Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
File: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft (raw, json)
Hash identifier: kYitthi9teu62huGFQOh2FSh9MdvDDtI+/rxFmthJUw=
Subject key identifier: 00:B0:3E:2B:13:A2:FE:8F:6F:92:93:2E:60:BD:23:5B:E6:D2:1A:FC
Authority key identifier: 89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
Certificate issuer: /CN=8986e25683302c38270d0f90c4aad1519393d545
Certificate serial: 0197C04866538E9A3E1491FF66C072914C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
Manifest number: 11CC
Signing time: Mon 30 Jun 2025 10:00:59 +0000
Manifest this update: Mon 30 Jun 2025 10:00:59 +0000
Manifest next update: Tue 01 Jul 2025 10:00:59 +0000
Files and hashes: 1: hBtuYA8NQ04R8tq6jZPsM1-BvhU.roa (hash: K70nTdo1e1FCrO48Dr3FeEO2IPCXhYeBeZlKIyFXxPc=)
2: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl (hash: Z6Z2rWtO3p8ihyMSW9GPWe3C6jifj+/4r4Az2BzleQo=)
3: yYfUODDume9xFNHrgw8kXHPMP18.roa (hash: X3WTz4JdrFUIjxDVjaUEhmRWKqzFmlYHhSjsH9h5dXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:48:66:53:8e:9a:3e:14:91:ff:66:c0:72:91:4c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8986e25683302c38270d0f90c4aad1519393d545
Validity
Not Before: Jun 30 10:00:59 2025 GMT
Not After : Jul 1 10:00:59 2025 GMT
Subject: CN=00b03e2b13a2fe8f6f92932e60bd235be6d21afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e8:c8:3c:12:d5:9b:f3:2a:df:e2:43:0e:23:
b8:25:c3:2c:aa:f9:58:d4:4d:fa:55:ca:1c:2a:89:
7b:ea:9c:c6:08:51:9b:af:84:34:ac:09:94:43:4b:
c7:f1:0d:5e:85:f7:a3:d2:c5:a0:96:0d:dd:79:ad:
b3:b2:fa:85:7a:b5:89:dd:ce:01:3e:3b:54:d4:6a:
54:47:5b:48:c4:0b:ff:60:8a:0c:22:06:a3:f9:1e:
f5:7e:15:95:5d:d8:40:c3:07:4f:84:df:da:b9:fa:
91:65:f6:b3:8e:c3:8e:07:37:43:26:80:1b:75:bf:
84:aa:b5:dc:e5:54:70:b1:cf:5c:09:7f:13:ad:87:
b5:39:4a:f7:03:c1:a1:26:40:7b:83:ba:0e:87:52:
d9:ce:d1:73:80:b6:40:ff:c0:6d:3a:fe:67:07:38:
a9:f5:61:d1:ff:f4:c8:9e:01:60:d8:1c:62:c1:71:
f9:16:43:66:97:d8:40:b0:53:8f:ef:1d:03:8d:99:
37:da:b0:88:df:96:d9:a1:7c:e1:35:29:bc:c6:0d:
d2:08:3f:76:cb:cd:38:fa:52:12:b0:0c:4d:8c:2c:
6e:0b:0c:42:20:f4:09:45:bb:1b:3c:6e:65:67:8f:
c5:d3:35:ed:2f:4c:01:c1:e1:6d:91:59:74:79:27:
13:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B0:3E:2B:13:A2:FE:8F:6F:92:93:2E:60:BD:23:5B:E6:D2:1A:FC
X509v3 Authority Key Identifier:
keyid:89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0a:f3:87:57:a8:71:ec:c6:b9:75:48:b7:41:d7:d1:5c:8a:
ac:c2:c5:ce:51:0a:76:96:fa:78:77:78:2d:5e:90:f2:58:a0:
51:83:54:72:79:b5:48:15:43:30:ff:4c:e2:c3:f5:04:04:bf:
a5:32:69:d6:1f:d6:16:75:80:fb:b6:5c:f7:04:60:b2:79:aa:
cd:a1:6b:e2:9d:8c:89:98:45:00:27:51:5d:93:4e:95:62:a5:
a2:37:68:17:c3:9f:f2:9e:a1:f2:c3:41:c7:ad:b2:67:d9:99:
9c:32:84:57:c0:6f:81:51:96:db:2f:49:d5:e7:cb:1c:20:0d:
f1:cd:8d:8c:ba:af:5b:92:f9:89:db:0a:40:1f:f2:5f:0f:99:
22:de:d4:e6:be:dd:dc:d3:07:a8:1e:52:81:de:73:8a:7f:4f:
e0:d0:0c:4c:2f:bb:55:56:ba:b1:fc:1c:51:1f:a9:30:e0:cf:
2b:6e:ac:39:8c:80:dc:52:33:07:d2:d6:cf:a9:97:4f:77:a5:
16:6f:21:5d:33:21:78:4d:07:4b:53:84:b4:14:ec:b6:0f:9b:
35:0d:86:21:86:25:2a:35:8a:d9:bf:a5:c1:3f:0a:00:a6:71:
0a:d4:6c:4d:d5:e6:b5:fd:d7:2b:be:72:dc:7f:35:3c:a1:1b:
5e:e0:56:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:31:19 2025 by rpki-client