Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
File: ydSf722tJmGevuBl0fIxwaJ2198.mft (raw, json)
Hash identifier: KNfXC6lKdedmzqaY3wAfe3CpF7pWZWDTyQAzugyT+TU=
Subject key identifier: 27:F2:3D:AC:48:D1:1B:0A:2C:54:33:21:E2:0A:D2:21:31:D5:32:34
Authority key identifier: C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
Certificate issuer: /CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Certificate serial: 019745C268CE91B67A5025A3757864592F7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
Manifest number: 049C
Signing time: Fri 06 Jun 2025 15:00:58 +0000
Manifest this update: Fri 06 Jun 2025 15:00:58 +0000
Manifest next update: Sat 07 Jun 2025 15:00:58 +0000
Files and hashes: 1: Rxg5b8TVQSPFdWFOKvBN85kybDA.roa (hash: UtF92U/9meAF41tjwSEGw6eGscll7EeWN/zVkMTCT2M=)
2: UZjE-GQgoU3nRLnq0ZWQAXM992o.roa (hash: Ph8txzTNR1zk2KVvrV6FeKKiPwZkYzUc7t042+8KNcY=)
3: ydSf722tJmGevuBl0fIxwaJ2198.crl (hash: L1J8iE5diyq7NR7BUmQdm3AZh01Ij2hsmDfh1Gqh6dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:68:ce:91:b6:7a:50:25:a3:75:78:64:59:2f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Validity
Not Before: Jun 6 15:00:58 2025 GMT
Not After : Jun 7 15:00:58 2025 GMT
Subject: CN=27f23dac48d11b0a2c543321e20ad22131d53234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:30:2d:f2:48:c4:03:d4:a6:b7:8a:74:80:3b:
a4:59:ca:6d:83:a5:3f:9e:d1:36:4c:21:2e:80:a2:
0f:37:17:29:bf:bc:74:33:9a:45:80:08:6c:b4:e6:
21:7b:fb:8d:45:bd:3c:66:54:08:11:cd:9c:37:8d:
ad:c7:99:70:04:aa:3f:05:2e:9e:a8:1a:6f:71:ab:
bc:4f:ca:4f:1f:51:80:8e:66:ba:d1:e1:fc:60:a6:
51:09:2d:63:27:8a:c9:c6:db:36:25:c2:71:a4:c9:
54:67:26:8c:37:06:bd:f8:f5:29:12:a6:b7:9a:0f:
1e:90:79:50:4b:f6:df:ed:61:14:f1:0c:b7:62:38:
b0:7e:ee:e9:c7:ba:39:ee:18:e0:52:55:20:13:26:
53:34:d8:a6:0c:67:f4:df:93:86:e1:02:67:c5:b8:
4e:af:1d:f3:39:06:7b:ce:d7:0f:e5:9f:f0:62:69:
cd:e9:df:6d:0a:9b:78:4f:d2:fb:21:1e:4f:0f:bf:
d8:35:41:ba:1a:11:d2:bc:10:f2:b6:06:02:15:96:
1a:44:22:fc:bb:f4:14:75:1d:b4:78:2c:ad:af:18:
61:d5:0c:25:ed:9c:b4:06:0f:61:11:08:7e:1d:51:
ae:58:fb:d3:36:12:4a:b1:d7:07:2c:5d:99:01:b0:
33:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F2:3D:AC:48:D1:1B:0A:2C:54:33:21:E2:0A:D2:21:31:D5:32:34
X509v3 Authority Key Identifier:
keyid:C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c6:b2:fb:91:c9:87:37:26:27:6a:3d:0b:fa:46:46:28:65:
59:f2:cd:c5:6a:c7:e8:34:d9:23:01:b9:1c:e5:46:7d:90:f1:
1d:74:99:5c:b5:fe:d1:67:6d:f7:4e:81:dc:80:bc:d9:5f:74:
96:b1:cc:00:14:8c:21:43:c5:43:5f:d5:39:e4:76:fb:20:a2:
22:a9:99:f2:dd:22:d9:db:84:b1:84:64:86:25:ac:20:95:7a:
8f:c2:7a:9a:c9:67:0f:55:87:3d:7a:a3:71:1b:f3:35:25:79:
9c:cd:b3:6d:5b:a8:dd:94:ed:ef:78:d6:c1:b4:20:05:75:bc:
b4:3f:53:ab:8c:13:2c:3d:f0:35:b2:07:e3:31:61:a3:1d:71:
c6:e8:da:e0:48:98:70:3f:28:bd:ff:99:d7:84:9b:7a:eb:86:
89:4e:2c:c4:ac:eb:d1:4a:e8:54:ce:d4:7c:fd:9c:24:60:68:
67:46:c6:8f:e3:bb:e9:8b:f0:75:e3:30:0b:db:b0:24:76:c8:
6c:08:2a:c3:07:4e:10:c6:15:fc:c9:2b:3b:1e:23:27:d0:d2:
e7:2d:be:76:9f:7f:33:86:a4:86:3c:9e:83:70:fe:4b:29:39:
58:2d:e0:72:fa:ba:ac:c0:e8:89:bb:b9:eb:2e:a5:a1:03:dd:
e3:88:8e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:43:41 2025 by rpki-client