Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
File: m-YNSucPb1WZhMdrUhzjd8we5yE.mft (raw, json)
Hash identifier: 3XwG+ArpmJhdGpBI7cCMM787wHB0rw1jxn8u4l9oWi0=
Subject key identifier: 3C:53:70:D0:17:2A:DB:80:12:0E:F6:C6:5D:DC:CF:2A:0F:F5:95:8F
Authority key identifier: 9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21
Certificate issuer: /CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
Certificate serial: 019750EA924FD1EFEE9DC4C155E3AD4024C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
Manifest number: 068D
Signing time: Sun 08 Jun 2025 19:00:39 +0000
Manifest this update: Sun 08 Jun 2025 19:00:39 +0000
Manifest next update: Mon 09 Jun 2025 19:00:39 +0000
Files and hashes: 1: EvLIZkrQOLa3Dw1QeQY-_nsYunc.roa (hash: 7wySXJGI2LRPILtTDDd8e153b5pc8VYBaUgp6NmPV7s=)
2: m-YNSucPb1WZhMdrUhzjd8we5yE.crl (hash: uxOcqfmDn98tjmsjrKf+HybAWbXHhC6gts1y71uYTis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:ea:92:4f:d1:ef:ee:9d:c4:c1:55:e3:ad:40:24:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
Validity
Not Before: Jun 8 19:00:39 2025 GMT
Not After : Jun 9 19:00:39 2025 GMT
Subject: CN=3c5370d0172adb80120ef6c65ddccf2a0ff5958f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f4:74:d3:87:61:df:4a:57:ef:8d:8f:8a:11:
22:de:87:84:10:36:a2:9b:38:35:c9:db:28:4d:02:
19:5d:21:37:ac:86:8d:63:0a:ca:ac:4a:66:c1:35:
82:31:c6:0a:e6:ba:26:eb:0d:c7:39:db:d9:b0:03:
e2:5a:77:7e:11:32:8b:f9:d0:50:63:02:4d:ea:bd:
56:44:5d:b2:a6:a5:9d:82:62:98:0e:88:86:9a:50:
83:0e:44:60:53:56:89:59:9e:9c:6a:1d:f7:b6:b2:
c0:74:75:5b:bc:05:b0:5c:08:56:45:75:af:6f:c7:
4f:7b:3c:15:df:af:a2:4b:d2:53:2f:be:5b:1d:01:
d2:98:44:77:7f:d4:8f:ac:31:e4:5e:77:cd:b2:c5:
0d:60:4c:87:b5:f0:e6:82:42:1a:41:c8:52:a3:59:
82:f7:f6:8b:7a:7a:0a:55:73:fd:aa:5b:5f:89:6b:
0b:94:9c:85:65:3f:e0:02:8b:71:12:0e:88:af:2d:
12:a7:a6:f6:d6:67:14:3a:0d:45:46:3e:6a:f3:6e:
11:01:78:48:73:0c:ed:93:c9:c4:85:dc:5a:2e:85:
14:5f:0e:8b:ef:b8:75:d6:11:b0:6e:a1:6d:51:3e:
bc:5d:3e:03:47:60:45:60:37:94:87:cd:b2:fc:57:
a9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:53:70:D0:17:2A:DB:80:12:0E:F6:C6:5D:DC:CF:2A:0F:F5:95:8F
X509v3 Authority Key Identifier:
keyid:9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e9:b0:11:8d:99:9b:d1:6d:e1:97:2e:1e:d9:22:f0:50:4e:
ce:78:38:93:c4:39:02:2b:8f:6a:ad:3b:45:a9:87:8e:b4:e1:
88:26:da:2c:77:b7:a0:65:7b:ea:e8:c2:56:9c:5a:75:c4:ab:
8d:d3:cc:c3:90:61:8a:f7:0f:25:b4:83:21:c7:f8:71:f5:fc:
e9:84:88:a5:bc:5e:86:38:85:f5:1b:95:e5:34:a3:3c:79:a3:
09:51:c3:99:e8:75:73:b6:19:eb:08:8d:8d:5e:2c:b5:12:6f:
0f:a2:eb:bf:93:a0:bf:f0:b7:c0:23:1f:c7:83:7a:ec:25:7d:
3e:23:c5:95:1f:01:f8:4a:f5:7b:ed:35:0c:41:b4:cb:f6:22:
f9:90:31:b6:63:83:ca:f3:2e:cd:0d:bc:e6:15:c1:75:9b:d2:
2c:47:6d:9e:ea:db:50:9e:7f:ad:d6:20:d1:95:b0:17:b4:9b:
0f:cd:23:be:60:59:b6:20:d4:6a:1b:38:11:1b:a4:49:de:dc:
ba:84:46:91:1f:29:ca:ef:73:f0:89:23:4c:6d:63:fb:ff:c8:
9e:05:d5:5f:25:51:b6:d6:31:91:4b:93:21:9e:c3:fd:fd:5d:
27:66:cf:50:17:bc:f0:82:b4:20:43:38:71:17:f4:04:b2:67:
1e:35:78:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:33:50 2025 by rpki-client