Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
File: ydDpI0zGchlXpKwhPqxnU-2F7qc.mft (raw, json)
Hash identifier: am42irbZeISU0Stvx5IxBr3YSlj7fBfp4yOQAc/Xxjo=
Subject key identifier: E1:AD:67:19:04:51:DB:F0:30:81:31:99:0F:E4:CC:99:39:15:40:3E
Authority key identifier: C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
Certificate issuer: /CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Certificate serial: 019777F8291EE71B23639A6332B27C4339BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
Manifest number: 04D4
Signing time: Mon 16 Jun 2025 09:00:41 +0000
Manifest this update: Mon 16 Jun 2025 09:00:41 +0000
Manifest next update: Tue 17 Jun 2025 09:00:41 +0000
Files and hashes: 1: OokYUWcbSrbqH_f8HmgcmqdnhJI.roa (hash: lEOM5QUpe0ZqlkmiuxBrUGOTGhzAkiXF0N6KvtAneUM=)
2: _G1IwYuiPRKax01xXjjobsob6yw.roa (hash: LZnDAWxOXPzc+P38eGPHBFeaOSKoPBWPSSrjh5BR84Y=)
3: ydDpI0zGchlXpKwhPqxnU-2F7qc.crl (hash: MYzutZXGTLiIijLaa2hrfX7X1hD+nhCPOVEPGnW2lJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:f8:29:1e:e7:1b:23:63:9a:63:32:b2:7c:43:39:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Validity
Not Before: Jun 16 09:00:41 2025 GMT
Not After : Jun 17 09:00:41 2025 GMT
Subject: CN=e1ad67190451dbf0308131990fe4cc993915403e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:54:25:7c:13:49:0c:27:21:5f:00:65:17:ff:
fa:74:a4:2c:18:38:14:cf:d0:3b:f4:4c:92:5b:47:
ee:ce:17:0b:d2:16:cf:de:5b:90:3a:5f:19:06:60:
0f:e2:84:dc:6b:ae:f8:a3:4e:98:f5:f1:8f:73:45:
e2:21:14:28:3d:da:43:76:dd:70:c3:45:cd:df:d1:
c2:17:0c:31:a7:60:13:3b:ed:d2:14:3c:94:0a:7c:
21:54:bf:ac:6e:48:57:94:03:ab:17:66:5f:b0:44:
1c:a3:cd:d8:78:6b:86:a3:8b:ae:8a:19:cb:92:ac:
ec:46:1f:1f:26:1c:f9:5d:a3:12:a3:d3:1f:ab:b1:
ac:b3:15:f8:6c:ab:70:ee:24:fd:c0:98:e5:28:67:
f4:0b:ad:3e:f2:18:08:ce:7a:d8:37:96:b3:04:be:
3d:6b:e4:ff:14:49:f0:67:7f:88:df:41:d7:fe:d7:
38:64:f1:79:40:7a:9d:51:65:91:dc:5b:26:de:de:
c5:0b:a6:fa:49:41:4a:39:37:68:8c:08:df:15:fb:
4b:40:8f:37:b2:5b:00:da:d7:63:56:93:53:58:99:
f4:b1:28:ea:2d:a8:31:b9:ff:50:3c:5c:8a:92:2b:
80:ad:c7:70:e2:15:c2:81:a9:70:01:70:89:5b:eb:
18:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AD:67:19:04:51:DB:F0:30:81:31:99:0F:E4:CC:99:39:15:40:3E
X509v3 Authority Key Identifier:
keyid:C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:80:9a:bb:98:8d:50:c6:9e:8b:2a:ea:bb:cd:80:29:ff:38:
3c:f3:5a:e4:5c:63:8e:6f:15:1f:0e:62:db:56:9e:c0:49:dd:
6b:df:c5:fd:21:49:8b:34:c5:4d:4d:8d:85:ca:cc:d7:0e:91:
fc:58:1b:4b:b9:82:7a:7f:d0:3d:76:61:e3:04:94:cb:2e:4b:
f9:63:8f:2f:3f:a0:cf:85:a9:f2:61:b2:1c:b4:6d:a9:a4:fe:
55:d0:b5:2c:a4:2b:89:c4:5e:4d:32:be:9a:43:d7:c4:a2:67:
c2:3a:ef:4c:f3:34:db:4c:d4:b1:80:24:3b:88:98:aa:02:16:
af:2c:5a:1c:a9:23:cb:1a:ac:67:79:9b:79:fa:4d:38:53:83:
76:0f:96:4e:32:bb:1b:5a:91:1c:78:ea:e9:44:23:10:39:5c:
b2:c8:8b:88:d0:c3:36:97:dc:d4:82:47:3a:1a:a1:32:84:6c:
58:b9:e8:ab:fa:46:55:cd:a6:50:de:8a:d1:d9:a2:5f:e3:9c:
89:5d:59:f2:43:57:f7:c7:a5:f0:1e:65:a0:01:30:d9:0d:41:
c3:cd:dd:27:75:f4:4e:bb:05:a4:fb:f7:a3:7c:58:bc:0f:eb:
e5:5b:e5:04:c2:ef:27:2e:44:9c:e4:68:ea:86:d2:39:6e:d0:
bb:24:35:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:32:42 2025 by rpki-client