Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
File: ya74cWdYXSiYMVqjdT8_po2tLG0.mft (raw, json)
Hash identifier: pR+liH703y0v14gF33ziJGVmMRPyGx6PfSg9qAGWHzc=
Subject key identifier: 75:DB:73:1D:B5:06:36:ED:2B:96:AB:1D:66:23:2A:AD:08:09:06:3B
Authority key identifier: C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D
Certificate issuer: /CN=c9aef87167585d2898315aa3753f3fa68dad2c6d
Certificate serial: 01974C69DFDD2EAD5BA660CD6F48BB801758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
Manifest number: 023E
Signing time: Sat 07 Jun 2025 22:01:36 +0000
Manifest this update: Sat 07 Jun 2025 22:01:36 +0000
Manifest next update: Sun 08 Jun 2025 22:01:36 +0000
Files and hashes: 1: 1-mbK63EZxL8v4V6vFmj_lwXzRxM.roa (hash: JWU55a5ri6Rn4UB9DqsCMDblGiRbnZJJXlkoHYetX7A=)
2: tUPB9TmrvRG46ngHubaYKYvn04E.roa (hash: rsksbLJqTJnjomTHQ1GVXbsT6pXd/mYYQ2loIuCMTYg=)
3: ya74cWdYXSiYMVqjdT8_po2tLG0.crl (hash: JDk13nzrFT8/b73k/ZGQADEWOVaIOtLEHyiZS7qHWMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:df:dd:2e:ad:5b:a6:60:cd:6f:48:bb:80:17:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9aef87167585d2898315aa3753f3fa68dad2c6d
Validity
Not Before: Jun 7 22:01:36 2025 GMT
Not After : Jun 8 22:01:36 2025 GMT
Subject: CN=75db731db50636ed2b96ab1d66232aad0809063b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:41:f2:70:60:17:2d:cc:3d:14:7b:6d:b9:ec:
f1:3a:b3:a7:8c:71:eb:c9:e2:f9:23:6a:04:46:32:
db:19:25:61:ac:9c:c2:74:d8:29:30:62:da:85:95:
48:be:c0:4a:3d:f7:cd:42:b2:0f:90:50:04:27:5c:
fc:a2:a8:a9:e9:d7:11:37:12:17:9b:58:cb:4a:d0:
6e:ea:3f:03:d7:f8:27:be:e4:98:3a:60:18:56:d7:
71:f8:0e:aa:c2:06:fa:3d:09:dd:bf:08:ef:89:23:
bb:eb:b0:55:b3:64:b1:6b:7b:f0:18:eb:cb:60:2d:
6e:4d:10:f0:9f:c8:65:b4:57:34:38:5f:43:28:3f:
1d:4c:8d:b7:08:e3:b3:91:18:1d:79:ab:9a:6a:a3:
5d:86:22:3f:7a:ab:3d:d0:17:ab:59:97:d0:4b:00:
4a:24:22:26:b5:51:5b:bf:01:31:7b:37:1e:85:f5:
eb:5c:77:c3:1e:7b:c8:8e:02:77:1d:84:0e:de:c6:
d3:5e:1a:64:3b:cb:b6:34:29:d1:8a:b2:92:11:89:
3d:65:92:84:96:45:68:62:40:fa:75:1f:00:e7:54:
7a:bf:c2:f9:4b:e3:d9:9e:9b:5c:e8:f8:03:9d:57:
7e:d6:d3:2b:4f:48:3b:89:33:1c:01:13:5c:3c:67:
fb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DB:73:1D:B5:06:36:ED:2B:96:AB:1D:66:23:2A:AD:08:09:06:3B
X509v3 Authority Key Identifier:
keyid:C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b2:85:00:50:88:10:03:0a:81:4f:da:5d:a1:2f:fd:81:8a:
d0:12:6b:41:6a:05:f4:f8:ee:70:56:24:9f:45:f2:6d:8c:60:
fd:cc:d6:45:76:73:ef:76:76:88:5b:3b:a6:2a:49:ea:08:21:
3e:10:2f:5f:6b:4f:cd:e9:c7:55:63:cb:d0:b0:36:62:db:03:
32:bc:63:cd:d7:57:98:16:9b:7e:f0:bf:0b:57:4c:8e:0d:f5:
6d:36:87:0d:e4:0b:f3:ab:fe:3e:41:f6:83:ee:6c:1f:50:77:
bc:93:e9:23:b8:1f:fa:15:89:c1:8e:06:87:79:c5:41:93:0a:
68:46:e8:9a:f4:65:ae:1c:93:53:a6:35:be:f0:09:4e:e8:1a:
90:6c:8f:00:9c:7a:2d:4a:49:b0:46:c0:ba:ff:5a:c6:05:b9:
17:df:70:f9:3d:a8:9f:4b:55:e2:e9:9c:9e:e8:76:1d:1a:c6:
e3:d5:a6:a0:56:e4:42:47:0c:17:bd:5d:e0:3f:46:8c:29:f3:
72:c8:45:da:da:ae:82:d2:26:eb:7b:9b:de:83:21:59:4f:08:
8f:5c:94:ca:ce:03:81:ef:16:84:fe:80:7a:88:a2:83:d2:33:
87:7c:5a:a0:58:19:f9:80:1c:b4:68:a2:66:c7:aa:38:23:f8:
59:3c:f9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:25:29 2025 by rpki-client