Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
File: ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft (raw, json)
Hash identifier: mEt/fQTmgezoOmpOjcnQxWyuufsNyMGR2d9WKmnt09E=
Subject key identifier: 81:FF:F5:7B:CD:25:E8:65:30:62:7E:71:B2:56:B3:CE:14:4B:2E:22
Authority key identifier: C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
Certificate issuer: /CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Certificate serial: 019770E326B8A7D126E8181E8DDC426D6C74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
Manifest number: 07A2
Signing time: Sun 15 Jun 2025 00:00:24 +0000
Manifest this update: Sun 15 Jun 2025 00:00:24 +0000
Manifest next update: Mon 16 Jun 2025 00:00:24 +0000
Files and hashes: 1: XYTo8--GaI1zkSFfPzeY28AGPAA.roa (hash: +j8BMCXGsEgMrKyj3p7HthT9rpdHovUFyUwoGx0hCGc=)
2: _3URjmHxdeAClYJBPx5hMe6tQL4.roa (hash: Wn6zQOVZOy90FA4ddqwzS9m8fIclPh7APysxlSvJycw=)
3: ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl (hash: fQNYxZR7J+VxSpk3IfNf3YUzg57nG2+a1ENybUZZXxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:26:b8:a7:d1:26:e8:18:1e:8d:dc:42:6d:6c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Validity
Not Before: Jun 15 00:00:24 2025 GMT
Not After : Jun 16 00:00:24 2025 GMT
Subject: CN=81fff57bcd25e86530627e71b256b3ce144b2e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9d:f7:e3:42:86:30:97:fb:c4:35:e3:5f:9e:
1a:91:8f:da:06:1f:dd:1e:b3:ee:82:ba:10:ec:b0:
02:59:08:76:79:ea:d6:f1:45:b1:aa:24:41:49:81:
52:51:0e:76:46:0b:92:b4:69:02:50:eb:23:58:e7:
95:e6:45:c1:c5:00:eb:73:8f:e1:64:d9:fa:a1:e8:
92:14:3e:7e:e7:d3:9a:ba:d7:6f:d1:f1:b5:da:9e:
9b:8d:ca:24:9b:4a:b9:e1:c9:58:01:a6:19:6f:e2:
9f:87:31:78:ab:a7:a7:33:a8:e0:72:da:2b:6a:d7:
5c:5d:31:28:ac:4e:0b:6a:79:d7:94:e3:9a:32:b4:
82:44:9e:40:99:26:2a:01:ed:79:b3:e9:73:c2:d1:
86:e8:46:cb:6c:bd:1f:16:75:4e:12:70:bb:2c:40:
8e:da:55:85:ac:e0:37:48:ca:d9:af:bc:0b:e4:1b:
53:fe:2e:8a:d4:1b:26:ac:a2:4c:dd:23:f5:5e:59:
28:b5:00:84:29:66:7e:a4:db:a7:82:23:26:bb:00:
2f:01:1d:18:ff:f2:22:89:2f:6f:8d:f5:19:cd:55:
51:9f:e4:00:87:61:7a:b9:bd:f8:e7:a1:08:b0:05:
33:02:7a:35:c5:c3:78:c5:51:bd:a3:42:fb:35:45:
00:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FF:F5:7B:CD:25:E8:65:30:62:7E:71:B2:56:B3:CE:14:4B:2E:22
X509v3 Authority Key Identifier:
keyid:C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:c0:11:0b:ba:35:a7:bb:a3:d1:5a:b1:c3:ce:c0:76:11:2b:
d7:cd:9d:c7:15:89:ea:5a:f0:e1:a3:90:ab:75:77:c4:21:d4:
8c:cd:e0:94:b4:81:c5:11:a1:b0:98:08:2d:ca:1c:25:d9:d5:
b2:84:a6:2f:5e:d9:4b:60:22:62:94:27:65:4c:52:9d:c5:5d:
f5:a9:e0:e7:f7:ff:0f:97:73:a8:df:31:32:41:75:40:a0:78:
9d:0e:70:07:51:df:9f:bd:fc:32:a0:cc:92:78:05:81:27:19:
f1:ba:ee:52:7d:5f:08:9b:33:51:f5:7a:89:d0:b7:e9:e6:67:
af:a9:29:32:a0:c8:55:7b:5a:c6:06:cc:ed:a2:e9:49:75:6b:
6b:05:6c:e5:39:48:c0:d1:7b:d6:48:1a:31:56:c1:65:35:ff:
4f:fe:82:b1:9e:31:e9:da:52:e3:a9:b4:bb:77:59:95:a1:4d:
43:fd:d3:fc:78:f1:f9:9d:86:a0:5b:99:be:97:da:92:da:e3:
79:45:a6:ff:d4:d6:f3:b2:61:63:2e:66:3f:78:fd:16:ad:06:
25:39:b3:f9:c2:cf:50:19:a7:1c:5c:d9:b7:25:2b:a7:33:09:
bf:c4:76:53:63:46:49:03:fc:1f:40:2b:b1:1f:b8:5f:b5:ca:
ea:9a:0c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:13:41 2025 by rpki-client