Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
File: Y0cDI_IxIpymkfPglRnBrILy6gE.mft (raw, json)
Hash identifier: uCP3HQFEsttJtSssgtvdXVmJbyGSdsPLb3LDuj7S0e8=
Subject key identifier: A9:EE:25:A7:0F:35:97:AD:43:CB:5C:76:8C:A1:D4:1E:66:4A:82:BB
Authority key identifier: 63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
Certificate issuer: /CN=63470323f231229ca691f3e09519c1ac82f2ea01
Certificate serial: 01974A7A833ADBD2B48374F1A557E5656963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
Manifest number: 67
Signing time: Sat 07 Jun 2025 13:00:32 +0000
Manifest this update: Sat 07 Jun 2025 13:00:32 +0000
Manifest next update: Sun 08 Jun 2025 13:00:32 +0000
Files and hashes: 1: WwWZ_i4rGRDbq67jPO4r6ZSGoFI.roa (hash: nLu8gOVrrY7uwr4TxE8bOFSJg3uFSsR06swIilrL5NA=)
2: Y0cDI_IxIpymkfPglRnBrILy6gE.crl (hash: rs32zJoKDLI9KCXEcXTShIww1w+KKleU2tw3F6Jl9jE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:83:3a:db:d2:b4:83:74:f1:a5:57:e5:65:69:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63470323f231229ca691f3e09519c1ac82f2ea01
Validity
Not Before: Jun 7 13:00:32 2025 GMT
Not After : Jun 8 13:00:32 2025 GMT
Subject: CN=a9ee25a70f3597ad43cb5c768ca1d41e664a82bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:71:85:8f:43:f5:85:e0:04:fa:73:9e:06:a5:
b9:73:24:6a:0e:ba:22:f6:56:35:d6:07:e1:55:15:
9e:28:d4:50:ce:af:ae:6c:cb:02:77:c8:5f:67:91:
9f:4c:db:fe:f9:33:7a:c8:2d:71:6c:69:9d:a5:d5:
39:7b:58:09:b9:9e:25:b6:0b:51:84:2e:00:ee:03:
ce:be:cb:66:2d:0c:58:fc:dd:1d:19:7e:e6:54:d3:
56:b1:e1:af:a9:3f:a6:b1:0d:75:5f:ad:77:d0:88:
91:3e:83:11:17:8f:56:b1:75:18:92:52:9d:bf:bc:
e6:f8:f5:63:e2:1f:d2:ff:57:16:f2:1b:b9:bc:7b:
6f:3e:63:f5:2b:27:12:46:80:ef:15:c2:51:34:d4:
c1:da:9a:af:8b:17:08:eb:99:b2:30:6c:e7:aa:4c:
29:3e:f8:05:a4:42:34:f3:8b:e8:91:3d:88:eb:c4:
3c:a9:cf:15:cc:04:da:79:dd:56:68:af:b7:bc:1a:
65:5e:8a:ec:a4:14:3e:6f:ad:6a:d5:de:e8:29:06:
d8:fd:85:fb:4a:da:d3:ff:2e:49:9f:86:82:82:ae:
a7:4f:4c:ed:92:da:ee:7a:44:f3:3b:9c:5a:fc:29:
82:9b:da:52:3a:0c:51:31:54:d0:c7:37:91:61:5d:
9f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EE:25:A7:0F:35:97:AD:43:CB:5C:76:8C:A1:D4:1E:66:4A:82:BB
X509v3 Authority Key Identifier:
keyid:63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:75:9b:2b:2c:d1:2b:1e:9f:14:73:37:a1:35:c4:c3:5d:05:
97:84:1d:6c:d3:df:ab:93:8d:d7:de:95:b1:af:ee:ef:73:86:
84:86:bd:96:80:32:90:63:97:6a:32:89:c5:b3:5d:d7:b3:b2:
ff:7d:58:4b:10:e0:66:93:e4:9e:da:b3:ae:56:66:72:75:ce:
ff:11:af:dc:19:0c:ab:36:86:fc:f1:ed:bd:f0:b3:7d:5c:e5:
aa:db:71:b6:64:ec:e2:3c:93:7c:08:61:cd:67:44:e9:d5:9b:
3f:9d:dd:4b:5c:1a:80:b0:9e:34:63:7c:6f:22:51:8e:3e:7a:
78:87:36:c8:35:fe:1c:f3:a8:b6:1e:31:38:bc:4b:52:3f:be:
c5:0c:17:91:08:44:50:a7:5e:95:33:a4:d4:08:be:28:3b:ac:
6d:92:b4:86:3b:03:0a:66:e8:4e:e3:b5:52:a9:9e:ae:c2:a8:
a8:77:89:33:99:a0:f9:21:71:7a:2e:9c:84:c0:7b:3d:c7:53:
1d:d9:72:bb:5e:13:a8:64:f7:af:46:a2:ed:7a:2a:53:ed:51:
ce:af:d3:20:c4:37:49:a0:eb:19:74:67:80:ce:17:94:29:cd:
9e:8e:4b:d8:75:21:59:16:85:a4:b1:af:f0:c1:82:3f:70:56:
f6:fe:95:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:12:41 2025 by rpki-client