Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
File: y9IrSt4O0dTVMo6uXzili-lT-Dg.mft (raw, json)
Hash identifier: ytfd3C9101FwT1Jt8CLLZkfQ81W5B+vdxqgeYGSxX10=
Subject key identifier: FD:86:A4:E4:19:FC:68:F4:2D:FF:1F:C3:39:9E:C7:51:48:AE:F7:02
Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Certificate serial: 01975912145F0E4F209B2543F2831FCD01B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
Manifest number: 0C6B
Signing time: Tue 10 Jun 2025 09:00:46 +0000
Manifest this update: Tue 10 Jun 2025 09:00:46 +0000
Manifest next update: Wed 11 Jun 2025 09:00:46 +0000
Files and hashes: 1: 73c0jhSky3BnN0TXunRjeB--q1A.roa (hash: 1Lx5ICQYUA/HUXjaB+c1tYSpkcTCOv6g20/mLwIRufE=)
2: y9IrSt4O0dTVMo6uXzili-lT-Dg.crl (hash: RVAWTSNtW+DH04rDKSggUS1c2PWSIcWvFzS0cxWS9Hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:12:14:5f:0e:4f:20:9b:25:43:f2:83:1f:cd:01:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Validity
Not Before: Jun 10 09:00:46 2025 GMT
Not After : Jun 11 09:00:46 2025 GMT
Subject: CN=fd86a4e419fc68f42dff1fc3399ec75148aef702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:04:d8:fe:bc:49:e7:75:1e:84:55:3f:8b:01:
26:4f:e7:5c:f4:87:f8:3f:90:dd:53:cd:89:37:47:
c0:99:1e:41:33:b2:bf:a3:96:94:b0:dc:13:74:bf:
b7:8c:5e:de:d2:a7:0d:70:7d:eb:59:84:f0:26:99:
63:06:00:7b:72:ba:68:18:b7:8b:ae:e6:cf:89:19:
5f:18:fc:b8:21:5f:ce:1c:eb:0d:d6:60:65:8d:5d:
a9:d4:d3:9b:24:53:af:a2:ca:24:d7:d5:ee:95:05:
d5:60:c1:64:d5:92:99:4f:ad:ca:05:bc:63:a0:30:
94:d6:84:b5:7f:dd:b9:70:5b:60:4a:c5:4b:f0:d7:
ee:fa:c5:f2:c0:90:df:00:bd:6c:d5:5b:01:7d:e8:
56:79:a4:ee:1e:ec:24:29:bb:aa:6f:af:ee:67:2b:
06:a5:0f:7f:66:66:85:e7:a0:f5:80:9a:21:ee:ef:
ae:e6:b3:b0:3c:da:6d:c7:d0:ea:65:4d:19:c9:08:
c2:e4:e0:63:90:32:df:f6:58:06:ff:28:78:83:b0:
95:aa:23:91:26:13:0d:30:50:89:2f:a8:cf:2e:db:
9b:48:1b:8d:71:bc:73:da:2d:71:68:8f:d4:c2:46:
e4:b2:b3:0e:67:2f:93:9f:b5:cf:a0:11:2c:83:d4:
65:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:86:A4:E4:19:FC:68:F4:2D:FF:1F:C3:39:9E:C7:51:48:AE:F7:02
X509v3 Authority Key Identifier:
keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:6c:32:03:37:51:52:b2:09:46:a6:2b:e0:2f:34:bb:37:98:
05:90:75:30:05:eb:58:1d:e6:e9:4c:17:a3:d7:bc:f8:cf:9d:
f0:4e:da:0c:bc:ad:fb:1f:30:72:d4:06:38:68:27:cf:7e:f6:
b1:ab:ff:45:0b:ad:94:83:41:41:82:ed:93:16:03:73:68:0e:
aa:25:ea:77:4e:86:38:b2:7d:b7:80:5d:eb:57:79:e5:cf:50:
1c:10:ea:81:d3:c4:1f:da:0b:cc:fe:79:08:53:d6:fa:f6:e4:
d0:68:59:98:ba:74:22:a3:47:ac:37:55:fc:73:fd:da:b1:4d:
4a:29:e3:26:39:bd:f5:d4:48:be:a6:54:16:b1:b8:36:2e:d3:
51:07:94:55:da:a9:be:be:bb:72:7f:27:d6:60:bc:4e:bd:79:
cb:4e:74:e1:59:69:fc:ca:21:27:5d:e7:d4:d5:69:e9:a7:b0:
62:41:37:b9:16:6e:1a:42:ab:e4:61:aa:df:49:23:f1:40:79:
59:a2:87:64:e7:00:1d:9c:34:35:35:56:73:8d:50:aa:fb:6f:
70:20:7b:fa:13:ee:f4:c2:10:36:84:42:b0:7b:07:9c:57:e8:
6b:17:b6:a6:33:5f:6a:a2:13:d8:87:e9:e0:06:ce:29:9f:ad:
73:f3:06:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 11:41:38 2025 by rpki-client