:37:f7:6d:3b:46:ae:dd:da:09:ff:4b:df:3a:92:13:
42:84:9d:a3:56:9c:a1:e9:55:5c:e4:ca:98:1b:83:d4:80:52:
42:68:cd:19:78:9b:40:7e:d1:45:9f:66:ef:33:44:12:ff:52:
4f:28:99:fc:a7:6b:66:a7:fa:f8:71:cb:88:cb:8a:2b:1c:cc:
95:3d:3e:e6:52:98:6f:00:ad:9b:a6:0d:0a:4f:06:ef:aa:5f:
57:92:12:e8:14:ac:b1:b4:f9:9e:3b:93:90:5f:99:45:18:09:
89:1a:48:ba:a5:28:c1:39:53:f2:fe:40:a4:c6:58:11:66:43:
4c:5c:60:09:5c:a3:04:9d:0d:77:48:62:d4:80:e3:4b:75:32:
51:87:7b:a3:05:e8:51:e8:53:bc:1b:c8:61:b8:0b:8e:80:19:
dc:bb:5d:0e:f7:9f:93:61:31:34:26:98:95:ea:d8:43:be:da:
6e:b8:8c:d1:dc:96:79:96:02:31:4c:da:ad:e7:06:65:f3:e9:
fe:4d:fd:c6:a6:97:27:9d:4b:33:4c:d4:8a:2c:09:12:f8:d8:
60:1f:e8:e7:ac:3f:81:db:be:ab:36:af:f4:13:63:dd:05:9d:
7a:45:8f:ab:db:ec:54:24:da:a4:a9:09:94:a0:f4:ea:bf:18:
f2:bb:36:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:59:31 2025 by rpki-client