Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
File: CYsceb-uEqW4fzXJmLtgs_pOZiE.mft (raw, json)
Hash identifier: acewJnpsrIGFQ0TTe65RQL8K9n+cL7vDf0sDWmSpKko=
Subject key identifier: DB:1C:5A:78:D6:C1:4C:D0:9F:F9:6E:E8:ED:C9:31:9E:29:36:9E:18
Authority key identifier: 09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
Certificate issuer: /CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Certificate serial: 0197488C0D465BB463127A5907BF29758DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 04:00:27 +0000
Manifest this update: Sat 07 Jun 2025 04:00:27 +0000
Manifest next update: Sun 08 Jun 2025 04:00:27 +0000
Files and hashes: 1: CYsceb-uEqW4fzXJmLtgs_pOZiE.crl (hash: tZiB31QV/1WTvKWyy/ClXs+TviW3GFn9gd2dNWE/pak=)
2: azMfriENBDiIJYosRP-8DXKTAfY.roa (hash: SyiAg9Yx6L4V6Q7e4+QQHSJOd2fmFI1gwl+oA6hcHVg=)
3: ibvrneMp14yx1aeNF9L_aPTpyR8.roa (hash: VZVseX73bEIVKUE/+ZPW5JNub6b1T9krDYglkTTQtpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:0d:46:5b:b4:63:12:7a:59:07:bf:29:75:8d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Validity
Not Before: Jun 7 04:00:27 2025 GMT
Not After : Jun 8 04:00:27 2025 GMT
Subject: CN=db1c5a78d6c14cd09ff96ee8edc9319e29369e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:50:a4:b9:49:fe:54:25:5e:39:c5:82:73:2a:
58:fa:05:93:97:74:60:c5:11:6f:e5:1a:8c:ef:b1:
4e:ed:76:6f:1f:fa:21:ad:ef:ee:4f:80:25:2e:ed:
ef:71:a9:e6:75:55:6e:14:fe:d7:9b:44:d1:72:ad:
97:5e:29:53:d3:10:cf:07:1e:c4:2a:18:05:07:af:
de:6c:8c:db:23:46:82:90:6f:56:9a:48:7c:c7:4d:
61:3e:3a:68:49:0f:52:a9:bb:77:66:33:5f:a8:72:
e8:46:cc:08:d5:c0:f1:38:59:e3:b5:e7:4b:65:b6:
41:94:9d:53:b6:cc:8d:cd:e2:04:15:e5:0a:06:4e:
e9:b9:97:c1:bd:c5:da:95:5c:fb:f9:28:dd:f7:cb:
cb:bd:2f:02:fc:e2:f4:ee:62:5f:6a:5e:cd:14:e2:
11:b6:fb:a7:7d:50:f1:af:68:27:26:01:9b:dd:da:
21:ae:48:f3:23:e4:06:05:b1:1b:a0:20:84:5e:91:
f9:07:75:c2:52:3b:d3:bf:1c:51:e5:16:83:79:33:
33:55:6c:08:c0:96:fe:04:14:32:77:6b:54:5d:f2:
a7:3e:0b:11:8a:c1:77:fc:fc:c4:37:db:53:1c:dd:
c5:6e:c8:82:ed:e4:47:04:55:7a:e3:d5:8a:eb:dd:
0d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1C:5A:78:D6:C1:4C:D0:9F:F9:6E:E8:ED:C9:31:9E:29:36:9E:18
X509v3 Authority Key Identifier:
keyid:09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:92:ff:3a:4c:1e:2a:28:a1:c0:93:2a:ae:9c:36:40:c1:4b:
f7:ab:16:3c:a0:51:52:83:3a:8d:0c:c1:2c:99:4b:ad:1b:cd:
41:ff:3b:96:ad:6f:d1:bf:ed:bf:e5:70:a2:cb:8f:a4:72:ae:
a1:8a:b8:33:e4:57:50:4a:74:1a:0b:39:8d:eb:07:fe:2f:32:
9c:a5:a3:7e:49:8b:c4:99:97:5e:5d:fd:da:16:be:d2:5a:d6:
fd:81:39:8a:05:82:72:2b:4a:70:35:c1:44:87:c9:3b:ff:9f:
19:5e:2d:d2:e1:9e:6c:b4:61:2d:62:62:a4:6c:3a:1e:d7:19:
04:6c:35:8f:dd:0d:6a:3c:ba:51:d3:b8:b8:a7:64:18:49:d1:
77:49:79:34:bd:f1:c8:f4:3e:21:b5:2e:5c:b1:cc:f3:f2:a3:
df:df:68:c9:aa:17:a7:c6:29:0a:79:a7:eb:ea:b6:2e:63:6c:
a5:6b:a4:35:ba:45:00:56:52:60:98:da:af:a4:9e:60:13:ba:
4c:52:1b:98:49:e6:da:e8:bb:94:de:06:ff:91:18:10:5b:0b:
cc:a4:5f:3e:dd:90:e5:2e:54:17:a5:09:3f:b9:ec:01:fd:f4:
43:30:46:33:a0:ba:d2:c9:af:e4:5d:ef:86:7f:2b:0e:9f:09:
b0:64:82:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:53:22 2025 by rpki-client