Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
File: y9_OOlNV-GH9xIwyASx4ydr5paQ.mft (raw, json)
Hash identifier: RuDvCxqY2W3svWcLkQ9zE6nVtcjIXQSVQM02OEA6bz0=
Subject key identifier: 62:FA:9D:5C:B4:72:1D:22:A2:6A:43:DE:5F:45:D2:89:86:93:BB:02
Authority key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
Certificate issuer: /CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Certificate serial: 01974C9FB293E42D8AFB4C9EB3164B3E64B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
Manifest number: 1567
Signing time: Sat 07 Jun 2025 23:00:23 +0000
Manifest this update: Sat 07 Jun 2025 23:00:23 +0000
Manifest next update: Sun 08 Jun 2025 23:00:23 +0000
Files and hashes: 1: mkk-KHtVpdSjRTu_tkkdV37L-30.roa (hash: ivbrYqlxOhyTn42BC3RV5SMdz9F9dKpqo8vRZ2G2vog=)
2: y9_OOlNV-GH9xIwyASx4ydr5paQ.crl (hash: B04OeVY6BnfFryPW43IKEsTFoVkZzuH//Qpi5Zzbd0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:b2:93:e4:2d:8a:fb:4c:9e:b3:16:4b:3e:64:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Validity
Not Before: Jun 7 23:00:23 2025 GMT
Not After : Jun 8 23:00:23 2025 GMT
Subject: CN=62fa9d5cb4721d22a26a43de5f45d2898693bb02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f9:03:a1:8e:ef:65:0a:75:a4:db:d8:c7:ae:
cc:84:5f:b1:c6:fe:e4:eb:a7:86:de:3d:47:47:3b:
d5:5b:4e:0c:e9:24:a7:2c:9e:d7:15:67:bc:6d:af:
a4:14:cb:d4:ab:62:eb:b3:b1:d4:22:58:ae:84:50:
ec:bf:57:94:b5:a6:24:b9:ff:28:3d:81:40:78:c4:
04:ea:ff:1c:d1:3a:46:95:a3:81:7d:7a:b4:7a:cd:
8c:ec:70:bd:5a:d2:07:bb:ae:63:d2:8f:a8:97:de:
68:49:1f:a1:60:cc:2d:54:cc:46:e7:43:8b:78:86:
29:96:f0:c2:94:c6:f6:86:65:d1:85:18:7a:80:23:
29:72:25:10:5b:13:33:ae:44:5c:af:91:56:98:7c:
9d:17:23:a3:79:18:06:22:b2:ab:d6:62:f1:cd:91:
f6:a5:e6:99:8c:fb:56:f1:fc:2e:f6:1e:d0:92:f3:
1b:4d:1b:df:83:73:3f:4c:a0:4c:ec:7a:ed:40:2b:
08:a3:90:75:3e:d7:6c:1e:3a:5f:47:3d:29:d9:88:
85:e4:ac:35:b7:a9:5c:30:42:4e:88:47:fb:ae:98:
be:dc:5c:c2:22:ff:b6:c5:27:b1:b8:a9:55:a5:28:
a0:47:b8:ba:b4:99:2f:a2:9f:30:09:10:91:4c:21:
d3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FA:9D:5C:B4:72:1D:22:A2:6A:43:DE:5F:45:D2:89:86:93:BB:02
X509v3 Authority Key Identifier:
keyid:CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a9:f5:04:67:be:4d:dc:bb:49:13:71:3c:ef:56:41:4c:25:
de:5a:a8:18:06:5a:3e:82:e1:48:45:ef:d6:2f:ed:5e:eb:05:
57:b3:64:12:72:a1:e1:f5:76:e1:8c:5f:eb:72:ab:c7:6d:13:
88:bd:72:35:eb:0d:2a:28:47:a3:2d:94:fd:82:07:ef:60:bf:
94:d7:8b:4d:2a:0f:c2:62:fe:1b:c7:9c:f5:8b:18:a1:3d:af:
b6:87:34:99:df:0f:dc:b4:29:7d:97:5d:da:91:a7:1f:4a:88:
b7:de:0b:cd:71:15:22:a0:42:ec:85:06:ba:5d:64:fc:9b:14:
b7:68:28:a7:3b:24:f6:9a:7a:96:40:fb:5b:a7:37:80:27:a2:
58:75:2b:45:a3:7c:6e:27:0c:6e:c4:72:a4:5b:c5:38:c2:25:
9e:d6:3c:7c:2f:c2:1c:bd:2c:62:ef:a0:56:31:6b:29:a7:f8:
0a:de:6a:4e:65:9e:9c:f4:13:04:c5:f3:aa:eb:39:c1:f4:7c:
4e:77:d2:00:1d:d8:50:11:6c:b2:e3:eb:bf:ed:04:9d:10:f9:
66:da:47:95:3b:20:5c:88:11:d8:28:fb:60:04:2d:ff:9b:a6:
ad:8e:32:a0:dd:ef:54:d8:6f:3d:5c:d8:4d:f8:4a:ee:54:6c:
de:b4:35:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:40:35 2025 by rpki-client