Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
File: 0YHQxAlRpPkA5NndnCDkhWNQkg4.mft (raw, json)
Hash identifier: +dXNl0w1RH7Zgv5+7oGFL19SkhppnchnpY1GKiFXxxc=
Subject key identifier: DF:D6:42:6E:FE:C1:66:D6:6C:35:3C:C3:24:65:77:D7:CE:C4:AD:70
Authority key identifier: D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E
Certificate issuer: /CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
Certificate serial: 01976BF42E78BA42779EB262B3CF1A726B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
Manifest number: 1593
Signing time: Sat 14 Jun 2025 01:00:53 +0000
Manifest this update: Sat 14 Jun 2025 01:00:53 +0000
Manifest next update: Sun 15 Jun 2025 01:00:53 +0000
Files and hashes: 1: 0YHQxAlRpPkA5NndnCDkhWNQkg4.crl (hash: 1ytWzZUmx3cO0+cdXMZ0oQ5iliNjS9Z5fkm+iqi9X6A=)
2: 2VAk9AH_jCxBcmS3UFNJkQWmjmM.roa (hash: OTJmVbnhsENHWSTSM66puZiLKu+kw6NtZbXCQeGN/YQ=)
3: 5kzmDTi0KIXTn8Ss2d36rIX1bZA.roa (hash: VgZeJy91lZpXmzMfyFbTui1JSN8xoQwBbcwBQ01/D0A=)
4: SA8oSTczcAjgQR1zXNlc0Vgrtd0.roa (hash: fw6Ud0wGZN9ltnlpcBVHmq+wSri7RZaFK71pfthgGyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:2e:78:ba:42:77:9e:b2:62:b3:cf:1a:72:6b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
Validity
Not Before: Jun 14 01:00:53 2025 GMT
Not After : Jun 15 01:00:53 2025 GMT
Subject: CN=dfd6426efec166d66c353cc3246577d7cec4ad70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5a:5a:47:f6:d8:83:63:b5:97:43:74:f1:2e:
1c:d8:29:ce:19:a4:3c:36:2c:b2:fe:57:a4:1b:7a:
a0:b7:ed:df:91:89:25:93:de:c9:7b:f0:f0:04:1d:
02:93:aa:fb:1a:e4:bb:3d:da:16:ef:2b:c2:a3:a4:
b4:4b:d4:a6:75:80:ed:14:0c:76:c7:b7:83:e7:0d:
52:f6:ef:64:92:6c:cc:3a:33:5d:e5:54:98:77:9a:
87:8d:f8:0f:0f:71:0e:66:28:bc:1c:2a:e2:04:13:
d9:33:83:19:1d:84:16:66:4d:15:41:5b:b4:11:71:
20:63:7c:89:ed:ae:1f:5a:e3:57:5a:01:86:f4:8c:
5f:81:ed:74:c8:6d:74:00:18:c1:b3:e1:b4:a0:62:
5c:f1:ca:d7:db:50:a4:4b:9b:b7:04:82:15:0d:d6:
f0:60:4d:66:0f:d9:5c:47:b8:63:37:72:ea:b3:cb:
69:d1:eb:51:fb:94:6e:37:b1:4f:9a:96:5f:99:8f:
01:75:a0:f2:e0:5e:01:7a:fd:2d:b8:87:bb:fa:70:
72:e2:db:2a:0a:43:1e:c4:d9:60:20:c8:c9:bc:7d:
5b:47:5a:be:25:32:0e:af:4a:27:f6:18:c1:ce:ec:
8f:62:a8:93:ca:c2:cd:8f:65:c1:2f:c5:bd:b9:29:
73:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D6:42:6E:FE:C1:66:D6:6C:35:3C:C3:24:65:77:D7:CE:C4:AD:70
X509v3 Authority Key Identifier:
keyid:D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:ec:3f:d6:29:f2:1d:95:e9:29:76:e5:aa:f9:73:77:bd:19:
a5:74:25:51:b8:7a:33:15:b5:40:cb:90:d9:9d:c8:32:bf:52:
a8:02:e7:4a:96:2f:32:3f:d8:ba:6c:6d:81:82:ff:91:2e:14:
06:11:4a:25:23:56:78:cd:0e:0d:cc:de:2d:70:3c:aa:64:de:
38:2a:49:01:ef:60:c4:3e:d0:ae:e6:bc:0a:ac:79:2e:05:13:
80:0a:69:eb:90:30:5f:92:70:cc:1b:fa:55:15:22:ef:e1:93:
45:cc:57:6f:83:2e:f3:a4:09:b9:50:4a:d9:4d:7e:76:0a:8e:
9b:02:93:d1:29:0c:26:fe:5e:b5:e4:bc:09:a3:c1:65:31:91:
4b:ff:e2:c9:e2:25:9e:66:a0:fc:1f:6c:ed:e3:f0:18:18:e3:
cd:b8:df:01:8e:54:db:46:fb:93:9d:4b:7a:d9:85:ca:24:12:
16:15:dc:e2:b7:07:e0:41:65:12:28:b2:30:5f:1b:fa:67:5e:
6d:ed:ab:da:35:35:aa:18:e6:18:8d:45:2e:74:b6:47:6f:92:
84:a1:15:34:60:58:37:e5:e5:93:0f:0e:d5:1c:ca:38:97:b7:
34:13:b9:38:b3:ef:ec:6f:29:cc:ea:f3:a7:64:b6:64:e6:a7:
4c:cb:a2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:41:51 2025 by rpki-client