Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
File: CYdvfc8Myud0IWBGOzjhw181bRI.mft (raw, json)
Hash identifier: oD4U7bBk1xhGzQm/fXhHKGCy74craLuV3s6fU46vLpk=
Subject key identifier: 7F:42:E1:D5:EE:1F:D2:F6:41:0E:19:43:C7:FB:CD:C9:72:44:93:AA
Authority key identifier: 09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12
Certificate issuer: /CN=09876f7dcf0ccae7742160463b38e1c35f356d12
Certificate serial: 0197470C0B5C215435F690B44340C7B478DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
Manifest number: 0DEE
Signing time: Fri 06 Jun 2025 21:01:01 +0000
Manifest this update: Fri 06 Jun 2025 21:01:01 +0000
Manifest next update: Sat 07 Jun 2025 21:01:01 +0000
Files and hashes: 1: CYdvfc8Myud0IWBGOzjhw181bRI.crl (hash: s9nrqV1/UnRAb6Pum6+hiLOMOlVSVgWngZyySjnw3Jg=)
2: v1PRoA5ebsh_hlHI-WdJ9oH7RYY.roa (hash: g731f8Kk7ZRmBzHdANv/XJyJm7Gc4rKXDwNwW3MJnpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:0b:5c:21:54:35:f6:90:b4:43:40:c7:b4:78:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09876f7dcf0ccae7742160463b38e1c35f356d12
Validity
Not Before: Jun 6 21:01:01 2025 GMT
Not After : Jun 7 21:01:01 2025 GMT
Subject: CN=7f42e1d5ee1fd2f6410e1943c7fbcdc9724493aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:30:44:86:da:52:ea:ae:7e:39:e1:ad:ef:a5:
dc:65:77:b8:89:d8:32:80:6d:5e:91:59:91:95:d3:
37:d8:6e:3f:27:42:48:6c:be:bb:6b:9c:1f:7f:c6:
e8:3c:8f:51:fb:9b:6c:fa:fd:4f:b1:36:05:ae:04:
3d:d0:a3:15:e5:c5:76:a7:08:51:f8:a3:3a:d5:b0:
b1:d1:c5:89:d7:85:99:a0:d4:65:57:47:c4:e2:a0:
f4:27:60:33:a3:df:68:20:9f:c8:54:08:34:7f:33:
54:16:c9:33:13:93:7f:67:9c:21:ed:a4:1c:14:b4:
62:a4:7e:a6:6d:7b:b2:48:ad:d3:79:91:1d:6f:e7:
b0:1f:2b:d6:b0:61:51:d4:ac:e7:05:ce:04:33:dd:
ed:9d:ad:60:b6:6b:7b:86:65:85:83:2d:6e:e7:a5:
e3:9c:18:11:8e:1d:9a:77:a9:38:44:5c:b9:77:dc:
15:28:81:04:f2:ea:bd:fb:09:7a:86:31:ad:62:89:
11:8c:bb:fe:34:99:36:16:c2:77:2b:37:03:ef:83:
c7:f4:e6:4f:87:0a:84:ad:ac:9e:72:f3:05:4e:41:
dd:45:99:2d:72:f7:5d:f2:ec:5e:6e:af:0f:14:40:
7e:67:c9:4d:f4:c2:ce:3d:25:b2:cb:c8:57:81:e8:
3b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:42:E1:D5:EE:1F:D2:F6:41:0E:19:43:C7:FB:CD:C9:72:44:93:AA
X509v3 Authority Key Identifier:
keyid:09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:03:24:4c:43:c9:bc:40:65:44:4c:15:93:88:4e:36:1c:d6:
fb:c6:49:62:0e:07:6b:9f:9b:2e:c2:7a:65:f0:35:8b:d2:6f:
78:b5:cf:ec:e8:51:88:2e:9b:b4:90:18:66:84:52:1c:05:b5:
21:fd:b5:8f:d3:6e:68:78:60:3a:75:bc:7f:e7:48:16:62:74:
17:49:d8:5b:1c:dc:f9:0b:98:cd:cd:83:b9:53:3a:2c:6c:c4:
27:37:39:89:dd:47:a4:c2:85:02:6c:8c:a0:78:a5:93:35:80:
14:b1:e9:bb:89:00:9f:ed:54:bd:03:e1:b9:00:d7:17:55:be:
f4:b5:5f:c7:c8:68:cf:e2:ec:eb:64:32:22:51:5b:ad:29:45:
86:49:b3:46:84:3f:0f:f5:69:e5:9d:4c:41:ef:fc:f3:43:df:
24:fb:b2:36:72:7c:f9:02:4b:d4:5a:66:86:ad:f4:ba:97:34:
4e:7b:c7:b7:10:8e:19:77:9a:2a:03:42:cf:60:0b:71:82:fb:
f9:5c:73:5c:67:c6:1b:87:c3:5a:de:fa:a2:12:68:f2:c1:95:
13:b6:e5:81:f1:24:d2:17:e4:79:66:ab:fb:74:ad:b8:09:fa:
69:c5:8a:74:96:ea:7a:d6:7b:51:fe:e2:64:01:f9:88:29:1b:
4d:a2:d2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:22:39 2025 by rpki-client