Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
File: MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft (raw, json)
Hash identifier: BYWVc0Mdi1WJWHtxatB6GQTEfnopNwU9nBJX4HW8WI0=
Subject key identifier: 48:3C:C1:FC:7A:D7:74:85:93:57:DD:7F:EA:16:59:44:C2:82:87:DD
Authority key identifier: 33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB
Certificate issuer: /CN=332293d0399160788b31e438760dc3bd1ed882eb
Certificate serial: 019748552ADD8B237956612F404D550AA251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
Manifest number: 03D0
Signing time: Sat 07 Jun 2025 03:00:30 +0000
Manifest this update: Sat 07 Jun 2025 03:00:30 +0000
Manifest next update: Sun 08 Jun 2025 03:00:30 +0000
Files and hashes: 1: MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl (hash: ZN9F8RWEZZUcwbnvHas3rkseRDhP+wYVWxPr7xIWQ6o=)
2: i6CWENtAdnXqPwuX227uTDykXkg.roa (hash: nuLqIrBizKW+oU2TGkl7L2LqgilWGWZ/QKZgoAyDfPY=)
3: scpx1tsDeDfxUzO1xx1MvIOWYyI.roa (hash: mBTPbPt26EcSH4AMmR65D0K6YSKToMbRhFmYaz8u+KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:2a:dd:8b:23:79:56:61:2f:40:4d:55:0a:a2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=332293d0399160788b31e438760dc3bd1ed882eb
Validity
Not Before: Jun 7 03:00:30 2025 GMT
Not After : Jun 8 03:00:30 2025 GMT
Subject: CN=483cc1fc7ad774859357dd7fea165944c28287dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f7:cb:4e:d4:3f:2c:20:09:ef:0c:82:cb:88:
87:b6:3e:7f:ee:eb:c0:5f:74:bf:46:c5:9b:71:c8:
34:dd:35:1b:ab:0a:e2:78:3b:9b:d2:8b:c0:2a:6a:
b0:7f:56:39:c2:98:14:aa:6e:5e:b2:69:1e:0f:ef:
52:30:f3:c7:f7:53:2b:66:6a:b1:f1:44:db:33:6b:
53:73:22:11:6b:15:c3:3e:aa:1b:73:99:ab:12:b4:
c4:83:76:b5:99:9b:fe:78:ce:c3:0d:63:d0:0f:2e:
52:da:23:be:08:e8:b8:9c:3b:b6:22:84:04:9b:92:
a1:46:6c:af:cd:03:e1:fb:ff:7f:f8:de:20:71:dc:
a6:08:b2:55:d5:80:8f:42:ac:f4:cf:89:0c:a1:ca:
2e:35:82:93:08:ae:d0:74:84:21:0f:19:74:40:b0:
ef:cf:38:68:a5:d4:72:8b:a3:66:7f:3d:8d:70:f8:
32:a0:af:67:fb:0c:4a:13:02:10:85:e0:9e:06:e8:
36:4e:44:fd:42:21:d0:94:c6:0d:b1:d8:7f:91:fa:
d4:24:b5:8d:bf:8e:0a:aa:56:68:7f:69:f9:d6:64:
93:e3:51:0e:c0:ab:21:6a:57:2b:fb:69:52:67:3c:
8d:cb:28:4b:2d:24:ea:93:e9:50:14:2d:fd:62:dd:
cb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3C:C1:FC:7A:D7:74:85:93:57:DD:7F:EA:16:59:44:C2:82:87:DD
X509v3 Authority Key Identifier:
keyid:33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:07:92:70:97:85:bb:bc:b3:63:3b:ae:0f:8b:c9:f1:7e:1c:
e7:4b:53:cd:62:74:2d:ee:b4:94:17:9d:61:85:d5:fd:0a:05:
37:46:33:f2:ad:59:43:0e:7d:c4:fb:13:37:5a:03:58:97:83:
af:89:da:1a:e3:e4:f7:3f:98:0a:0f:b4:2d:8d:cd:e3:19:44:
dc:bc:3d:1f:e6:ba:f2:65:a4:67:ba:16:c7:c2:b7:eb:f4:51:
00:95:4f:bb:9f:89:da:80:d3:11:7c:c3:71:1e:c6:a7:1e:99:
cd:7a:65:b6:f2:03:e2:bd:2a:ef:98:58:3a:4d:c6:33:18:62:
a7:45:22:04:ed:ae:f0:b4:8e:82:f5:cf:49:8a:9e:1d:d0:b5:
0c:79:aa:12:29:59:c4:87:eb:de:0e:32:fa:b5:4e:c2:0c:7c:
4c:d0:96:d2:f1:94:fc:05:75:fb:2c:9f:bf:26:12:93:c1:4f:
5a:ec:eb:a3:c6:e4:e6:c6:43:0c:c7:a7:68:bd:3e:af:dd:0b:
7f:15:03:c9:46:fd:de:93:ed:c8:8c:56:a6:56:e6:15:46:ba:
84:c5:19:d8:e4:f7:0c:e2:ae:1a:ce:39:cd:8a:1f:75:23:24:
6e:2d:72:aa:af:cd:7e:34:56:58:e2:8c:3d:72:5c:88:5a:e1:
ac:52:13:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:19:19 2025 by rpki-client