Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
File: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft (raw, json)
Hash identifier: HOK+4tjRo8rvrKkty4t485Lj/fbgw78208sJCmxkS5s=
Subject key identifier: A3:BF:7D:B8:FD:92:03:84:D2:E6:DF:57:CF:B9:D4:50:8C:19:C4:77
Authority key identifier: 63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
Certificate issuer: /CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Certificate serial: 01976328046699F4581FC438C1DCE6C63E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
Manifest number: 12D8
Signing time: Thu 12 Jun 2025 08:00:56 +0000
Manifest this update: Thu 12 Jun 2025 08:00:56 +0000
Manifest next update: Fri 13 Jun 2025 08:00:56 +0000
Files and hashes: 1: 1-G1EzE1WSewj5LvnP7WS6jNd8Ug.roa (hash: jwy+yhw+XcZ5VX6F4NLidpXSZAqbXddtjz7nb2RmNdw=)
2: S7ra6Ov-UpB_vWrQKASj1i2bpWU.roa (hash: kepYC+QCOG1xoHVARWHcfGe1QSDNXlo9WvXDhx0i4AA=)
3: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl (hash: uYdutmwo/wEmLqW37Z4DEmYYF1cu3CUMOqkTTunLLFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:28:04:66:99:f4:58:1f:c4:38:c1:dc:e6:c6:3e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Validity
Not Before: Jun 12 08:00:56 2025 GMT
Not After : Jun 13 08:00:56 2025 GMT
Subject: CN=a3bf7db8fd920384d2e6df57cfb9d4508c19c477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d4:58:9e:7f:2a:59:1b:de:f6:51:05:cc:b4:
fe:9d:50:ad:08:9d:b0:c8:d7:1c:50:c6:cb:b3:ac:
9a:b1:cc:d7:9d:de:33:60:1d:c4:55:84:9a:84:95:
ab:98:8e:0e:aa:76:2e:e8:bd:38:8f:63:df:1c:79:
e2:74:17:7b:ab:0b:ee:9d:8c:0f:74:61:42:79:3b:
12:bc:84:d4:da:76:e5:fc:84:e8:db:37:28:f6:3d:
c1:a5:1b:0b:6f:9a:20:84:fb:5c:89:37:5a:28:70:
77:26:41:c6:1b:dd:00:1c:37:84:33:1e:30:bb:a8:
03:c3:03:47:de:ea:ac:6c:53:90:cd:c5:ed:0e:14:
54:e9:de:3b:b7:e2:cd:b0:8e:3e:1e:74:c2:31:4c:
e3:03:ca:76:2f:8b:90:6d:ff:21:5b:8d:d2:35:14:
74:e3:c7:b6:ed:ab:70:d3:79:f7:58:7f:f1:fa:1e:
62:49:3f:f9:7d:d6:96:f8:e4:a7:40:26:11:0d:1e:
f2:8b:f0:47:07:3d:09:38:d9:2f:07:cf:d5:e6:e6:
a3:f9:d2:fc:cf:a1:16:09:3a:15:d0:f1:0d:65:25:
55:ff:82:98:90:c7:c0:ff:a2:35:68:e3:e6:0f:51:
9b:5f:62:fa:36:3d:cd:06:54:34:ef:96:6b:26:d4:
3c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BF:7D:B8:FD:92:03:84:D2:E6:DF:57:CF:B9:D4:50:8C:19:C4:77
X509v3 Authority Key Identifier:
keyid:63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:3a:c7:d8:da:1e:6c:ee:ab:0d:e0:d8:c5:a6:e5:14:9d:e6:
ad:0e:ea:03:7f:c8:35:5b:22:a3:27:de:e2:dd:82:81:be:1d:
42:61:09:42:6b:3f:9d:78:d5:b0:16:7f:3c:f7:07:dd:07:f0:
19:8e:a2:ee:02:1b:4c:df:7d:97:b7:0d:df:c9:1d:09:c1:76:
b0:43:b0:6d:41:df:7f:4a:32:c0:77:5f:b6:51:ff:00:e6:b5:
91:6f:b1:9a:f3:09:4d:15:11:2a:d7:20:6b:ae:0c:ff:e9:34:
1f:02:09:4b:40:cc:ef:fe:0e:bc:c0:ad:cb:bd:4e:d4:60:d6:
d3:b6:c2:74:7a:23:c7:54:e4:d2:42:ae:5b:4c:81:35:5e:2b:
9b:f9:f0:1a:bf:06:ed:11:18:4f:9a:18:b9:45:da:9c:98:3e:
2f:13:d6:34:01:9f:bf:93:35:df:62:3a:02:af:f4:51:61:12:
c9:f5:51:9a:b5:fe:52:eb:05:df:d8:d1:38:bf:cf:e0:59:54:
29:4f:d4:4b:38:06:65:f2:1e:b8:d4:63:10:c1:5c:e4:52:f5:
60:4c:a3:63:36:85:94:f0:90:75:bb:dd:b5:19:5e:06:0a:c0:
14:49:3f:31:d3:3e:a4:87:0a:d8:83:67:a9:e2:b4:d9:a0:58:
18:d2:1f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:51:19 2025 by rpki-client