Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
File: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft (raw, json)
Hash identifier: wkDaNc1mCveA9Bv70gCi3aiAzSVZc8YcQbCgrRk6wO0=
Subject key identifier: BE:6B:59:BC:13:12:4F:6E:7C:55:1B:A0:BF:57:3E:FB:F3:3F:A6:40
Authority key identifier: FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90
Certificate issuer: /CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
Certificate serial: 01976D745CC8879C1CD50AA60021C0BBAFA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
Manifest number: 1210
Signing time: Sat 14 Jun 2025 08:00:31 +0000
Manifest this update: Sat 14 Jun 2025 08:00:31 +0000
Manifest next update: Sun 15 Jun 2025 08:00:31 +0000
Files and hashes: 1: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl (hash: I9tr3I73TH7ekUmUDWMdzO12c0Vsal4EQkrrKwOnEHI=)
2: f60EmIZKa-1VrYL_MeAVCpnK1Bw.roa (hash: V7fZBYf3+IM758mKxyijYRokDtoZy64QV7izw1/QisI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:5c:c8:87:9c:1c:d5:0a:a6:00:21:c0:bb:af:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
Validity
Not Before: Jun 14 08:00:31 2025 GMT
Not After : Jun 15 08:00:31 2025 GMT
Subject: CN=be6b59bc13124f6e7c551ba0bf573efbf33fa640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1d:86:a4:24:64:a5:9f:f1:f6:8c:58:50:02:
64:bf:46:65:f2:c8:80:c0:47:f5:a5:2f:ba:91:52:
07:63:e0:8b:97:65:e3:ec:12:7f:a9:0d:9b:fb:06:
4c:da:b6:7c:6a:12:39:40:ab:3a:43:73:9a:ef:71:
e2:85:5d:a3:e8:74:40:e5:d1:cd:22:3e:a2:26:c3:
dc:03:7f:41:3a:57:2e:0a:25:61:65:95:61:e3:3f:
ab:74:73:93:ec:5e:85:fc:42:52:11:d9:53:a9:d6:
ea:fc:b3:bf:78:78:91:a2:3f:57:11:a4:b2:b0:e6:
19:21:fb:d8:44:33:11:7b:3c:08:51:b7:99:65:4a:
07:0b:06:4f:c9:d7:ec:d0:e5:c2:41:7a:03:35:68:
58:ad:03:6f:81:04:59:37:7c:37:b2:bb:71:f1:c8:
82:64:bc:3c:f5:65:83:70:ae:fd:e0:29:fd:08:8e:
7a:77:9a:15:f8:db:9f:90:2f:cf:19:9a:12:36:9a:
02:1d:04:b9:12:37:7b:fd:18:fe:c8:f6:80:1d:cb:
80:13:ca:c0:f9:dd:be:fb:f7:20:7e:d5:1f:50:69:
de:e4:f9:cd:f2:4b:27:92:32:62:2d:b5:48:c0:dc:
21:99:aa:ab:46:42:f5:a9:76:f7:09:d2:e3:55:fe:
09:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6B:59:BC:13:12:4F:6E:7C:55:1B:A0:BF:57:3E:FB:F3:3F:A6:40
X509v3 Authority Key Identifier:
keyid:FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:78:88:4e:c7:fb:fa:aa:ba:1f:71:34:63:65:cf:e6:c0:ad:
ec:0f:b5:61:46:b7:38:d6:77:70:b6:68:2a:36:bf:ff:d0:4f:
f2:7a:28:2c:c7:ed:3f:3f:e1:fc:dd:6a:76:6f:21:78:63:e9:
26:a4:3f:69:39:a8:d7:77:2e:ab:6d:de:a5:20:a4:73:39:c0:
a1:9d:f6:49:73:e4:41:83:e4:bb:40:bb:b0:a0:4c:b8:d5:1a:
2f:e9:ee:b2:22:d6:fe:13:1f:bc:02:e8:37:21:97:b2:3a:b7:
c1:9b:62:17:d5:a0:ef:e9:d4:df:38:5c:56:4e:e3:c5:fe:c8:
97:9f:0f:13:d4:8c:a2:89:aa:f5:13:33:a1:10:aa:f8:c0:78:
7f:66:bc:99:bd:65:0f:e8:b8:61:90:33:c2:a6:ac:96:e2:98:
03:bd:34:ae:bf:cc:07:bd:98:4d:33:06:0e:f6:26:3a:41:35:
43:0e:60:69:44:9f:be:39:96:53:f8:63:f0:56:35:88:1c:1b:
e9:d1:dd:a7:8e:6b:58:44:f9:e5:3a:28:3f:21:96:a7:de:96:
42:70:e7:29:3d:e7:71:e9:af:a2:98:65:6d:de:6d:6b:76:10:
b8:8c:fd:27:dd:fd:46:d4:e8:9e:f4:8c:2e:e9:f8:86:0c:7f:
85:13:20:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:36:19 2025 by rpki-client