Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
File: y0JLQMH4QIT41A8rncvh4fkWrz4.mft (raw, json)
Hash identifier: hwsVKX9jJnzsHualmrQ608TGm8qr54qWEDOmZJyrjEI=
Subject key identifier: 09:42:67:55:5F:6A:EF:23:50:9F:E0:73:C0:8B:04:50:95:7E:E3:BB
Authority key identifier: CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
Certificate issuer: /CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Certificate serial: 019747B08594156C022012E73D31EE741987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
Manifest number: 06B3
Signing time: Sat 07 Jun 2025 00:00:40 +0000
Manifest this update: Sat 07 Jun 2025 00:00:40 +0000
Manifest next update: Sun 08 Jun 2025 00:00:40 +0000
Files and hashes: 1: V9bu_0z7-vke15TqRAacNobtW_w.roa (hash: AcTyYpjmVQYslHpVhDjOI3OS/nx5PavwBhDkpmqXVeI=)
2: y0JLQMH4QIT41A8rncvh4fkWrz4.crl (hash: +hgQa2JYrVg4Zo7dK2BySD082lqf4abInvWUNChBO4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:85:94:15:6c:02:20:12:e7:3d:31:ee:74:19:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Validity
Not Before: Jun 7 00:00:40 2025 GMT
Not After : Jun 8 00:00:40 2025 GMT
Subject: CN=094267555f6aef23509fe073c08b0450957ee3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f7:63:60:2f:2d:a7:34:3f:c5:4a:4e:f0:ef:
16:2d:7f:e8:49:b1:ec:7e:c8:d0:69:58:ed:92:97:
39:b3:1b:e7:85:e0:1a:99:52:64:c3:87:70:83:81:
6b:39:17:04:67:83:03:96:99:80:7c:09:76:23:d4:
f8:e0:c0:ee:0e:8f:40:7e:7f:b4:f9:ed:5c:b7:1a:
e0:f8:56:98:92:f7:32:cd:70:8b:75:53:c7:f7:8e:
6a:e3:05:86:72:62:d9:3d:74:5e:a4:fe:ac:14:3a:
67:a6:e8:92:6b:bf:42:f8:b8:de:d5:7f:df:0c:24:
20:e7:00:1e:79:45:39:0a:c3:b0:51:0e:63:84:93:
b7:ed:82:2c:7f:52:42:57:a3:67:c8:4c:2f:52:3d:
eb:a4:d8:38:04:b6:c8:24:72:25:16:5b:8a:7d:fe:
d9:16:61:70:50:d6:75:14:2b:42:55:6d:62:cd:54:
f6:fc:1c:eb:29:aa:49:e5:3c:c8:00:9e:0e:e0:7d:
75:02:6a:83:0a:80:da:e5:8e:22:9f:f4:b5:ae:47:
ed:51:3f:3e:06:2f:a0:9a:35:56:35:31:6f:de:41:
d4:3f:e3:10:6a:8b:c0:15:ca:32:2d:7e:bd:28:6b:
1a:bb:09:d7:85:90:8e:c8:fb:18:4e:24:90:d1:1a:
2a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:42:67:55:5F:6A:EF:23:50:9F:E0:73:C0:8B:04:50:95:7E:E3:BB
X509v3 Authority Key Identifier:
keyid:CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:cf:f8:71:33:1e:33:f5:2c:23:16:f4:eb:35:c0:1a:76:9c:
d2:fb:e8:be:3c:c6:ee:2f:88:13:e3:8f:ed:5c:81:47:51:74:
e7:ea:a8:92:2a:c7:a6:23:63:9e:b3:a8:73:ce:9f:54:16:b2:
1b:7f:70:fe:75:e5:ba:fe:19:c8:5c:b2:7c:38:6d:d5:3d:e6:
a8:fd:c2:24:2a:58:fe:c1:70:b6:c9:4a:6d:bb:c9:a9:47:bd:
27:56:b9:e4:b6:7b:25:07:63:f2:e2:0b:65:c4:61:ff:87:19:
cf:7d:d5:43:c0:79:fd:6a:31:2b:ad:ea:92:10:c0:1a:1c:c7:
03:3a:6a:0d:df:91:86:c9:0d:8a:f4:c9:15:f2:52:b8:31:cc:
fd:29:e5:2b:71:1c:a4:7d:53:9b:2a:6b:75:d5:53:81:eb:ec:
8f:cd:73:91:00:d8:5c:5c:18:e9:ac:80:cf:2b:dd:af:db:13:
e9:80:5d:74:d2:e8:03:55:a8:b7:37:32:4b:00:03:2d:3a:95:
5f:fd:2a:32:5d:cd:d9:8c:13:58:c5:1b:83:1a:7d:76:a8:58:
9a:31:24:49:79:b2:08:60:84:17:5a:88:c2:3c:5b:49:0a:a6:
eb:93:c7:68:a3:79:7b:3a:f7:1b:a5:77:97:d3:9f:23:e6:dc:
32:4d:68:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:40:56 2025 by rpki-client