Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
File: y9IrSt4O0dTVMo6uXzili-lT-Dg.mft (raw, json)
Hash identifier: xtkWHNt1g1TCSpL8EQ1KrcZrsJ+S+rCP4IQzP06MabI=
Subject key identifier: 3A:CD:DA:66:BD:F0:89:F3:DD:05:58:46:2B:14:77:CA:5D:A2:6A:87
Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Certificate serial: 01975B004017395D75B841F6A21EF86B3D7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
Manifest number: 0C6C
Signing time: Tue 10 Jun 2025 18:00:32 +0000
Manifest this update: Tue 10 Jun 2025 18:00:32 +0000
Manifest next update: Wed 11 Jun 2025 18:00:32 +0000
Files and hashes: 1: 73c0jhSky3BnN0TXunRjeB--q1A.roa (hash: 1Lx5ICQYUA/HUXjaB+c1tYSpkcTCOv6g20/mLwIRufE=)
2: y9IrSt4O0dTVMo6uXzili-lT-Dg.crl (hash: njF1jGWjmKXfA2EQpue0muLayT7hreCYbC43cQDCiqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 18:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:00:40:17:39:5d:75:b8:41:f6:a2:1e:f8:6b:3d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Validity
Not Before: Jun 10 18:00:32 2025 GMT
Not After : Jun 11 18:00:32 2025 GMT
Subject: CN=3acdda66bdf089f3dd0558462b1477ca5da26a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:f0:76:7e:f8:ab:85:ad:16:a1:eb:90:4f:
75:fb:c2:ce:5b:51:9d:4b:1c:6f:3d:b3:76:17:33:
16:32:86:80:b6:a3:b0:84:69:52:b8:cc:b0:e0:b3:
61:e6:a6:19:80:16:2f:d5:b6:0e:29:1f:4a:3f:bc:
cc:a5:e0:2b:3f:0e:ee:a9:21:97:37:81:34:cb:fe:
17:9d:ad:97:7f:5c:a6:82:c0:3f:c2:92:7c:93:57:
cb:4c:15:d3:2d:af:a8:a8:89:ac:0f:21:32:f2:84:
2a:bd:5b:be:bb:a4:47:27:68:b7:15:de:23:d7:eb:
be:e6:d8:86:b0:c7:8e:f9:a6:18:17:9b:2c:af:ab:
12:80:65:26:37:59:3e:d9:2f:ca:5b:12:d3:b8:6e:
8f:49:e3:54:16:25:d5:94:85:a9:79:b6:4d:f9:3f:
c7:74:3c:9e:95:56:1f:b6:b2:41:71:8c:cf:34:14:
86:1e:5b:21:49:5c:5a:ae:75:fe:a8:1c:2c:79:fd:
7e:43:03:5b:1c:94:1c:a2:06:26:51:a3:4f:a2:5b:
11:a1:e6:61:f5:9c:1e:23:c6:ed:6e:b7:91:73:04:
30:04:dd:62:ae:41:d7:d4:cb:a7:89:e9:1d:94:fc:
ad:64:fa:b9:75:89:26:13:cc:03:a7:5a:04:3e:b1:
2d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CD:DA:66:BD:F0:89:F3:DD:05:58:46:2B:14:77:CA:5D:A2:6A:87
X509v3 Authority Key Identifier:
keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:eb:1c:21:f0:c2:3b:f1:db:5d:ad:89:f6:b1:2d:79:f5:6d:
75:d2:a1:e4:0a:59:f1:93:97:4d:0f:64:12:d7:b2:46:65:99:
05:7d:52:b1:7b:b7:cf:8b:d5:b4:28:26:28:b5:f9:a4:cd:d3:
bf:e5:f3:b4:e6:10:47:0c:08:db:ec:9f:ec:1d:3b:9d:2a:f9:
f9:94:ff:55:a8:44:e9:d9:de:8b:80:7c:5b:65:35:1d:65:5b:
bc:f3:86:62:2a:17:a3:12:96:e3:9e:38:70:de:a0:65:cd:45:
c2:5b:6e:ab:63:b3:59:13:22:ad:1b:af:41:84:27:b1:9d:1a:
e7:49:d7:09:e8:61:2d:60:38:fe:f0:1e:cb:49:69:40:7c:5e:
d7:1d:7c:07:73:1a:64:f2:36:ef:14:4e:56:c2:d1:eb:cf:5d:
fd:dc:d1:f0:56:df:e4:d6:a2:7b:c6:52:9a:7a:53:f5:50:22:
70:b0:47:aa:76:b8:13:9a:60:21:3d:22:77:b6:b6:e6:ea:a6:
22:a6:38:0a:9f:80:9c:04:d9:03:40:66:ac:8e:ef:04:e2:fe:
dd:1b:0a:d4:7c:82:a3:fe:7e:d8:0a:59:cf:a1:2a:29:19:ca:
97:f3:4e:39:06:28:fd:68:24:18:14:6d:5c:f5:26:65:ea:89:
8f:f1:8a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:34:21 2025 by rpki-client