Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
File: ysmhVQ09sawK6xHBbWPkimg7ygM.mft (raw, json)
Hash identifier: p99cogh/hgQdj3RGCCU1A1OXnT8ilx5AuV3E5LGhqj8=
Subject key identifier: 85:68:95:5C:98:BA:CB:A9:02:7B:5B:54:48:3D:7F:89:10:67:E3:B2
Authority key identifier: CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03
Certificate issuer: /CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03
Certificate serial: 019763CC3D99A89EB61583764A815AC9FD50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
Manifest number: 02E3
Signing time: Thu 12 Jun 2025 11:00:18 +0000
Manifest this update: Thu 12 Jun 2025 11:00:18 +0000
Manifest next update: Fri 13 Jun 2025 11:00:18 +0000
Files and hashes: 1: Rui0sD0wI3PFIXuSgFCUVWy-M9k.roa (hash: hbv5XThLS6CFQJgStPKrJAlPn/du5JdwcgW0fJRsYnU=)
2: ysmhVQ09sawK6xHBbWPkimg7ygM.crl (hash: YGZGBitGGOr5pqa5YWfzymKWQr9FFsI3fTcaZDtUyO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:cc:3d:99:a8:9e:b6:15:83:76:4a:81:5a:c9:fd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03
Validity
Not Before: Jun 12 11:00:18 2025 GMT
Not After : Jun 13 11:00:18 2025 GMT
Subject: CN=8568955c98bacba9027b5b54483d7f891067e3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c9:4b:09:0d:fb:68:f3:3e:b4:b2:66:71:eb:
06:95:21:87:e1:5e:78:27:f0:68:d1:41:7a:64:d0:
73:f7:c5:4f:81:a1:73:4d:e6:a6:32:db:3b:55:83:
9c:75:27:4f:99:28:b7:1c:9e:a9:e7:9f:b3:dd:88:
d5:e2:d4:bb:65:1c:62:a3:e8:05:5b:40:25:58:83:
4b:f1:07:88:8a:4c:7d:e4:0c:58:2e:72:2e:3a:7d:
c3:ff:64:e8:19:d9:51:aa:c3:07:57:c6:62:80:4e:
a6:a7:e1:73:5f:79:49:0b:0a:cc:44:c3:38:14:17:
74:3f:d9:4e:86:86:0a:da:42:43:09:9d:a7:b5:d8:
78:09:c7:68:03:7c:c0:e6:d6:d4:10:00:b9:4c:39:
c6:24:a1:75:2e:1b:ce:d8:bf:63:9e:c3:bc:34:15:
b6:37:51:55:c1:81:c4:d6:de:2d:15:d8:68:aa:02:
c3:8b:b0:ee:33:cf:0a:3f:ae:e7:76:b1:c8:2f:56:
e9:b5:c5:29:18:3b:b2:d1:9a:61:7d:0d:b2:ed:62:
33:ea:8c:e4:ca:ac:77:c1:81:cd:85:24:99:d0:d2:
35:8a:99:3d:0c:af:a2:b0:95:54:ac:84:c3:5b:f6:
02:ec:78:1b:76:ba:2b:45:a5:3f:1b:43:58:f5:53:
92:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:68:95:5C:98:BA:CB:A9:02:7B:5B:54:48:3D:7F:89:10:67:E3:B2
X509v3 Authority Key Identifier:
keyid:CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:cb:04:49:30:92:d8:2a:5b:86:7a:8b:45:66:b4:2a:08:ff:
f0:dd:f9:ae:72:49:3a:62:8b:98:d3:40:c0:e3:23:0a:cf:1e:
e2:33:a0:76:2b:a0:09:b9:96:07:06:eb:31:89:fc:76:c9:e2:
cd:fd:78:cb:36:68:07:c1:1e:3c:e1:65:9a:1a:f3:45:65:0d:
73:a1:51:94:4e:dd:a9:96:d9:87:89:bb:13:d3:b0:fe:d0:f0:
7d:d5:82:0b:3f:1d:fe:b7:1c:dd:10:3d:b3:fe:c4:36:c9:80:
91:82:79:ed:9d:d3:4a:9e:91:b0:79:8a:ff:03:57:61:e8:fe:
cf:78:de:91:89:12:14:b3:85:2f:45:f0:51:31:fc:7f:a1:35:
00:74:30:80:3d:e4:af:07:95:9c:04:49:2c:b8:85:46:f6:ca:
d3:b3:74:95:c3:49:23:1e:c7:23:28:3e:fa:20:e9:8c:69:91:
58:c1:fa:4d:a1:57:76:9a:c5:45:7d:30:53:b7:68:74:71:ba:
08:6a:06:0b:72:e1:fd:bb:73:99:90:79:a0:d1:4f:52:01:8e:
5e:a9:b3:a5:9e:85:6c:c1:cc:03:8d:24:94:46:c3:d7:e7:cb:
82:71:c3:0f:14:a8:86:3b:cd:ba:a4:cd:ff:87:b9:a1:e2:ae:
aa:a0:1a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:04:39 2025 by rpki-client