Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
File: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft (raw, json)
Hash identifier: 3sq9dbwmI4K3nxzSPkbjeE7F4RQsp4VYZL9vbaDwat4=
Subject key identifier: BB:86:C9:B8:43:4C:80:77:87:71:36:67:DF:B9:83:CF:2F:9A:AE:97
Authority key identifier: 63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E
Certificate issuer: /CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
Certificate serial: 01974A0CD543CE62383CBA0B8D05321B974B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
Manifest number: 123E
Signing time: Sat 07 Jun 2025 11:00:44 +0000
Manifest this update: Sat 07 Jun 2025 11:00:44 +0000
Manifest next update: Sun 08 Jun 2025 11:00:44 +0000
Files and hashes: 1: 3q5cMH_JMDPWbBWsvj1oSnffC60.roa (hash: PsjJWV+kYSf71t9/bKVlp3KCFoEso5Ik+VCJED3EfZo=)
2: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl (hash: P36gGzzmVpRrzMmpFZDV5KtEqQT6/+zrATS16Vbd0+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:d5:43:ce:62:38:3c:ba:0b:8d:05:32:1b:97:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
Validity
Not Before: Jun 7 11:00:44 2025 GMT
Not After : Jun 8 11:00:44 2025 GMT
Subject: CN=bb86c9b8434c807787713667dfb983cf2f9aae97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:27:4a:6b:74:dc:bf:eb:9f:c8:e1:bc:44:d0:
be:76:18:11:3b:a8:16:95:89:de:c9:b1:5b:36:fe:
80:7a:d3:9a:8c:d5:01:a8:ab:bf:94:a4:a2:a9:e1:
bf:5a:db:ff:1f:38:47:a6:01:99:0f:87:12:f7:1d:
5f:c3:ca:98:fb:71:89:36:a2:b2:4c:3d:cc:32:d2:
96:7c:b3:9b:89:a3:37:9d:92:53:76:47:1f:6b:fc:
c8:cd:dd:c0:66:8b:9e:e1:18:33:40:64:fc:01:e4:
95:3f:9a:9a:40:89:91:c9:4e:f2:70:ca:8a:87:11:
b5:4e:d3:64:e9:bb:c1:72:05:b9:d5:f5:c2:46:d8:
56:02:a9:36:97:1b:b3:6a:16:06:7a:3d:92:6c:25:
99:96:74:af:47:0c:8b:9b:4a:87:5f:ee:bd:ed:58:
7c:84:47:38:2c:e8:2b:58:39:6b:3b:22:23:ec:46:
98:a5:75:d1:ff:d2:7d:6c:ec:d1:c5:74:bb:c4:0e:
dd:25:88:ec:25:ca:92:83:f2:57:58:d7:3b:a8:89:
84:c8:ec:48:da:f6:75:4a:a9:74:f5:a9:9d:18:49:
c0:2f:4c:92:ff:c9:b7:ba:a6:2e:21:cd:c8:3a:7f:
b3:38:c5:7f:31:19:c0:10:b8:d6:e2:4f:c5:67:f5:
5e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:86:C9:B8:43:4C:80:77:87:71:36:67:DF:B9:83:CF:2F:9A:AE:97
X509v3 Authority Key Identifier:
keyid:63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:46:05:9f:0a:7e:62:d7:a6:56:05:b2:41:3a:c2:98:8c:bc:
42:4c:48:95:f4:27:06:98:b2:cf:9d:98:7f:71:5f:dd:e4:f0:
45:f2:62:2c:07:ba:67:17:b3:80:c8:17:e7:8c:51:6c:08:ed:
4e:44:a9:75:1d:8f:f2:26:84:8a:39:95:ba:0a:cd:04:d8:94:
c3:7c:8d:2f:6b:22:6d:fc:2b:d0:dd:06:c8:57:25:30:96:10:
bc:9d:c6:a3:4f:e8:81:c8:3a:d5:98:df:31:60:f7:02:9d:60:
79:3d:03:65:74:6d:a3:8c:56:08:35:55:57:bd:ec:e7:b3:be:
82:fc:ac:b4:97:3b:fd:24:79:7f:6c:8a:d6:9f:62:dc:e4:e3:
9e:b6:ef:0e:69:ac:6f:4b:fb:3d:eb:68:6a:00:f7:f5:22:f5:
46:1d:e2:f7:1f:9a:4c:df:26:e2:dc:fa:04:f5:a5:0b:cc:3f:
96:c9:23:58:0c:19:44:d9:a4:f6:de:d7:cc:5b:23:d9:c0:31:
7d:56:d5:a6:79:b8:11:23:ca:d6:f1:df:0d:54:86:a2:38:c8:
2c:eb:2d:0f:42:bc:36:41:38:e0:70:50:87:56:74:a6:80:2b:
21:62:36:de:8b:ee:8b:64:f2:41:f5:b2:8d:97:71:1c:08:c3:
44:3d:97:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:25:47 2025 by rpki-client