Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
File: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft (raw, json)
Hash identifier: Gbjt8pj0M3dEMPBqibVtX0lwGByyDpjUMalRIP6TVQU=
Subject key identifier: 67:C0:FA:77:C6:36:10:1D:72:C0:BC:E2:52:FF:E9:23:D5:F1:F8:FF
Authority key identifier: FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
Certificate issuer: /CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Certificate serial: 01977A8B26022A11210D1FAA5F4967E74012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
Manifest number: 1416
Signing time: Mon 16 Jun 2025 21:00:28 +0000
Manifest this update: Mon 16 Jun 2025 21:00:28 +0000
Manifest next update: Tue 17 Jun 2025 21:00:28 +0000
Files and hashes: 1: ZBvl9kgTfl9xpoCDalOQ41fsQlA.roa (hash: eTBJG42QxSY9j5MKHECEE0ZbmMhc6Mb5ITGizx3+EdE=)
2: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl (hash: cOJzcCkxnkJxSr94db2uLDd8+vjy8mBbNsDrDajKc1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:8b:26:02:2a:11:21:0d:1f:aa:5f:49:67:e7:40:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Validity
Not Before: Jun 16 21:00:28 2025 GMT
Not After : Jun 17 21:00:28 2025 GMT
Subject: CN=67c0fa77c636101d72c0bce252ffe923d5f1f8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:76:9b:5a:a7:9d:56:a8:d4:44:cd:78:1c:e0:
29:3c:f9:ee:c6:9c:51:e7:0b:82:6d:cd:41:a7:20:
50:62:ed:0c:c5:7f:20:e5:60:98:92:e4:a7:c2:ca:
cf:3a:ec:59:b3:99:b0:67:d6:98:30:c8:78:d9:1b:
d2:40:41:e8:13:73:a5:a3:67:20:a3:bc:fe:06:b9:
4f:7d:44:b9:7d:ba:25:70:0e:86:c7:36:5c:79:a5:
a2:81:55:1d:0e:5d:cd:ae:b0:28:88:5a:3c:e9:d7:
27:30:a8:0d:56:65:b1:dc:ee:0a:cb:61:51:f1:0d:
de:c8:00:9d:51:79:8b:00:a1:29:9d:43:cd:a8:5c:
fb:af:03:3d:92:29:e4:c8:ed:39:c4:89:9e:05:43:
88:d2:d1:f0:54:e9:d3:4d:68:c9:a7:42:5b:95:23:
2f:07:c4:89:b8:87:1c:26:78:9b:a4:97:90:0f:f7:
5d:bd:a4:7e:1f:7c:0a:0c:90:7c:a4:e4:46:91:63:
61:92:df:7f:a5:97:36:4b:47:92:fe:08:3b:0e:dc:
4f:b9:75:01:bd:48:b4:b5:92:19:77:2b:83:6d:a1:
6e:6f:b6:f4:a8:c8:63:ec:36:1a:fa:15:61:f7:09:
f6:ec:d8:0c:5f:a1:4f:95:24:10:00:3e:00:d4:b7:
4b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C0:FA:77:C6:36:10:1D:72:C0:BC:E2:52:FF:E9:23:D5:F1:F8:FF
X509v3 Authority Key Identifier:
keyid:FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:8d:c3:ec:56:6b:d0:ce:e2:87:17:8e:5b:63:87:c4:10:3c:
3c:a3:d4:ab:4e:5e:0c:09:b5:cd:0b:55:e1:de:43:43:d9:84:
fe:f1:f2:4a:df:20:8c:d0:0b:17:58:bb:2c:3f:62:2d:d2:1f:
6e:ef:cc:c1:03:a5:2e:21:ec:05:12:67:fd:ba:c9:86:53:21:
13:23:c0:40:be:f3:a5:3f:e3:e4:a5:bf:93:cc:01:3f:f7:9b:
50:48:5c:3e:9b:5a:67:22:e8:41:f8:5c:f4:fb:4a:10:3d:75:
cf:80:7c:bd:ae:e2:3e:f7:b0:4a:de:f9:0e:f0:62:ad:02:c5:
29:82:af:65:ec:62:2e:06:13:8d:56:24:af:a8:ae:ae:fe:41:
82:44:08:d8:67:aa:c2:80:13:c8:b4:94:51:cb:65:fe:72:a9:
a5:a9:53:86:ea:71:07:34:9f:ce:97:d0:b1:14:5f:89:0f:c2:
b0:4d:6c:a6:08:e2:b4:af:01:b2:1c:e7:98:d7:0b:51:e0:0a:
e8:f4:a1:2d:a1:72:21:3f:a3:e9:64:05:e8:36:35:b2:1a:ea:
9c:7e:a6:03:20:f3:48:29:be:70:62:df:f0:d3:38:e1:f1:6e:
bc:39:c6:af:7f:0c:ec:8d:94:d7:84:e4:0a:ce:bd:08:0d:9b:
10:88:d2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:05:51 2025 by rpki-client