Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
File: y9IrSt4O0dTVMo6uXzili-lT-Dg.mft (raw, json)
Hash identifier: GJEop7wr8GfRI9eL9kNTlBGaDrX1P4NbN3W/vWnR50A=
Subject key identifier: BA:B3:5D:57:62:E4:49:AB:4B:1F:5C:09:67:AA:FB:C7:79:A0:90:22
Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Certificate serial: 0197703ECE27531D4BEE4A9268ECE0E941D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
Manifest number: 0C77
Signing time: Sat 14 Jun 2025 21:00:53 +0000
Manifest this update: Sat 14 Jun 2025 21:00:53 +0000
Manifest next update: Sun 15 Jun 2025 21:00:53 +0000
Files and hashes: 1: 73c0jhSky3BnN0TXunRjeB--q1A.roa (hash: 1Lx5ICQYUA/HUXjaB+c1tYSpkcTCOv6g20/mLwIRufE=)
2: y9IrSt4O0dTVMo6uXzili-lT-Dg.crl (hash: fYjntO/W7RG2XyWS8t6HZV0gXicofsVeBBRpxItAnT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3e:ce:27:53:1d:4b:ee:4a:92:68:ec:e0:e9:41:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Validity
Not Before: Jun 14 21:00:53 2025 GMT
Not After : Jun 15 21:00:53 2025 GMT
Subject: CN=bab35d5762e449ab4b1f5c0967aafbc779a09022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:31:3f:e3:5a:fd:1e:45:cb:da:89:9d:8b:77:
2d:de:d3:83:8b:0a:fe:0d:90:b7:12:07:2c:d3:63:
8b:42:da:5a:bd:ec:3e:be:55:42:91:7e:be:72:a2:
a6:8f:e8:99:f6:b2:6e:58:f3:cd:54:9f:a8:d0:3e:
65:31:3b:a1:95:ea:a8:24:e4:1c:50:7a:02:10:84:
55:ca:cf:72:2f:1e:b4:6d:d9:a3:f6:83:b1:b0:9b:
4f:c2:28:99:6b:88:e4:c8:3a:0e:e7:ce:0a:76:79:
ca:6a:c0:07:1c:c6:6e:0b:2c:ac:a4:12:c3:41:93:
88:c2:e6:df:8b:94:91:96:9a:59:93:ce:16:57:6a:
c5:c8:10:d5:f5:fc:ad:c6:a2:a0:bb:5e:d6:8f:bd:
ee:a2:95:f6:c3:31:20:33:b5:f3:3e:c8:fa:79:d4:
36:13:b7:8d:ba:e3:40:a1:6c:e6:e3:2f:5b:e6:32:
a8:54:52:00:ec:22:0c:80:f5:b0:c6:19:4c:a8:ca:
20:5c:03:cf:55:f4:6f:24:c7:6b:d2:d4:0f:08:ac:
dc:86:39:0c:07:55:25:1d:ca:3d:52:bf:3c:b3:ff:
87:ed:b0:15:85:04:60:93:f1:ae:33:65:ab:78:cf:
dd:74:f5:cf:d6:fa:96:65:8e:c2:fb:a8:93:ca:8e:
aa:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B3:5D:57:62:E4:49:AB:4B:1F:5C:09:67:AA:FB:C7:79:A0:90:22
X509v3 Authority Key Identifier:
keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:62:64:d0:70:dd:21:ea:bc:1f:11:52:44:8c:9a:74:ed:76:
e5:3f:81:38:0b:9e:f2:c2:29:11:e6:0c:04:9d:87:30:8c:0f:
a7:06:89:99:09:2c:e3:36:9c:68:92:ee:93:ef:bf:9b:b6:8c:
32:f1:a4:a5:62:b7:aa:ea:c2:de:f4:a5:98:20:e7:57:8b:8e:
d4:2c:9b:64:8e:78:e3:a5:68:f0:2c:05:ec:11:67:0a:de:5d:
82:7c:2d:77:e5:62:29:8c:48:14:db:31:40:9a:1d:2a:61:4e:
72:53:07:b9:1a:8c:b2:8d:30:9f:cc:cc:41:e4:f6:2e:ed:af:
6e:46:d7:e1:e9:bd:73:0e:76:2a:c1:75:bf:e6:ad:57:13:c1:
7f:dc:e5:70:ba:0f:b9:2d:b1:bf:3b:57:98:32:ed:ce:8e:94:
b2:1f:d8:88:51:97:4a:c9:b1:a1:44:e5:67:47:4c:64:5c:78:
c8:75:c4:34:7d:d9:c4:c5:ac:00:1c:59:a9:84:27:6e:aa:79:
15:98:57:ae:9f:c9:ab:2a:ac:b8:e4:59:f5:28:70:be:f7:ab:
ab:ab:18:32:4e:29:67:c3:bc:50:27:e7:61:76:59:17:46:90:
42:b8:ad:8d:65:f7:7c:d5:51:11:9e:82:6d:39:9e:f4:ff:30:
58:f3:eb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:59:37 2025 by rpki-client