Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
File: Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft (raw, json)
Hash identifier: ntjlNyzxXKSm+t8Ac/Mx0N3a0/RBNpxHsudJK16BY0g=
Subject key identifier: 14:EC:34:40:CE:B4:A5:77:3E:59:1D:48:D3:2C:68:12:3E:8D:63:F8
Authority key identifier: 63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B
Certificate issuer: /CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b
Certificate serial: 019748555FAB7AF60A8E204D2C1C81DF92B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
Manifest number: 14AC
Signing time: Sat 07 Jun 2025 03:00:43 +0000
Manifest this update: Sat 07 Jun 2025 03:00:43 +0000
Manifest next update: Sun 08 Jun 2025 03:00:43 +0000
Files and hashes: 1: Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl (hash: kzJuPDXyH9SgSu6Y5QHu3eIqYyzEN+LlPQD2taM+9Sc=)
2: trc9WRrx0GcsdoyWUNx1ByDuLOs.roa (hash: O5foXyUGS0pgYakUN+dT6VqKLJZgwkNIaZ4jTeLOo7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:5f:ab:7a:f6:0a:8e:20:4d:2c:1c:81:df:92:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b
Validity
Not Before: Jun 7 03:00:43 2025 GMT
Not After : Jun 8 03:00:43 2025 GMT
Subject: CN=14ec3440ceb4a5773e591d48d32c68123e8d63f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:40:e0:2d:64:47:c5:79:8e:81:63:fd:95:a2:
c2:89:bf:fb:31:af:73:a8:90:ce:c9:65:fe:05:60:
8c:60:7c:72:48:8c:e1:9c:6d:ff:34:e5:db:3c:8a:
07:5d:1d:3d:d3:9d:6c:09:60:08:3d:8f:c4:18:61:
18:c2:fb:2c:e3:17:93:91:d8:22:bd:34:42:fc:c7:
5f:e2:e5:4a:b3:bc:e7:0a:5c:e0:6a:99:56:19:8b:
57:e1:ca:9d:47:f3:c6:9b:ce:fa:ac:d6:13:95:69:
b2:4d:13:03:f2:f9:db:63:8e:e6:51:c4:d3:e0:bb:
7f:e5:f9:48:72:8d:f1:b3:03:87:3d:11:81:a5:ae:
5c:f1:0f:2d:de:eb:e5:21:9c:91:b7:e6:24:b3:16:
79:bf:66:91:39:68:68:bd:c0:20:36:56:54:fa:24:
84:a1:27:c0:df:b4:ba:94:55:c3:3e:8e:52:8d:5b:
fa:a8:9c:70:ed:5e:87:d2:e8:f6:c3:7b:97:fa:10:
c8:2d:c6:17:6b:d2:a5:e6:11:f7:f0:b2:87:c7:70:
f0:38:28:95:8b:30:30:ea:7f:48:6f:39:b7:54:de:
0f:05:40:43:fd:16:0e:b8:ae:c4:62:ad:0a:18:5d:
f0:c0:5b:8c:03:d3:13:74:69:32:48:e8:16:ac:91:
9d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EC:34:40:CE:B4:A5:77:3E:59:1D:48:D3:2C:68:12:3E:8D:63:F8
X509v3 Authority Key Identifier:
keyid:63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3b:cc:ec:6a:41:0b:9b:89:de:c2:a5:cd:71:d4:3f:f9:34:
9b:cc:36:5a:12:94:d4:b0:b8:90:5f:60:83:bd:c7:45:5c:e0:
1f:4e:45:a5:6d:6a:04:b5:75:a7:04:ed:8d:16:25:b5:14:5b:
b1:1d:b7:8a:50:16:14:a8:cd:60:d8:1e:1d:f2:f4:bb:bb:15:
ea:b4:b9:be:e9:88:bb:64:40:d4:51:e0:d2:61:76:79:0d:6f:
75:27:7e:c5:26:30:8c:67:86:a2:13:de:8f:3a:18:6d:37:35:
40:7a:4f:1f:73:4b:0f:0b:d3:cc:1f:ab:bb:92:ab:04:56:b9:
5d:7f:32:f9:4b:51:ec:09:f1:82:8e:b3:33:88:f7:fd:57:6b:
04:0c:35:94:cc:9f:20:84:da:07:75:b1:4a:4c:c0:9f:6c:24:
c4:fe:bf:8b:55:ea:bb:c4:fd:9d:c9:b5:46:ce:45:c0:6d:27:
9a:01:a1:4c:53:48:46:40:5a:18:98:b7:09:47:86:41:e5:e4:
cb:be:23:84:33:9d:1c:bd:60:90:9d:01:26:a8:f8:76:ec:5d:
3d:7e:b1:fc:64:9c:82:41:c9:97:19:d0:14:c0:f1:cc:ba:f8:
92:1a:fc:d3:b6:c9:80:fb:e4:e9:61:30:37:12:6a:09:d9:48:
62:54:38:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:36:47 2025 by rpki-client