Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
File: y9_aIe3gGO3_VJgRY1eoxhUux-8.mft (raw, json)
Hash identifier: cdBTesG7cviMU+gtMYR2sTGgja1KwZ9X+6CFEJBlKmI=
Subject key identifier: C5:74:7B:12:14:43:09:36:28:90:93:95:5E:87:5C:9A:9E:89:F3:94
Authority key identifier: CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
Certificate issuer: /CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Certificate serial: 0197466743BF0E4FC65127815EC67695F1CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
Manifest number: 08EB
Signing time: Fri 06 Jun 2025 18:01:02 +0000
Manifest this update: Fri 06 Jun 2025 18:01:02 +0000
Manifest next update: Sat 07 Jun 2025 18:01:02 +0000
Files and hashes: 1: 9qNQB_i0eu4jjJmVJKka4rzSK5w.roa (hash: NblnquqC2LajKbqJk5Dgnmv5h35qFu2LGP00XRuQHvU=)
2: y9_aIe3gGO3_VJgRY1eoxhUux-8.crl (hash: muJDDO3C0julrTZxpa4amMOLYU3ur7mBF7VUbxqN6mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:67:43:bf:0e:4f:c6:51:27:81:5e:c6:76:95:f1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Validity
Not Before: Jun 6 18:01:02 2025 GMT
Not After : Jun 7 18:01:02 2025 GMT
Subject: CN=c5747b1214430936289093955e875c9a9e89f394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5b:73:86:3f:2c:c8:de:56:f2:16:8b:37:a8:
e3:1f:4a:14:4d:26:db:50:39:cc:ac:82:cc:26:e4:
e5:a3:f9:56:bf:65:89:09:c7:07:65:64:8d:35:54:
6f:1d:e1:39:b3:2e:82:2e:8f:e6:ad:28:44:0a:fc:
df:44:bd:39:17:4c:ac:44:f1:da:44:10:ae:a1:88:
96:ca:8c:d0:d1:36:0a:1e:b1:e7:c9:be:51:82:95:
0f:c0:fa:b5:72:bf:45:04:a2:52:98:9f:fd:38:0e:
f7:46:51:fd:65:df:20:1e:f0:83:94:ee:0f:b9:6b:
6b:53:c4:99:2b:89:ae:29:5e:6e:5f:9d:f3:cd:2f:
97:65:02:be:14:74:2f:ba:17:a2:ea:76:5a:73:0c:
39:15:93:28:6a:63:01:d9:bf:0a:c6:bc:c2:4a:83:
1b:0e:6b:9c:54:27:c8:af:ef:9f:c4:ae:f6:f2:90:
60:34:05:e1:47:04:61:2b:28:40:07:a2:c1:e1:f3:
79:cd:03:38:01:ff:02:0d:b0:b2:81:63:b6:ea:e6:
1c:18:00:80:60:9a:ad:44:6b:c9:f6:b4:20:22:da:
6a:56:79:69:a6:19:80:3b:71:01:fa:16:b1:94:60:
8e:a8:b4:5e:e3:87:a3:85:e3:96:8e:99:70:2b:8e:
1c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:74:7B:12:14:43:09:36:28:90:93:95:5E:87:5C:9A:9E:89:F3:94
X509v3 Authority Key Identifier:
keyid:CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:7c:a3:9a:4d:c2:f1:23:b4:68:2e:5b:0b:3e:54:26:7a:32:
9a:86:78:2c:ab:1f:0f:51:b7:94:38:bc:b8:57:a4:a4:85:fb:
c7:21:31:87:4a:28:cf:1d:d5:e1:9e:7c:8e:82:9e:02:86:3d:
49:02:6a:30:f6:4b:68:bb:1b:be:4c:5f:08:12:ce:1b:fe:5a:
ec:79:43:97:36:07:7c:f8:48:af:80:23:26:d0:06:ab:d1:fd:
aa:61:96:ab:a2:3f:33:c4:5b:65:85:7f:49:1e:b3:92:a1:fd:
e5:dd:93:f0:d6:ac:f8:f3:6e:e5:5d:a1:b8:be:89:4c:e5:89:
6a:9e:3c:79:8f:86:06:27:d3:b9:cc:f5:05:b1:47:23:e5:58:
59:08:84:ac:fd:b1:90:a6:40:f6:6a:e3:5e:38:35:80:89:03:
96:b9:6e:e4:ec:9c:c6:fc:b7:98:37:d8:c4:f3:af:69:aa:43:
c6:8a:10:5d:17:b9:51:b1:60:cd:c5:fe:a7:ba:67:c9:93:82:
b3:56:60:5b:2c:eb:17:52:56:bc:f5:69:12:b8:69:73:7f:82:
54:8a:a3:6d:42:ba:9a:b3:76:37:d5:77:c9:22:43:5e:7b:2b:
c4:33:5e:e5:c9:52:98:a2:91:34:31:cf:33:5d:3f:4f:3c:6f:
0c:47:66:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:59 2025 by rpki-client