
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
File: yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft (raw, json)
Hash identifier: undE7JlbT8gHk7FVKPBveNUaEiwlC7Uy+PtzSrUohck=
Subject key identifier: E8:64:A3:E8:38:76:4B:BB:25:16:73:7B:44:25:FF:64:3B:AD:CF:63
Authority key identifier: C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
Certificate issuer: /CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Certificate serial: 01976885306DB9758277C917BBE24F807ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
Manifest number: 1274
Signing time: Fri 13 Jun 2025 09:00:48 +0000
Manifest this update: Fri 13 Jun 2025 09:00:48 +0000
Manifest next update: Sat 14 Jun 2025 09:00:48 +0000
Files and hashes: 1: qaAnyBes9jUnUhuZgA6_0wh2Utk.roa (hash: SqePUXPFn7aMkbwwWNRWIjpMhjMen/HlDEhNyjcwe8Q=)
2: yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl (hash: 4wxmwRN8dQpZj6Aa/Ah3r0q7DnzP1NGqslMXxLMaD9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:30:6d:b9:75:82:77:c9:17:bb:e2:4f:80:7a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Validity
Not Before: Jun 13 09:00:48 2025 GMT
Not After : Jun 14 09:00:48 2025 GMT
Subject: CN=e864a3e838764bbb2516737b4425ff643badcf63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:35:27:5e:e6:c6:b7:19:af:91:0b:9c:f0:aa:
f5:8f:c9:40:fb:7a:5e:03:c6:57:27:56:37:94:32:
e9:58:f2:17:e5:49:9a:75:dc:c1:66:4e:65:5d:99:
ca:61:a9:a5:b2:b7:f3:db:ca:f4:07:4f:46:0c:73:
92:38:4f:97:1d:09:1a:18:a1:39:a5:c3:56:6e:3b:
f6:46:f8:62:db:53:d9:c3:65:62:72:62:0c:63:74:
aa:ea:b1:73:56:e9:be:9d:7e:70:1a:24:52:e4:e2:
28:4c:eb:5f:ce:04:19:73:44:07:94:a2:b5:a9:ff:
5f:e0:6c:60:97:08:be:90:a2:4e:35:ff:bc:72:eb:
c3:7c:0d:16:3d:82:e3:09:90:ff:b1:57:4c:c1:10:
f3:97:3a:30:c0:1d:1d:13:ae:57:12:55:b0:c5:99:
95:30:40:67:19:92:f4:3a:ed:52:ee:af:f1:a9:29:
5c:ca:4c:83:7a:6c:2e:e0:a2:f1:d6:41:e9:36:b2:
4d:5c:ad:88:ac:ee:8a:74:f1:3d:92:a3:39:a3:b0:
75:f4:29:0a:c7:e8:f9:80:06:fb:05:85:56:31:7b:
55:3e:b6:68:cb:31:32:15:78:18:8c:cb:84:f2:0d:
ac:e2:43:75:29:02:86:1e:4f:5b:01:32:0b:4a:55:
2d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:64:A3:E8:38:76:4B:BB:25:16:73:7B:44:25:FF:64:3B:AD:CF:63
X509v3 Authority Key Identifier:
keyid:C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:67:a9:d5:b4:89:f4:66:06:38:c1:be:7a:88:7c:25:74:5a:
f5:6d:f7:0f:c5:df:20:49:18:9c:3f:9b:70:64:09:03:96:77:
cb:3c:b0:c2:0b:fc:d1:9f:86:55:1e:31:77:18:bc:8c:67:67:
9c:3d:5c:f2:16:f2:31:49:5c:95:d2:5b:b2:40:37:0a:b5:07:
3a:1a:88:69:7c:ba:40:fc:4e:a8:a8:34:e9:18:e6:78:62:18:
cb:09:7b:93:e0:a1:f3:43:85:dd:bc:c0:70:63:8b:f5:ec:f3:
b2:d0:76:84:5f:27:9d:b9:02:4c:44:f3:d7:8f:99:1e:3e:87:
6a:f9:3e:ba:39:b0:2b:87:87:85:ba:78:3e:b7:4e:6e:be:55:
06:0b:89:b5:ab:9a:c0:fd:8f:dc:fd:e0:08:21:c6:00:99:f8:
c5:10:21:f2:f0:3b:5d:dc:90:29:09:0d:03:2d:88:e2:a3:ce:
77:ef:bd:a4:4b:4e:0a:46:1f:61:47:ad:35:ff:79:c3:62:00:
0b:4a:da:0e:6b:41:14:fd:a8:d2:9c:b9:b7:f5:dc:97:cc:00:
6b:b9:30:13:01:3c:97:95:dd:97:57:ce:99:03:a5:0e:fa:5e:
05:6d:0b:0f:80:64:0b:4f:fa:79:7c:31:fd:71:03:e5:30:f6:
de:32:b7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:57 2025 by rpki-client