Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
File: yTfS9vC3jA7XW478KACdeXlhQAM.mft (raw, json)
Hash identifier: dE4sIbeOnGx1GewmHFXmrRbxYncaGno1SAMeXxBzT9g=
Subject key identifier: 15:78:D9:76:3B:2A:F0:8C:95:9C:45:03:20:9B:D1:F5:D7:96:F6:34
Authority key identifier: C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03
Certificate issuer: /CN=c937d2f6f0b78c0ed75b8efc28009d7979614003
Certificate serial: 0197BA7EFA1FE38F4077333EEC2199EBC270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
Manifest number: 0506
Signing time: Sun 29 Jun 2025 07:02:53 +0000
Manifest this update: Sun 29 Jun 2025 07:02:53 +0000
Manifest next update: Mon 30 Jun 2025 07:02:53 +0000
Files and hashes: 1: S4tCuljlSDudC5hWFI16K1vZQrc.roa (hash: IVL1gZ3kqiPfJXguPGcyEwPZH9+ml2IO0/FYl1DVPU4=)
2: yTfS9vC3jA7XW478KACdeXlhQAM.crl (hash: A2t+9KKn6hEB7VkTKYwsXhtbTfPBwX1UsZ2xezO90Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:fa:1f:e3:8f:40:77:33:3e:ec:21:99:eb:c2:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c937d2f6f0b78c0ed75b8efc28009d7979614003
Validity
Not Before: Jun 29 07:02:53 2025 GMT
Not After : Jun 30 07:02:53 2025 GMT
Subject: CN=1578d9763b2af08c959c4503209bd1f5d796f634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:73:c8:ab:0a:19:48:99:2a:85:47:71:91:4e:
28:fa:df:5a:45:32:49:ff:27:6f:c8:18:5a:93:49:
4b:6e:bf:70:bc:25:ca:1a:1b:b3:31:a7:13:11:8d:
f3:4b:99:0a:31:e9:d5:51:fe:f7:0a:99:fb:14:d3:
80:1b:aa:70:9b:18:06:31:0b:23:16:89:f8:1a:19:
5f:3c:27:f5:73:d4:85:6f:40:86:c7:e9:88:eb:f0:
2a:6c:eb:3d:21:51:5b:c4:b6:17:0a:32:84:e8:14:
fa:e3:f0:01:9b:b9:64:e1:14:3e:40:e6:00:5a:83:
09:cc:bb:fa:b7:8e:16:e6:f5:05:0a:03:35:6b:c9:
13:6f:df:ee:8d:68:53:70:d6:e6:74:11:db:9a:91:
cc:69:1e:45:4a:df:38:2f:76:b0:49:9a:f1:b1:02:
f6:6b:07:bb:14:68:9b:74:27:be:f1:05:19:6a:3d:
69:49:19:ba:f7:a2:6b:4e:0c:4e:af:fb:2d:2c:54:
ee:71:08:6e:06:d9:a7:2f:03:66:dd:44:7f:5e:c6:
a9:2d:48:3e:5e:f8:b3:03:28:1c:e5:7c:06:6b:ba:
6e:6f:a1:bd:26:90:4c:51:b8:04:92:8e:47:73:cf:
66:88:a2:42:a7:da:fa:01:71:9b:4e:f6:4f:0d:53:
48:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:78:D9:76:3B:2A:F0:8C:95:9C:45:03:20:9B:D1:F5:D7:96:F6:34
X509v3 Authority Key Identifier:
keyid:C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:80:72:5e:86:d7:4f:be:f7:0d:da:a4:37:b3:2c:79:13:c8:
d5:dc:5d:98:e1:95:db:ec:12:da:8f:d8:63:1a:d5:f6:f2:40:
5b:de:c7:36:0c:0e:82:26:56:6f:a4:b7:8b:c7:2e:10:23:1c:
11:70:12:4a:c3:d9:30:32:15:84:ab:63:5c:72:b5:1e:2e:a3:
b3:f4:fd:76:9e:53:f2:ef:af:e2:b1:7f:58:bf:82:56:d7:7a:
a9:40:2a:14:d6:ff:8b:5b:4b:95:ee:68:59:33:82:db:33:6c:
60:11:12:b9:34:d8:c3:aa:2c:63:b4:a5:32:f6:13:2c:ed:d5:
f9:ba:14:97:e3:4a:81:20:59:f3:d1:67:8f:0e:67:eb:d7:f2:
ee:e0:44:4c:bd:56:76:29:32:32:a0:35:9b:5c:ce:78:44:8a:
ea:10:a8:46:4c:03:0c:06:96:12:6b:64:67:98:9a:7a:ad:4b:
58:e7:f1:31:02:60:29:c0:ba:01:1a:be:44:64:42:fa:cd:0d:
ae:f4:2c:8e:7c:d9:c4:c7:75:b5:57:44:ac:4f:96:61:1f:9e:
a9:0c:34:41:11:10:9c:6a:fa:ca:ac:34:4c:3c:34:d8:6a:06:
75:36:40:e0:68:e5:db:eb:83:dc:5b:8a:4a:b5:cb:1e:f2:57:
bb:c0:bd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:31:11 2025 by rpki-client