Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
File: y9IrSt4O0dTVMo6uXzili-lT-Dg.mft (raw, json)
Hash identifier: BPNtn16Ci5JVoDOoe/c6fFDInUGFuxZROzZ5RBMV/UM=
Subject key identifier: 75:55:65:8A:5F:8E:03:B7:21:BD:AD:68:1C:5B:23:5C:0D:28:A9:28
Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Certificate serial: 019753470FC561E6562146AD94516F685BD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
Manifest number: 0C68
Signing time: Mon 09 Jun 2025 06:00:55 +0000
Manifest this update: Mon 09 Jun 2025 06:00:55 +0000
Manifest next update: Tue 10 Jun 2025 06:00:55 +0000
Files and hashes: 1: 73c0jhSky3BnN0TXunRjeB--q1A.roa (hash: 1Lx5ICQYUA/HUXjaB+c1tYSpkcTCOv6g20/mLwIRufE=)
2: y9IrSt4O0dTVMo6uXzili-lT-Dg.crl (hash: /s1WBB2ZJYGv67GgtSY7QTmp5rqecjM/ZT8UIrp5yzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:47:0f:c5:61:e6:56:21:46:ad:94:51:6f:68:5b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Validity
Not Before: Jun 9 06:00:55 2025 GMT
Not After : Jun 10 06:00:55 2025 GMT
Subject: CN=7555658a5f8e03b721bdad681c5b235c0d28a928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:7e:ea:32:4d:da:27:16:f7:66:41:57:07:
d2:b5:c4:ec:d8:31:50:ff:2e:15:0c:f7:3f:c8:b2:
f8:c4:37:5b:8d:4e:06:ff:d5:85:7b:8e:a4:3f:61:
fc:c2:1c:f8:1d:fe:e7:70:c5:1b:a2:bb:7f:a4:4d:
4b:15:57:4c:75:db:3f:71:a7:34:37:ef:6b:33:f5:
2c:88:32:a7:83:cb:37:d0:4e:da:89:ee:ba:8f:f2:
ab:1d:8a:9d:c0:14:06:db:e5:87:5e:79:53:d4:22:
7e:7f:73:8c:b8:41:87:c7:ee:2c:38:89:77:9c:13:
c7:d2:ab:10:5f:d2:07:b8:15:f6:9d:ad:9b:bb:9a:
b3:4a:f0:3e:38:9b:3f:04:bc:0f:68:01:0b:76:71:
23:e0:0d:61:1e:03:f2:1a:24:91:3a:3c:6a:47:2f:
c1:83:bc:4b:88:c3:48:e9:eb:00:21:60:f6:44:2b:
3a:00:51:10:26:a6:0e:5a:f0:a8:12:7f:c6:ae:93:
3a:4e:7f:93:8c:f9:51:fe:22:06:aa:a7:ec:a6:3e:
80:0d:aa:0e:d7:26:da:1b:93:0d:13:8e:79:1b:ea:
ef:20:0a:89:f5:80:44:f1:a3:b4:75:81:a1:ce:e4:
3a:f7:10:01:cb:5a:51:25:49:f3:00:aa:f4:c1:ae:
88:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:55:65:8A:5F:8E:03:B7:21:BD:AD:68:1C:5B:23:5C:0D:28:A9:28
X509v3 Authority Key Identifier:
keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:35:ed:ae:7e:ba:3f:8d:45:f5:ec:c2:47:e7:27:61:f0:8c:
63:73:be:2c:9a:0d:22:58:b8:92:1c:3a:58:40:a6:4c:98:f0:
33:89:09:9f:7f:73:72:c3:e4:d4:3c:75:19:c7:a6:33:83:77:
69:03:8a:f9:58:11:db:da:49:20:53:70:f2:34:e1:ef:e9:de:
a7:e2:29:d4:eb:aa:77:fa:4e:52:b8:17:17:76:2d:bc:fd:38:
be:27:57:31:7e:83:3b:b0:86:52:93:75:b5:56:87:b0:29:ea:
a5:26:c5:8f:29:da:77:cc:0f:bf:be:18:56:47:40:71:4b:d2:
eb:fb:13:25:92:58:d1:06:1e:67:0b:83:fe:70:5f:94:50:46:
a6:82:73:30:a9:69:03:6f:af:0c:64:e6:52:7f:94:79:83:fc:
ef:a6:cc:c3:2a:34:7f:64:d6:35:fa:b5:43:a1:8d:f9:06:f7:
00:f6:b1:0a:b0:02:df:f7:6a:05:62:86:82:17:d3:7d:26:f8:
fa:09:0f:c4:fc:ae:fc:7e:18:74:f4:a9:8f:a1:0e:51:1a:64:
3f:a5:35:f6:d4:1d:f8:45:6d:39:e8:1d:a0:ec:37:f6:cd:3e:
f4:12:d2:33:3c:8a:0d:e4:2f:9b:51:7d:ef:60:ad:0d:d4:3e:
b2:1c:f4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:34:14 2025 by rpki-client