Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
File: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft (raw, json)
Hash identifier: MPKROonW87hX+NoFEqbacpkQdXn5X9BCcHHE1EGUr5Y=
Subject key identifier: 02:8C:19:9D:2E:3F:A0:63:54:C9:E7:85:D0:79:63:64:46:5C:23:4A
Authority key identifier: 63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
Certificate issuer: /CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Certificate serial: 019753B4A103CCDD59AAFC98F8592A53D0A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
Manifest number: 12D0
Signing time: Mon 09 Jun 2025 08:00:35 +0000
Manifest this update: Mon 09 Jun 2025 08:00:35 +0000
Manifest next update: Tue 10 Jun 2025 08:00:35 +0000
Files and hashes: 1: 1-G1EzE1WSewj5LvnP7WS6jNd8Ug.roa (hash: jwy+yhw+XcZ5VX6F4NLidpXSZAqbXddtjz7nb2RmNdw=)
2: S7ra6Ov-UpB_vWrQKASj1i2bpWU.roa (hash: kepYC+QCOG1xoHVARWHcfGe1QSDNXlo9WvXDhx0i4AA=)
3: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl (hash: 3YYRUEW3NQJP1/zSuOGZmBxe4EPYpD9Erc4Jfcfb+oQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:b4:a1:03:cc:dd:59:aa:fc:98:f8:59:2a:53:d0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Validity
Not Before: Jun 9 08:00:35 2025 GMT
Not After : Jun 10 08:00:35 2025 GMT
Subject: CN=028c199d2e3fa06354c9e785d0796364465c234a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a2:ff:8e:12:60:49:58:2b:7d:47:88:a8:54:
ef:6e:8d:17:51:80:8f:6a:48:bc:b0:09:be:55:f0:
bd:54:91:ac:cb:22:8d:fb:da:05:03:72:7d:21:e5:
f0:0b:1f:24:15:e6:9c:8d:16:55:fc:f0:ef:f2:0f:
de:af:3a:db:97:e7:e6:0c:ed:8e:96:54:0e:62:a7:
52:46:0f:6c:ae:e7:98:a6:10:98:bd:93:cb:66:0a:
05:ee:7b:43:12:c1:77:fe:d2:f7:20:14:9b:29:98:
d2:5b:46:06:80:b0:3b:e2:10:82:25:19:4b:90:7f:
eb:9c:9e:bd:c4:a5:e3:e8:51:d0:8a:66:31:e9:24:
58:4e:fd:59:22:38:4c:38:c7:59:97:97:85:64:17:
e5:78:54:6e:57:96:cb:86:f8:08:8c:63:72:29:fa:
98:aa:e4:73:f4:8c:d3:f2:f6:b9:c8:42:b5:e6:38:
94:59:28:d7:2d:81:58:8f:68:68:a3:ff:d8:c8:15:
2e:ea:67:1d:ea:9a:92:05:cc:32:32:b2:97:c7:74:
11:70:cf:c2:bb:02:70:53:04:94:0a:91:5f:67:93:
5d:1a:6b:54:c2:b0:a3:d0:ec:e8:36:0d:12:ee:53:
13:4f:04:32:7b:9f:ff:79:86:ce:d5:63:b8:c9:fe:
ff:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8C:19:9D:2E:3F:A0:63:54:C9:E7:85:D0:79:63:64:46:5C:23:4A
X509v3 Authority Key Identifier:
keyid:63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:3e:c7:8b:3f:ff:00:79:ed:77:ca:b1:d1:1f:c7:04:09:95:
a9:45:30:be:b3:50:11:39:ae:d2:48:89:d4:60:21:9d:63:ed:
54:b7:ba:b8:5e:a0:2e:6a:c3:d1:8e:cd:fc:95:0a:1b:41:35:
d3:2e:98:53:68:9a:cf:e8:09:8d:55:f4:94:37:ca:9c:cd:ce:
aa:02:53:70:e0:ea:21:c8:71:f0:0f:19:62:02:58:0e:1c:f6:
33:0e:43:1a:0f:09:2a:16:0a:5c:34:69:bb:fc:2c:6c:c7:3e:
85:05:a1:9a:a4:b2:99:8d:fb:dd:5b:7a:cd:0b:15:43:c0:a2:
df:36:be:81:ba:c4:79:66:13:b4:3a:11:63:eb:58:51:9e:bb:
60:bb:f9:72:ef:58:fe:6a:75:70:15:8f:55:17:92:5c:95:11:
62:23:19:55:08:76:c2:31:7e:e1:ec:01:54:aa:58:73:72:07:
f9:9a:95:6f:66:4a:97:4d:8b:45:e2:57:f9:df:1b:d8:af:f0:
c0:15:9d:3c:de:1c:b7:0b:3e:4e:8e:2d:b1:43:61:14:3b:84:
47:f1:a7:8f:15:09:0c:19:dc:40:d0:21:a8:11:ab:4c:ec:bc:
db:17:c6:90:bb:e4:69:10:ac:e0:db:bc:20:43:ba:9a:eb:8a:
ee:89:48:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:37:54 2025 by rpki-client