Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
File: Y3bCUtsJvoF7hypxepWe3KxEJms.mft (raw, json)
Hash identifier: dFTVj/bfK+DFhaK1epW0rFJnOd3rGWGQ0kWwkaX5p1M=
Subject key identifier: 9D:8A:AA:CD:90:75:E3:91:63:9E:EC:ED:1B:D5:E9:E6:C4:2F:16:8D
Authority key identifier: 63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B
Certificate issuer: /CN=6376c252db09be817b872a717a959edcac44266b
Certificate serial: 01974779FCF3F2B12EFE19471769C5915AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
Manifest number: 157A
Signing time: Fri 06 Jun 2025 23:01:06 +0000
Manifest this update: Fri 06 Jun 2025 23:01:06 +0000
Manifest next update: Sat 07 Jun 2025 23:01:06 +0000
Files and hashes: 1: Y3bCUtsJvoF7hypxepWe3KxEJms.crl (hash: hPHf9F1dZ5ENZHzGG7BFJqxx7NeY9u4IE4kpeeh5VUg=)
2: apB7016k1B8Xf8viYBYRSP8KhJw.roa (hash: xN1tgc1phNLRWfyHfJRqbKwJVFPPcIp9VBD24KOqkzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:fc:f3:f2:b1:2e:fe:19:47:17:69:c5:91:5a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6376c252db09be817b872a717a959edcac44266b
Validity
Not Before: Jun 6 23:01:06 2025 GMT
Not After : Jun 7 23:01:06 2025 GMT
Subject: CN=9d8aaacd9075e391639eeced1bd5e9e6c42f168d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ca:72:b4:85:16:a6:4e:04:3e:bc:15:ce:5d:
e1:7b:c6:2f:93:84:4d:90:06:da:57:03:c3:6c:31:
d5:98:4a:40:eb:9e:d1:6e:ab:9a:f1:ee:45:a5:6b:
cf:cd:36:5f:4c:05:44:2c:3c:1d:7f:b3:a0:83:d1:
0b:92:b0:5e:91:ca:3e:aa:fc:35:59:fd:80:81:8d:
31:7f:e0:8c:0a:51:a9:08:77:73:73:c4:41:f9:76:
44:40:9d:9a:cc:ad:3a:10:a3:f1:31:23:ba:bd:d2:
3e:63:7e:2d:ac:c3:20:73:7e:02:07:f7:38:c2:05:
8e:11:9f:03:0e:0c:90:cc:81:01:92:a5:5a:41:d2:
cc:4b:d0:30:05:47:d5:6f:8b:a0:3e:f5:c8:a6:95:
ad:df:6a:e8:17:a6:cd:05:7d:d0:b7:45:2e:55:75:
03:3e:34:63:49:d4:9c:8f:53:72:6e:1b:6d:7d:57:
32:a3:80:80:84:fe:c7:f3:5f:12:56:05:8d:ec:6d:
1b:b0:65:6b:8f:d4:ff:b9:17:4b:3a:7c:b5:ed:b7:
1e:30:20:37:81:b2:ae:73:02:88:a0:39:90:10:2f:
ce:33:9a:ba:fc:64:ad:f7:07:a2:b3:e5:f7:6b:4a:
4a:28:81:1f:46:6f:bd:11:a8:27:a4:86:f4:b8:fd:
ee:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8A:AA:CD:90:75:E3:91:63:9E:EC:ED:1B:D5:E9:E6:C4:2F:16:8D
X509v3 Authority Key Identifier:
keyid:63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3b:87:e7:84:3b:89:6e:92:02:09:ed:5e:e5:66:54:69:3e:
df:86:56:c4:23:ba:8e:41:0f:ed:78:1e:f9:f4:0d:40:28:be:
b8:18:9c:e4:2e:1d:d0:07:64:3f:e0:f9:63:bc:a8:43:ec:4f:
76:6b:58:49:fe:24:8a:86:94:f1:31:64:b1:5b:8f:21:96:ca:
22:04:d2:35:f3:e5:b3:49:35:e5:a1:92:2e:ba:79:13:68:3c:
04:ea:9f:d7:db:72:44:d9:9a:e7:78:e0:13:55:2b:c9:9b:3c:
48:06:e6:19:d6:0e:32:e3:44:f3:17:ee:99:84:d1:c3:ba:43:
1f:1c:09:00:a5:f9:c1:ca:84:6a:55:de:59:d7:03:1e:e1:02:
5a:59:2e:28:b4:2e:dd:00:46:f9:1b:2b:fc:26:b4:75:35:69:
0f:9a:1d:4d:bc:e7:e5:99:50:90:80:0a:e7:cc:c0:db:ea:ea:
fc:65:88:2e:f9:b2:92:25:bc:14:a4:04:6e:27:34:e5:28:7b:
b4:aa:e8:7b:0e:4d:1b:22:0f:80:41:06:af:6c:ca:9d:9a:b5:
cb:ed:08:b6:aa:01:60:80:d5:23:91:a8:70:6c:06:2b:b4:06:
e8:43:2c:2e:ed:19:5d:36:e7:35:3f:1b:ac:4b:60:30:f1:ab:
33:b8:f4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:58:04 2025 by rpki-client