Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
File: mY6csn89GrzEzGHDwbv9xyYo5Xs.mft (raw, json)
Hash identifier: TWqShgIXN45XcPJsyCrF3Bmae9ev+uGu1PMlVvqFEec=
Subject key identifier: 93:5B:79:D7:CD:18:30:BA:12:5B:D3:86:F7:5A:31:5F:66:01:A4:CE
Authority key identifier: 99:8E:9C:B2:7F:3D:1A:BC:C4:CC:61:C3:C1:BB:FD:C7:26:28:E5:7B
Certificate issuer: /CN=998e9cb27f3d1abcc4cc61c3c1bbfdc72628e57b
Certificate serial: 0197C6148DFAEA585AC19849AC9DC6068EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
Manifest number: 15BB
Signing time: Tue 01 Jul 2025 13:02:05 +0000
Manifest this update: Tue 01 Jul 2025 13:02:05 +0000
Manifest next update: Wed 02 Jul 2025 13:02:05 +0000
Files and hashes: 1: UCapjxyaJi5z5guHcEyumiBs9Pg.roa (hash: LIHlX4VN2XaFL14w/XwFEPN4bxUvck7ZLxdQY/Md6OU=)
2: mY6csn89GrzEzGHDwbv9xyYo5Xs.crl (hash: XyAGoj0EjEboVNkHhqNiHheJPyPC9ZxdnTledLnXVzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 13:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:14:8d:fa:ea:58:5a:c1:98:49:ac:9d:c6:06:8e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=998e9cb27f3d1abcc4cc61c3c1bbfdc72628e57b
Validity
Not Before: Jul 1 13:02:05 2025 GMT
Not After : Jul 2 13:02:05 2025 GMT
Subject: CN=935b79d7cd1830ba125bd386f75a315f6601a4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0d:34:6d:a2:0c:7c:00:02:cc:a1:c5:af:af:
55:cd:09:03:a9:5b:0b:f4:fd:d1:a0:69:f6:c0:eb:
04:26:d5:71:9e:c7:68:63:ad:03:1d:a2:fa:d9:1d:
e4:16:d9:ee:1b:5e:57:4f:10:a4:30:66:42:9e:1b:
14:e9:85:f0:9e:2b:6c:b3:21:3b:bc:c9:c1:71:26:
ca:51:70:96:77:b8:36:e5:36:d0:d6:bf:f6:b8:66:
8b:8b:f5:df:63:02:1d:6c:b6:63:92:0b:0e:81:79:
df:8d:48:cc:37:1b:17:23:b3:75:2e:49:a1:30:1e:
f5:7a:14:f3:46:54:b4:c3:00:2e:1a:84:57:e8:fb:
7a:57:1b:4a:65:9a:68:bf:5e:5a:c5:3d:f0:d6:d2:
53:d0:fc:26:04:b7:03:7b:50:c9:b8:b8:44:fb:cb:
68:9b:83:de:15:d9:8a:29:ba:ab:d5:eb:97:12:51:
0c:81:e1:e5:1f:e4:7e:bd:b8:e5:7e:7f:34:1d:e0:
d0:1d:2d:3e:f8:08:47:ec:3b:33:28:4d:50:97:a8:
7d:ab:38:10:61:d8:f5:8a:85:07:de:94:39:2d:f2:
66:64:9c:7b:a5:8b:4f:7c:4b:3d:63:c4:b4:26:7f:
8a:bf:88:65:1e:16:53:b5:85:57:e7:45:50:45:02:
da:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5B:79:D7:CD:18:30:BA:12:5B:D3:86:F7:5A:31:5F:66:01:A4:CE
X509v3 Authority Key Identifier:
keyid:99:8E:9C:B2:7F:3D:1A:BC:C4:CC:61:C3:C1:BB:FD:C7:26:28:E5:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:10:43:83:59:a0:2f:7f:7e:0b:21:58:6f:11:4f:78:41:ff:
9a:e3:68:f1:5f:4e:e1:71:5d:c2:3e:6e:5e:e4:07:36:f1:68:
91:c9:94:1d:45:4b:f6:7a:c3:da:b3:9b:8e:de:92:26:56:48:
b7:70:80:e7:0e:b9:5b:01:e7:a3:67:64:b5:39:f7:e9:60:77:
fc:66:88:9e:5b:23:77:ea:ad:17:e9:9a:ba:39:31:ed:11:6e:
3b:fb:70:33:1a:50:c9:89:91:44:cb:da:53:2f:f8:0b:4a:55:
58:50:88:e3:75:68:a0:4b:45:64:28:90:bd:c4:64:a9:28:81:
93:7e:07:05:ba:3a:d5:f5:b1:8f:80:e2:8a:ac:52:17:e1:6a:
dd:53:b1:6f:c3:6b:d8:67:81:91:ac:0e:25:05:f8:9d:8f:f1:
21:7b:5f:46:db:d3:29:e1:3b:f7:63:80:c6:ba:2a:42:98:e5:
b5:2f:3f:c6:98:66:c0:ec:61:45:0a:14:ea:88:1a:36:06:0a:
e3:e6:e6:cf:b1:b5:79:60:87:01:21:14:08:60:a3:66:31:2b:
f0:f4:5b:a1:ba:d2:52:ef:0f:9e:5f:f7:b6:d0:0a:c5:eb:3c:
85:79:75:8a:a1:c5:4d:a1:73:33:8d:46:52:12:ff:56:8c:73:
8d:80:30:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:22:02 2025 by rpki-client