Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
File: ydDpI0zGchlXpKwhPqxnU-2F7qc.mft (raw, json)
Hash identifier: hq+4qPIf+Xm5atYLsjkxv23BGK6iGOhNXm20SUk3+WY=
Subject key identifier: AF:C4:0A:D1:85:6D:0F:04:7D:8B:14:62:7D:B3:BC:74:14:FD:A5:FA
Authority key identifier: C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
Certificate issuer: /CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Certificate serial: 019747B0780AC9E4AEA60BB6B3A0A4D9C9F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
Manifest number: 04BB
Signing time: Sat 07 Jun 2025 00:00:36 +0000
Manifest this update: Sat 07 Jun 2025 00:00:36 +0000
Manifest next update: Sun 08 Jun 2025 00:00:36 +0000
Files and hashes: 1: OokYUWcbSrbqH_f8HmgcmqdnhJI.roa (hash: lEOM5QUpe0ZqlkmiuxBrUGOTGhzAkiXF0N6KvtAneUM=)
2: _G1IwYuiPRKax01xXjjobsob6yw.roa (hash: LZnDAWxOXPzc+P38eGPHBFeaOSKoPBWPSSrjh5BR84Y=)
3: ydDpI0zGchlXpKwhPqxnU-2F7qc.crl (hash: i9lWD0t457o/dE6aweNJ6IrbV9Q1mL6OT1vvdKGE6No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:78:0a:c9:e4:ae:a6:0b:b6:b3:a0:a4:d9:c9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Validity
Not Before: Jun 7 00:00:36 2025 GMT
Not After : Jun 8 00:00:36 2025 GMT
Subject: CN=afc40ad1856d0f047d8b14627db3bc7414fda5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:f3:ff:85:61:f9:71:a9:f4:c3:eb:89:2f:
33:50:f6:f0:c9:39:49:ba:2e:32:ac:d8:dd:80:ae:
ba:ee:68:ee:3f:28:41:43:b9:9b:9a:42:12:9e:80:
f6:61:ce:88:2e:03:ba:2c:31:b9:ba:ff:6b:a1:21:
4b:6d:69:6c:4a:1a:8f:48:68:b3:a1:5e:89:6b:38:
00:d4:3a:3c:cc:d8:53:42:fc:6e:8f:fd:99:90:82:
3c:9c:4a:d1:8d:db:7b:1d:82:0a:41:c3:52:fb:f9:
bb:73:a2:4b:92:47:1a:49:05:a9:a1:b2:99:18:44:
62:6a:72:7c:13:2f:d8:56:3a:a0:21:be:9c:f4:62:
43:a2:40:89:0c:aa:fd:d0:3e:de:52:70:4d:a5:58:
2c:b1:d7:fc:b7:05:c2:36:2c:ff:3c:2e:c2:37:6c:
e2:e8:9d:a1:11:a4:4a:a1:70:ee:3e:cc:bc:a2:b7:
12:40:38:86:35:4e:3c:66:aa:b7:2e:da:c2:cb:aa:
36:7b:15:19:66:ac:8a:e1:48:31:f9:33:85:2f:65:
29:5b:39:b0:b1:ea:6c:a0:92:22:6f:79:df:ec:13:
84:cb:dc:c3:81:04:2a:ef:3a:ef:68:17:51:07:5a:
85:68:54:01:38:f2:96:14:3a:c5:30:fd:83:a1:56:
d6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C4:0A:D1:85:6D:0F:04:7D:8B:14:62:7D:B3:BC:74:14:FD:A5:FA
X509v3 Authority Key Identifier:
keyid:C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ab:4f:48:05:7c:cb:ee:7c:c9:43:83:cc:a6:6e:c9:40:67:
4d:9f:d9:30:d2:16:bb:35:e8:d8:f5:a1:e6:2c:6f:ed:62:e7:
38:b8:83:59:79:11:fc:73:6b:84:a1:5f:10:76:4a:63:f7:b6:
da:f0:a1:ed:c1:48:e9:38:6a:f0:f7:81:d6:65:35:f3:28:d9:
a4:bd:ad:57:a1:91:01:fd:a7:1c:e9:26:4e:d0:1f:1e:ee:fb:
82:98:c8:64:6e:7a:fd:06:2b:83:8c:af:e3:ff:6a:89:97:72:
31:d0:bd:ad:c4:de:a7:92:a9:dd:08:89:ac:db:13:0f:3b:90:
72:3b:0f:bd:73:43:2d:49:57:41:4c:d4:0e:44:b2:44:d6:02:
57:dc:11:9a:50:8e:0a:ff:fe:fe:6d:98:2d:7b:ad:8d:ec:51:
e8:4f:a2:f8:8b:5f:59:7f:12:6f:ee:b3:b3:70:fd:86:eb:b4:
3f:1e:49:c4:cc:e3:20:21:19:b6:23:39:a9:4e:1a:1d:52:77:
e2:b1:ef:ee:04:85:e3:b4:4a:90:8d:ae:10:4d:8b:eb:17:03:
76:d7:c5:37:cf:15:fc:ee:dc:94:69:a3:84:d5:01:4d:ee:eb:
90:0b:aa:7f:28:82:b4:8f:df:77:0a:5c:7e:a5:7b:98:75:09:
b0:3c:bc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:17:45 2025 by rpki-client