Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
File: mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft (raw, json)
Hash identifier: X406+8HGOa602PIFt6w2wtVxASPNwoczyghHfttGh1E=
Subject key identifier: 17:A8:A2:3B:EC:C2:7B:69:8E:32:91:83:5C:7C:3D:C2:F0:7B:F3:B5
Authority key identifier: 99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6
Certificate issuer: /CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6
Certificate serial: 0197458B9B05F82C599A896F63C3BE44F9EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
Manifest number: 0C5C
Signing time: Fri 06 Jun 2025 14:01:06 +0000
Manifest this update: Fri 06 Jun 2025 14:01:06 +0000
Manifest next update: Sat 07 Jun 2025 14:01:06 +0000
Files and hashes: 1: YErVt-7gu1jQqcup8-GVaaYjMj4.roa (hash: nT1lcrWfw1dtZ1xk/0YupjRA64MYT4KdIF9Y0byNnSM=)
2: mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl (hash: Thf9TmNBpfZ8J4zAHugrSM+o/6i6yk78SiEYJMlHIaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:8b:9b:05:f8:2c:59:9a:89:6f:63:c3:be:44:f9:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6
Validity
Not Before: Jun 6 14:01:06 2025 GMT
Not After : Jun 7 14:01:06 2025 GMT
Subject: CN=17a8a23becc27b698e3291835c7c3dc2f07bf3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8f:5e:1d:13:16:b8:23:f9:fe:03:05:3d:ed:
a4:9d:41:5b:9d:dc:90:1a:44:ca:3d:43:41:8d:3d:
1c:af:e7:68:66:80:c8:ef:d1:9f:0b:92:a3:e2:52:
fa:a7:1a:f0:50:71:fe:43:88:42:ab:66:71:e6:e7:
17:b2:dd:7c:93:d9:75:29:1e:4d:81:fc:38:03:c7:
c7:5d:58:29:02:0f:53:a1:ef:15:e7:4b:3b:85:c4:
8f:37:b8:bd:a1:91:21:f4:5a:2e:8e:ff:7c:e7:39:
91:70:8b:28:15:e0:a6:c2:a8:44:08:55:e4:0f:29:
e7:17:e0:1f:88:e4:ea:35:e0:29:23:2c:08:90:ac:
f9:fa:2b:6d:68:5d:9e:0b:6b:02:6f:b3:0a:79:e2:
7a:24:d0:87:c6:b5:70:b6:0e:6d:fc:62:55:29:6a:
d5:23:2f:28:73:e8:c1:9b:8d:94:aa:41:b5:7c:e9:
55:a7:c5:00:1f:e2:b6:08:45:3f:e3:29:ef:dc:4b:
ec:93:93:8d:1c:fb:bb:6a:09:77:74:d0:4f:20:c0:
69:25:43:52:9b:72:e0:cb:7c:f8:4d:c9:ce:23:4c:
63:25:8c:84:20:33:82:7b:d2:81:51:63:67:64:14:
15:77:aa:75:70:51:ac:e2:9b:bb:fb:a9:76:f3:0e:
c6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A8:A2:3B:EC:C2:7B:69:8E:32:91:83:5C:7C:3D:C2:F0:7B:F3:B5
X509v3 Authority Key Identifier:
keyid:99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e7:1c:d8:94:cc:5e:08:16:5f:25:96:24:aa:de:21:55:45:
45:0c:6e:14:af:e4:72:64:bb:16:3b:55:c8:7d:47:64:35:10:
99:69:ad:5c:95:b2:6d:4a:4a:0b:c5:2b:bf:0f:37:0e:05:a9:
53:33:f0:df:ae:1e:6e:b5:ee:c5:c3:00:4d:b2:26:92:6e:d8:
d4:9c:c7:54:d0:45:87:d5:cb:a3:86:0f:e6:6f:95:80:63:76:
66:7c:c9:43:33:62:41:2f:21:7a:ff:bb:7f:81:df:6a:1f:19:
7c:7c:01:c0:85:8c:50:fb:61:9e:09:0a:0e:df:26:23:ed:ab:
fb:2b:48:e5:55:3b:db:3d:92:69:7f:ff:d6:19:2b:95:23:27:
b6:4c:71:4c:23:18:51:a4:a2:ec:72:48:9e:2b:42:d6:ee:72:
b4:62:ef:f8:f3:47:88:86:23:92:b6:09:d4:9f:60:e9:95:cc:
c5:97:14:03:f6:76:e4:82:f3:b5:98:5f:fb:0f:87:82:f2:e0:
42:41:4b:d4:bf:b1:75:04:47:bd:98:e5:40:a4:51:52:1f:c6:
a2:e3:1e:d7:94:82:25:b9:db:7f:60:15:40:0b:eb:0e:49:36:
a1:d6:a0:30:8c:73:26:0c:85:ac:7b:80:aa:50:4d:09:48:b1:
45:c7:14:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:42 2025 by rpki-client