Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
File: _ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft (raw, json)
Hash identifier: SXQDLNm7i7VO3Lf7uTR8j8IRSLc542k3YTTlCeEEmiA=
Subject key identifier: 7D:EF:66:0F:02:D5:40:B8:B6:64:F3:58:87:86:60:5E:21:DF:91:47
Authority key identifier: FF:29:E7:0A:F2:F7:E1:8C:BC:19:F9:7C:CA:8F:D6:C0:50:99:74:1D
Certificate issuer: /CN=ff29e70af2f7e18cbc19f97cca8fd6c05099741d
Certificate serial: 01974D44FD1255BDE14BF1CE17513E009A61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
Manifest number: 089B
Signing time: Sun 08 Jun 2025 02:00:56 +0000
Manifest this update: Sun 08 Jun 2025 02:00:56 +0000
Manifest next update: Mon 09 Jun 2025 02:00:56 +0000
Files and hashes: 1: FsywoxiqGbiXN3gXMv28UkxtGzE.roa (hash: 27vs8gux+UHGS5Np9ysCtz/GYc8vnHVfHjLJxXKtJgE=)
2: _ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl (hash: ioN6MRFgmzbfvHeXVAj+SiHnL/Z44nV1ImYe1hPezCY=)
3: qM3ZAvps-gKGvN30T9QvpmI8sJE.roa (hash: xtyLgmvHq7ABuRoQiqspwHHgcXHUL2RCU/HQCa1ypNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:fd:12:55:bd:e1:4b:f1:ce:17:51:3e:00:9a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff29e70af2f7e18cbc19f97cca8fd6c05099741d
Validity
Not Before: Jun 8 02:00:56 2025 GMT
Not After : Jun 9 02:00:56 2025 GMT
Subject: CN=7def660f02d540b8b664f3588786605e21df9147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7c:24:bf:ad:f5:e7:df:10:d5:0a:1b:5c:2d:
c5:14:b9:a4:a3:3d:a3:3f:67:d2:9f:58:3c:39:4b:
ba:37:e6:a1:50:8a:99:17:e1:9e:dd:b7:86:98:9d:
6c:fa:67:78:bc:a1:dd:e8:3b:d0:85:f1:a4:b4:e6:
93:01:cd:7d:47:de:c0:76:ee:7b:79:0b:1d:c1:4d:
a0:d5:ba:32:2b:b4:c8:8a:cc:b3:d3:ee:af:8d:2e:
4a:70:ee:0e:83:6d:88:b1:89:93:99:21:21:50:f5:
a4:77:04:9c:a9:a6:14:ee:15:20:3a:13:b5:1b:51:
c7:4b:4c:4e:a6:b6:a9:34:3f:6d:0c:14:44:5e:6a:
5f:1b:4d:3a:e8:98:12:e3:d8:4f:83:72:d7:58:56:
36:03:6f:c1:de:23:9d:db:9a:2d:4f:e3:b8:d4:53:
70:36:04:69:09:3a:c7:d2:76:d1:ce:b4:87:ca:ab:
a3:8f:56:f7:9b:39:f2:0b:eb:89:68:de:a6:da:f8:
bf:31:e1:0f:a4:f7:8c:ed:85:4f:d1:d0:28:ff:f3:
58:aa:ae:81:6b:f5:a6:f7:e3:00:e2:9a:ca:0f:ef:
cc:2b:41:cc:f4:a6:37:f9:8b:b5:10:8c:af:a3:94:
a2:c7:69:7a:5d:c9:1c:81:68:87:27:e9:74:2f:38:
ca:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EF:66:0F:02:D5:40:B8:B6:64:F3:58:87:86:60:5E:21:DF:91:47
X509v3 Authority Key Identifier:
keyid:FF:29:E7:0A:F2:F7:E1:8C:BC:19:F9:7C:CA:8F:D6:C0:50:99:74:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:70:e3:27:27:9d:cf:21:72:0c:16:24:00:72:c6:e6:95:88:
65:31:32:ef:ae:70:23:6c:36:8a:89:7a:6e:8e:0f:96:21:2e:
66:f9:80:d2:a3:85:91:d7:b0:a4:bf:19:a1:12:08:d1:fb:4f:
14:6c:38:c9:63:02:c8:b3:96:87:7c:9b:c6:89:aa:5f:1a:f7:
60:ec:43:57:e1:e5:3b:e2:cf:a8:c5:40:63:70:3a:fc:bf:e4:
2e:31:0f:7a:39:0b:6d:62:20:fa:5c:bd:1a:fa:72:36:fb:65:
32:0b:59:97:06:1f:14:62:f7:a6:6c:e1:55:79:f0:49:31:e9:
3a:cc:b2:67:45:52:81:a0:20:ea:be:46:4d:49:4d:56:34:78:
c7:be:b2:27:3b:53:c3:10:48:d7:50:88:08:d6:d7:fb:d6:79:
d0:a9:e1:a1:c6:6e:cb:d1:da:b6:10:78:ef:18:78:c7:0b:05:
4c:2d:99:c4:46:56:91:a0:fb:5d:9d:42:b2:ae:a7:77:de:83:
0d:78:c5:bb:6d:2d:d0:68:50:e3:33:20:ed:ad:9b:5a:be:ab:
16:b8:64:5e:89:3f:8b:27:e6:3d:0e:3f:99:38:aa:1e:39:a0:
c9:46:71:3f:04:f9:6c:b3:02:c7:74:a6:b5:d0:f1:81:a6:dd:
89:88:55:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:11:19 2025 by rpki-client