Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
File: rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft (raw, json)
Hash identifier: 9qTTnvMmMx/3urEZw+MziDPvBUGaV0sEmUbLaIGyb1U=
Subject key identifier: 84:CB:4C:55:73:20:8C:80:BD:DE:AC:93:12:E1:FD:DB:F1:C3:62:11
Authority key identifier: AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8
Certificate issuer: /CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
Certificate serial: 0197CA5E7310048B1D9926180A4AA6D457C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
Manifest number: 1239
Signing time: Wed 02 Jul 2025 09:01:16 +0000
Manifest this update: Wed 02 Jul 2025 09:01:16 +0000
Manifest next update: Thu 03 Jul 2025 09:01:16 +0000
Files and hashes: 1: r6C99vK2TllFCTWcqpJRSg5MRPM.roa (hash: 3+br3Wh/zPJPiW24ubp7XOxLj4qW7AeahE4kU9GEl1U=)
2: rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl (hash: xt2porQfzfZ4qKKeJi9ZJY0UEogQXxaPkSBy9vYyyVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 09:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:73:10:04:8b:1d:99:26:18:0a:4a:a6:d4:57:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
Validity
Not Before: Jul 2 09:01:16 2025 GMT
Not After : Jul 3 09:01:16 2025 GMT
Subject: CN=84cb4c5573208c80bddeac9312e1fddbf1c36211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2e:07:e5:07:53:78:81:bd:2f:2a:e0:52:98:
14:78:24:c2:b0:fb:83:90:58:84:b9:c0:82:37:8f:
8e:a6:7e:de:33:78:ab:6c:33:a3:a7:28:52:af:b1:
e5:7f:10:d0:5c:66:e8:c2:8e:e5:c1:e7:a8:e0:c7:
ae:31:9f:2c:ca:c2:54:fe:ad:c8:d8:1b:23:48:56:
be:e0:3c:1c:dd:66:5a:dc:54:f5:aa:e2:c2:ae:ea:
47:69:df:64:c6:f8:0c:27:e4:f3:a5:66:17:80:d0:
86:f0:40:42:31:f3:d1:1c:84:94:df:e2:8b:29:55:
e5:39:69:60:3b:30:07:ea:f8:a0:33:23:b3:e0:59:
e0:03:48:66:78:54:06:c8:1f:c1:d0:01:a6:ad:75:
f1:b5:81:ab:f6:8d:4c:ad:a2:32:43:3d:97:55:dc:
31:1c:c9:35:b4:d2:a6:af:ca:02:ff:ad:e2:f6:ab:
c6:a0:46:e2:64:de:5e:c8:f1:ab:c0:39:e1:10:3b:
5d:2b:28:fc:c1:34:57:04:b5:70:e8:3d:ea:d0:b5:
c3:4e:09:05:04:bd:59:30:cb:3e:d3:e5:cd:b3:30:
f8:3a:f4:7f:6f:fb:68:d0:fe:0b:fa:25:83:c1:74:
b8:80:c9:0f:c9:71:22:a1:55:d5:13:12:68:2c:1c:
9e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CB:4C:55:73:20:8C:80:BD:DE:AC:93:12:E1:FD:DB:F1:C3:62:11
X509v3 Authority Key Identifier:
keyid:AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:16:11:31:8a:3e:9c:f5:10:15:13:a7:f3:02:73:4f:b9:10:
4f:fb:66:8a:11:ec:4a:64:e7:65:eb:fb:b9:6b:03:d0:57:95:
fb:3e:db:ba:ec:9b:a2:57:17:34:f9:34:89:2a:8a:a1:98:d3:
8b:ed:86:45:55:38:41:62:15:98:6b:fa:9a:43:0a:e3:3e:34:
9f:1e:d3:32:a6:23:e3:44:1c:56:f6:c4:a7:c7:ca:93:0c:7c:
e5:08:2e:f2:bf:e4:e1:89:49:fd:45:f4:d0:fe:fd:70:c5:d8:
c0:b5:6f:67:ac:f9:26:fa:ae:59:40:4c:eb:b4:61:48:40:2f:
1e:89:5e:f4:98:6b:20:0a:5c:82:ee:44:e4:bf:d2:e4:7c:a8:
5c:8a:92:6b:20:11:46:0c:29:99:4f:ab:8d:fd:22:c7:95:62:
5e:e6:ac:21:f8:49:75:71:16:e7:88:ea:22:74:3c:f4:6b:6d:
ac:6f:2f:6c:77:e2:6d:37:b9:26:0c:e2:e3:29:a4:36:14:bc:
e4:06:30:a2:8b:df:9c:03:28:52:0c:2b:57:e2:c8:c1:95:21:
a8:a5:0b:54:f7:f3:c6:c4:ff:13:cf:e9:e3:e0:67:44:02:61:
37:73:de:ce:61:2e:8d:59:a5:6a:2e:71:3e:28:0b:eb:8a:46:
ca:30:13:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:41:45 2025 by rpki-client