Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
File: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft (raw, json)
Hash identifier: NKuIfiWYhhEkvRIvMkbsYYCZqv7Kfn/1eOB6PRN95tU=
Subject key identifier: 7A:EE:8B:BD:D4:12:91:57:AC:6E:28:9D:BA:33:4D:50:BD:29:5D:41
Authority key identifier: 63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
Certificate issuer: /CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Certificate serial: 01974A0CE03CB118F653B4CB7FA23FCB240E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
Manifest number: 0FE2
Signing time: Sat 07 Jun 2025 11:00:47 +0000
Manifest this update: Sat 07 Jun 2025 11:00:47 +0000
Manifest next update: Sun 08 Jun 2025 11:00:47 +0000
Files and hashes: 1: Je7r8p2i15SExZL77Clbe_3pLIU.roa (hash: q5RkBfa8EqGTkb+E8fZ8KT2+q7JMLCFvRnhSE6vnDeU=)
2: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl (hash: xaHNAdBSJ1yDgMUQyl9L0xe9NTByO9yS6/tfmMNTHWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:e0:3c:b1:18:f6:53:b4:cb:7f:a2:3f:cb:24:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Validity
Not Before: Jun 7 11:00:47 2025 GMT
Not After : Jun 8 11:00:47 2025 GMT
Subject: CN=7aee8bbdd4129157ac6e289dba334d50bd295d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c3:cd:5a:74:e7:9c:9d:89:63:97:c6:e7:dc:
27:1b:6d:5a:c4:fe:aa:15:c9:d6:38:dc:6c:5d:41:
39:db:0b:c0:68:fb:7a:80:ed:3f:a8:6b:5d:22:2f:
1f:a2:8e:90:9a:a6:b4:c8:09:2d:2f:a3:87:3b:78:
65:7a:18:12:cb:31:88:ac:6f:c8:34:d7:d5:75:e9:
d1:ef:67:69:1d:52:dd:fd:a3:05:a8:a8:ab:9b:d6:
01:5b:30:2d:3e:36:4f:9b:30:6a:83:e1:1d:41:76:
01:01:61:18:a0:db:15:f7:c4:21:79:c2:c4:b9:99:
da:10:c7:74:f7:96:d6:a7:a8:22:e4:c7:f0:79:50:
05:53:95:d9:a2:2d:74:13:21:82:62:7d:80:cc:b5:
d4:bc:b5:14:3d:95:e7:24:ef:da:6b:74:d2:dc:4c:
1f:84:65:3f:23:82:b9:16:67:a3:b4:80:8f:46:e4:
ef:3d:8e:6a:ed:56:b7:a7:89:dd:ff:8d:23:ad:d6:
bc:4d:f9:53:ed:a4:7b:48:d9:24:fd:f2:7a:2a:6c:
42:53:17:2c:1b:06:74:2d:f9:64:66:15:bc:1b:29:
8b:cb:b0:20:2c:c1:aa:7a:60:5d:72:93:c6:cd:1e:
77:d7:95:ff:15:d4:6c:ca:d3:a1:7f:73:54:3b:b1:
b5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EE:8B:BD:D4:12:91:57:AC:6E:28:9D:BA:33:4D:50:BD:29:5D:41
X509v3 Authority Key Identifier:
keyid:63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:24:73:f2:03:9b:17:a0:aa:33:35:aa:aa:bd:4d:27:c2:69:
c6:3d:d0:dd:8f:82:6d:22:ed:20:3b:28:7d:d9:1e:16:1a:d4:
96:3b:e2:4c:21:7b:9c:9d:42:e3:61:4c:df:f6:85:6e:23:9d:
41:d8:76:a2:39:70:09:04:d9:22:ba:8d:78:26:7e:fe:a2:71:
81:2c:b3:cd:89:d0:2d:c0:8f:e4:de:59:8b:f7:f5:24:57:85:
19:05:8a:4f:13:3e:39:73:11:74:bd:61:29:cd:d4:74:a2:b5:
ca:71:25:f1:49:34:50:16:81:b2:cd:38:1a:1f:e0:fb:ce:70:
a8:d2:51:bc:6f:e9:5b:fd:5b:48:65:b6:bb:f3:10:0e:09:43:
30:b6:b8:1e:93:77:00:17:71:51:61:3e:d6:28:8d:14:13:f3:
4b:86:d2:dc:44:00:cc:76:27:5c:b5:b4:db:b4:31:ea:29:77:
b8:b3:b9:ec:4f:23:f3:78:42:2e:f3:ef:94:f6:17:12:ad:df:
13:35:e2:f0:ef:41:a9:63:42:84:d7:eb:16:96:7f:38:cd:8a:
7e:aa:1d:a4:d5:05:55:9b:c6:0a:28:bc:b4:37:c0:fe:2c:aa:
8b:4e:23:91:e5:9e:aa:f6:87:21:d7:cf:9c:64:3a:72:f7:61:
d1:79:e2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:33:16 2025 by rpki-client