Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
File: ySi2NBei54heM4gakkqsnUCqymA.mft (raw, json)
Hash identifier: I77VT3d5gGU0W5egpI+dhDcQjLBtJki3nF46TqxD6sA=
Subject key identifier: BD:C5:E9:8A:0E:7D:01:CD:53:31:9E:13:A8:A9:E2:A2:AD:B2:93:58
Authority key identifier: C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60
Certificate issuer: /CN=c928b63417a2e7885e33881a924aac9d40aaca60
Certificate serial: 01985268AC9EA52CEB55FBC49F994F6F569F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
Manifest number: 0463
Signing time: Mon 28 Jul 2025 19:00:48 +0000
Manifest this update: Mon 28 Jul 2025 19:00:48 +0000
Manifest next update: Tue 29 Jul 2025 19:00:48 +0000
Files and hashes: 1: 6MMtZ0p0S3UErh0fFksqehnDVrk.roa (hash: aSANX+R++VciglglpvxzYCwuVSwi4gwoCdbTa6Ro3gg=)
2: ySi2NBei54heM4gakkqsnUCqymA.crl (hash: DKhGgDnUMEnnujYH48s8+d95yovk45+Z4cqaVwasez4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:ac:9e:a5:2c:eb:55:fb:c4:9f:99:4f:6f:56:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c928b63417a2e7885e33881a924aac9d40aaca60
Validity
Not Before: Jul 28 19:00:48 2025 GMT
Not After : Jul 29 19:00:48 2025 GMT
Subject: CN=bdc5e98a0e7d01cd53319e13a8a9e2a2adb29358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a1:6e:01:e8:66:e9:c7:c4:af:2f:18:a1:89:
b3:97:a1:f1:c2:72:cc:db:4f:6e:d6:15:25:cd:ef:
7f:c0:4f:58:e7:31:81:00:0f:6e:48:9e:67:53:1f:
3e:e5:7b:3b:30:6d:55:4d:d6:4d:df:a8:14:75:29:
2f:fb:a1:d3:40:21:77:ee:66:f0:ab:4e:7e:bb:a8:
10:47:aa:c5:1e:47:07:5a:f0:83:15:ec:d8:5b:7d:
7a:ee:d7:c9:ba:09:fc:17:48:97:37:04:86:2b:c7:
7b:29:42:78:43:6a:12:8a:6f:57:dd:a2:15:62:36:
95:63:bc:88:e3:a3:d8:2f:1c:b9:d4:e8:a1:f3:cf:
9b:19:3e:56:9f:b9:c6:84:45:db:67:e5:cd:5f:cd:
8c:4d:e9:a2:8a:1c:f4:14:f0:1a:8a:70:23:ee:52:
98:fb:d3:e6:3b:6a:eb:b4:f2:db:10:52:11:d2:7e:
7c:16:09:15:9d:bd:84:4c:2d:89:a8:71:72:aa:be:
6e:00:eb:88:18:62:d4:53:45:81:41:cd:ea:15:ce:
7d:94:ab:6b:36:16:74:2c:d8:14:d0:73:77:da:15:
02:a4:d5:ba:10:30:3f:ed:b8:01:f3:bd:f8:74:3d:
d8:83:1b:f4:60:44:af:95:ad:f0:43:35:12:da:f2:
f0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C5:E9:8A:0E:7D:01:CD:53:31:9E:13:A8:A9:E2:A2:AD:B2:93:58
X509v3 Authority Key Identifier:
keyid:C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:52:a2:0c:f5:df:eb:6b:47:47:ff:87:18:59:f7:91:31:59:
34:22:30:66:a8:34:71:7d:c2:9d:c2:1e:0b:3e:84:79:c2:ef:
2f:85:d5:9c:dd:6c:eb:84:d1:16:61:a3:ea:94:d5:4a:55:23:
2f:a4:e5:b3:f2:d1:c3:9d:66:01:49:45:dc:00:64:fd:df:f5:
b0:1a:d2:b5:4e:fc:5b:de:75:e1:15:bb:7c:0f:63:dd:88:84:
88:cb:db:33:3a:0b:df:ee:00:8a:82:fc:1d:87:86:88:a1:40:
33:12:e5:b4:a6:69:25:06:d6:c9:16:4c:54:45:80:ff:fc:88:
cb:c6:6b:64:5e:a6:e9:e8:e4:4a:6f:1c:5d:24:ae:21:d1:e5:
08:6d:bb:f9:17:32:8d:16:4c:8d:f2:41:a2:1c:bd:4c:2b:f9:
18:82:39:50:ce:e8:e4:1e:3d:37:fa:33:1e:4b:2f:d7:c1:1c:
66:af:7f:c6:a3:37:d5:0d:d4:ef:7f:37:cf:15:ad:ad:c3:a7:
ce:54:7e:fd:4d:84:07:70:95:f2:00:11:b8:0c:50:73:27:1b:
74:d9:e5:ea:43:33:54:38:28:e5:eb:69:b6:5b:29:58:5a:17:
4a:4c:41:be:85:3c:f9:52:59:b2:d9:4f:e3:17:28:c3:2d:99:
c7:14:a0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:41:46 2025 by rpki-client