Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
File: y9QcwSHgy2CjqY2_crpNvWPuvp8.mft (raw, json)
Hash identifier: wCCITVbVLCmA6u2w7wO01KGK53frxGSpizPi5XcDoqw=
Subject key identifier: 1D:87:76:8C:F6:B5:CC:F8:82:6E:CE:6D:3E:B2:F5:DF:74:39:C7:95
Authority key identifier: CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
Certificate issuer: /CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Certificate serial: 019750463A2EFCA9F4CF6276468FDA0A601A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
Manifest number: 0D8D
Signing time: Sun 08 Jun 2025 16:01:08 +0000
Manifest this update: Sun 08 Jun 2025 16:01:08 +0000
Manifest next update: Mon 09 Jun 2025 16:01:08 +0000
Files and hashes: 1: NH3eFCO2z6iD8tqKH5j3jRrAVkU.roa (hash: ZXJCvBm8BnALLLtPx8hXRUmbjYU517MofZBHTTPZwAM=)
2: drCHGsFCH9gtO7i946SJRwJLVRQ.roa (hash: aSAJUF+FTsSFxUy1oN30ReyG2kXTHEsA0T+WTdOGVN8=)
3: r7MeXBD4h2cagNO6Vs8Qg7deiiI.roa (hash: ojLWPczZy5cMPxT49AEzAQruFXc/LPul28QPHpbW6P8=)
4: y9QcwSHgy2CjqY2_crpNvWPuvp8.crl (hash: ZqSyF/XJXMRKrPExomP+cQEcVTPHc2tmGSa7PwQNXm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:3a:2e:fc:a9:f4:cf:62:76:46:8f:da:0a:60:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Validity
Not Before: Jun 8 16:01:08 2025 GMT
Not After : Jun 9 16:01:08 2025 GMT
Subject: CN=1d87768cf6b5ccf8826ece6d3eb2f5df7439c795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1e:d2:0f:c4:92:da:00:bb:29:db:00:fb:e9:
a4:d9:47:70:22:b4:59:b7:82:7f:f7:f9:bc:33:ce:
7d:5a:87:f3:c2:ac:0d:78:09:26:d2:44:5e:61:17:
9e:78:fb:b6:02:93:36:21:95:2d:fc:fb:1f:7f:89:
b2:97:99:cc:a1:86:ed:21:ce:6b:c8:75:58:db:57:
70:5a:02:8c:b5:c9:d3:a3:2f:63:7f:bd:aa:13:62:
2f:e1:bd:52:19:7b:cd:e6:4f:da:c5:cf:66:39:e2:
6e:15:3c:25:01:be:19:02:4a:fb:7e:c9:20:5d:9f:
c8:49:99:a6:50:fb:7c:ab:1a:8b:2f:f3:cd:11:24:
94:bf:3d:b4:f7:5f:67:fa:cc:a5:ad:16:1e:cd:f5:
57:a0:7a:f9:8d:d1:38:05:b9:10:96:26:04:43:d4:
0e:59:f2:28:51:97:39:a9:4b:de:e6:b1:47:78:ed:
2b:04:c8:ee:66:73:e4:e5:21:9c:1f:e0:41:b8:1c:
a8:6a:ec:cf:2a:37:ad:04:10:c2:b4:06:82:e8:12:
74:30:77:ad:e0:c9:be:96:30:9e:6f:88:d3:dd:c6:
76:32:91:9e:84:09:3a:a5:6f:df:dd:86:47:31:fc:
ee:f3:a1:8f:7e:29:a8:b1:5e:06:b9:15:ab:07:ab:
c7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:87:76:8C:F6:B5:CC:F8:82:6E:CE:6D:3E:B2:F5:DF:74:39:C7:95
X509v3 Authority Key Identifier:
keyid:CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:91:54:61:75:83:73:19:69:8a:ae:61:ad:4e:8f:c0:7d:ff:
4c:6f:b2:93:b7:15:e6:7a:d5:99:4e:95:86:29:9c:d7:9d:6e:
23:eb:86:d8:b9:55:05:f2:ce:62:90:e7:61:0b:b5:ed:cf:de:
07:52:20:2b:93:83:ed:38:61:d9:9c:d3:0c:6d:5e:aa:4f:b3:
ee:cb:34:84:66:fe:bd:14:ec:f3:d2:f4:b7:0f:ce:de:43:e4:
bb:42:34:7d:91:ae:02:af:84:e0:da:91:a9:10:14:c6:88:ae:
2b:54:f5:82:00:de:52:56:2e:12:e3:95:7c:34:c7:e4:08:d2:
99:58:bc:72:c7:14:f4:f3:7c:1f:fc:f3:44:3f:cc:08:e8:77:
03:84:24:91:4d:69:91:2d:78:a7:1e:9e:49:ec:f1:b4:f3:59:
e7:60:02:4b:99:9a:ec:b7:c6:86:1e:46:b7:ca:2e:60:73:ff:
95:97:d7:71:86:d8:41:ce:37:4e:be:da:1b:4b:a1:1e:71:51:
c5:f3:d9:1d:d6:d6:59:d2:fa:99:9e:e1:fe:29:10:ea:11:ef:
12:8f:0e:48:8a:4e:d8:4d:e1:e9:cf:5a:7d:df:0a:df:42:b0:
87:20:7e:dc:29:f8:48:ef:e9:79:8e:20:9c:1b:8d:7d:f8:6a:
eb:2e:63:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:03:19 2025 by rpki-client