Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
File: Y_3AmtVKOXxgTpShyWbiwpYFnME.mft (raw, json)
Hash identifier: jxymxDYt9CDZVnhoVTdvx+ZMdqD5OwCtD2vodMp0YVw=
Subject key identifier: C5:D8:0B:40:F6:10:63:49:8E:DA:E9:41:FF:8B:9A:44:D0:FD:96:0E
Authority key identifier: 63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
Certificate issuer: /CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Certificate serial: 01974A0CF9BCC184F0FA10AA154EE032AC9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
Manifest number: 06DA
Signing time: Sat 07 Jun 2025 11:00:53 +0000
Manifest this update: Sat 07 Jun 2025 11:00:53 +0000
Manifest next update: Sun 08 Jun 2025 11:00:53 +0000
Files and hashes: 1: Ub0gH6-o6KhNINtjYTwnJ-uCkZU.roa (hash: 7B5163r4ydWZZiBZS3F/kHEKa3lRTXllycuzchBVe18=)
2: Y_3AmtVKOXxgTpShyWbiwpYFnME.crl (hash: qiugznGyzvca3cfGiOIggzlwZTXpZgiMq/uvfnWTcCc=)
3: bz0DaobqFx8uSG65YlIdlCnYXnM.roa (hash: iE8VTXx2IgO+YAuuzHNL90UnvmOpv60XoZ6IMkkBBJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:f9:bc:c1:84:f0:fa:10:aa:15:4e:e0:32:ac:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Validity
Not Before: Jun 7 11:00:53 2025 GMT
Not After : Jun 8 11:00:53 2025 GMT
Subject: CN=c5d80b40f61063498edae941ff8b9a44d0fd960e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b3:06:d2:0f:d0:77:ea:76:04:12:d3:47:cd:
35:a0:9c:30:53:33:2d:f2:00:6e:1b:fa:cb:e1:a0:
f4:c4:1c:9f:6b:1d:38:d5:15:43:47:4e:02:ab:22:
b9:27:ef:0a:ca:36:91:e7:84:38:aa:cd:ea:41:b9:
07:66:be:1a:1a:98:b1:e6:5b:5e:ed:c0:6b:b2:8a:
f2:d0:c1:81:70:ca:ba:ae:65:69:46:db:a0:0f:08:
27:3c:88:c8:47:12:48:d1:5d:38:4b:93:19:33:1b:
b5:49:12:cb:57:7d:19:6b:f0:d3:c7:31:06:73:0b:
96:48:c9:a5:9f:3c:70:86:3e:0b:ff:74:03:44:fa:
c1:55:9f:3e:f0:c5:bc:98:c5:e2:e2:31:cd:2b:64:
c3:b3:77:51:04:c8:9c:cb:24:9e:28:70:ca:86:e2:
06:2c:e8:2c:ee:53:4a:b3:6d:a6:e5:91:31:79:b1:
b4:a0:ad:aa:81:6c:ee:1c:a0:f7:62:19:08:1a:5a:
e7:86:f8:e5:12:f9:bc:2b:77:a0:5b:70:ce:35:c1:
72:06:22:8f:22:27:01:29:f8:5d:67:2b:1c:12:15:
21:06:c1:26:f7:60:d6:34:aa:27:30:e4:dd:01:58:
70:fc:a7:14:43:9a:73:a9:24:74:9f:fb:80:7a:4d:
a2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D8:0B:40:F6:10:63:49:8E:DA:E9:41:FF:8B:9A:44:D0:FD:96:0E
X509v3 Authority Key Identifier:
keyid:63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:22:d4:7f:ec:e1:1d:8b:90:81:de:27:a9:ad:34:09:37:5a:
8c:26:a6:89:20:8b:a7:a2:3f:00:5f:13:98:f2:59:50:e3:df:
f0:1d:4c:61:87:07:40:22:74:6a:1a:53:5b:d7:f6:60:9f:b6:
ad:38:50:43:2b:af:84:54:1e:43:ed:82:7e:36:9d:6b:b8:74:
ea:c9:3f:cd:16:9b:90:cd:c4:56:71:c1:e6:f1:d6:d7:da:ca:
d2:bd:da:65:f8:95:8f:1b:5e:65:00:0d:26:d4:a0:e6:eb:68:
1f:c6:43:d7:6f:5b:d4:0f:c4:19:bb:7f:fb:da:34:01:8d:dd:
8e:a4:bc:e7:26:dd:52:e4:ac:71:1c:83:9d:e2:f2:72:a6:4f:
8a:e3:81:ec:d6:14:ed:37:54:4b:17:f7:d1:36:f8:73:ec:4e:
25:25:b6:b3:00:5c:7f:22:7e:9c:d0:93:7c:8c:fc:a0:31:52:
38:75:33:be:ab:26:d2:28:12:3a:0c:02:a2:4c:73:9f:5b:25:
f4:d7:c4:78:9c:89:dc:17:63:4f:43:ec:2b:9b:42:bf:06:c9:
8a:cd:dc:ce:d9:ad:30:60:4c:7b:73:0f:35:2a:d0:4b:7b:09:
fc:6c:49:1e:97:be:e9:c7:f7:dd:e4:e3:1b:f4:b2:54:a4:67:
a0:21:33:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:03:10 2025 by rpki-client