Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
File: Y9krglYVmJTSubJfTYWYbBcnI8M.mft (raw, json)
Hash identifier: TRZmXyp6wqDdGhXphtROyosMgYq2mx02IMqr15y0yQA=
Subject key identifier: 51:70:C3:2A:0E:63:DA:20:A4:0D:94:87:1B:67:65:5F:11:0A:55:26
Authority key identifier: 63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
Certificate issuer: /CN=63d92b8256159894d2b9b25f4d85986c172723c3
Certificate serial: 0197B77CA3AB01844F87E084CC82C3580B61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
Manifest number: 0D7F
Signing time: Sat 28 Jun 2025 17:01:28 +0000
Manifest this update: Sat 28 Jun 2025 17:01:28 +0000
Manifest next update: Sun 29 Jun 2025 17:01:28 +0000
Files and hashes: 1: VWwybFqWy2MXRW4GlH3TydNfWoU.roa (hash: AWURtsDjcCoYL2cv7BnBoU4GwDRl+uRuBqffs+8EChU=)
2: VsWH0dh23uHGDE4kVE5VRVWnLr0.roa (hash: hOVkpMTlrRKsdZ/dZuqLj9eHRUgLLpUyv0shzANzums=)
3: Y9krglYVmJTSubJfTYWYbBcnI8M.crl (hash: D5NCwV0E6HjTb7rqBwm0XmvA57OhtPzB3q78DTpi9AY=)
4: gUlf15cCFOrr7zCpeZmrXHzHdJI.roa (hash: BZcCVc7umSblQi+mV0dsvmWzWVZejT4EU9eRPoEWNCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:a3:ab:01:84:4f:87:e0:84:cc:82:c3:58:0b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d92b8256159894d2b9b25f4d85986c172723c3
Validity
Not Before: Jun 28 17:01:28 2025 GMT
Not After : Jun 29 17:01:28 2025 GMT
Subject: CN=5170c32a0e63da20a40d94871b67655f110a5526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f7:57:7a:a0:bd:0f:86:cd:7f:e2:5b:24:f3:
7d:25:f2:98:b1:5d:01:2d:c5:aa:bc:95:56:ba:34:
fb:e9:6d:47:5b:88:04:83:c0:02:9c:3a:a6:2f:da:
55:a6:a5:44:15:3f:f8:6c:c6:58:00:01:f4:19:3c:
87:0f:1a:91:b2:b6:0f:4c:57:a3:3e:37:ed:a4:e4:
62:7d:4a:5d:c2:e5:e4:eb:72:c6:94:b9:b7:16:98:
48:dc:ee:7d:23:df:e9:97:15:f8:46:00:0f:8a:e5:
a8:75:1d:3c:e2:3d:96:2e:f9:ef:3a:e7:f2:f1:25:
d0:f9:e2:13:13:49:07:0f:41:e4:6b:cb:8f:e3:8b:
0e:1b:ec:ef:25:de:ce:ec:fd:6d:d5:cd:95:ed:73:
b5:31:f2:f2:75:54:a3:74:32:35:9e:e3:f9:ac:76:
bc:3e:95:92:8b:7d:04:f9:52:c7:38:46:cc:81:33:
31:d4:6c:95:bc:93:6b:9a:b9:e9:fc:ce:6f:90:65:
c6:ed:e9:db:f2:7e:07:bc:58:63:20:39:44:0a:b6:
c5:d0:46:90:5d:45:83:76:25:9e:61:ca:09:9a:96:
f1:e1:b4:ae:52:1e:7f:4f:8d:a2:73:99:b2:0e:fe:
e1:b8:80:d4:0b:7b:2f:f8:fc:de:4d:d8:a3:24:65:
f0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:70:C3:2A:0E:63:DA:20:A4:0D:94:87:1B:67:65:5F:11:0A:55:26
X509v3 Authority Key Identifier:
keyid:63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:4e:7f:9a:93:4a:67:c8:6a:96:ef:78:9e:c3:e1:f1:41:7a:
04:97:22:d4:dd:9f:69:fa:c4:c7:d8:38:29:80:e1:a3:6e:7f:
81:11:c7:e0:fe:fe:aa:a8:b5:ba:ee:3d:f1:b0:f4:73:c2:82:
5c:a1:df:89:4e:eb:1f:ab:b7:43:80:75:e9:5e:c6:49:df:68:
a6:80:cd:ba:dd:87:de:8d:43:ec:ce:fe:8a:83:08:71:f7:c5:
82:e6:6d:4a:4c:8c:f5:1b:ab:52:06:fc:b4:08:98:06:af:51:
75:73:d7:0d:9b:84:43:b3:d5:d8:16:d6:b9:d0:42:ac:be:db:
8a:f2:31:0a:5e:c6:2c:52:2a:ca:65:62:a5:10:d4:2f:89:ba:
fd:fd:c2:f1:56:d2:c2:0e:40:5d:8e:65:95:4d:fc:70:07:26:
f8:d2:2f:40:9b:b9:ae:fa:96:7b:f5:b5:eb:78:f3:b0:77:48:
e3:48:aa:ed:31:7f:f2:89:63:b0:b8:16:77:cd:2f:59:9b:34:
ed:f2:32:58:9b:88:6a:44:8e:db:a5:70:43:82:d7:7c:bc:f6:
b3:a9:78:fd:dd:22:5f:79:1f:58:26:f9:7d:b7:b8:03:cb:7d:
87:89:48:1c:4e:c7:ce:43:e6:36:e4:9f:51:80:a3:d9:c2:1f:
1c:4e:33:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:01 2025 by rpki-client