Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
File: ydWxKeBvlSRoXnABAoQfctaRXDM.mft (raw, json)
Hash identifier: h/RJppvDaLbHGY7kD4zzUZw4SMnRuDNfoqfWzWMJr2Y=
Subject key identifier: 53:DB:18:BB:E2:AA:34:67:F0:7D:32:27:BC:CE:C2:30:4A:16:58:3A
Authority key identifier: C9:D5:B1:29:E0:6F:95:24:68:5E:70:01:02:84:1F:72:D6:91:5C:33
Certificate issuer: /CN=c9d5b129e06f9524685e700102841f72d6915c33
Certificate serial: 0197B8215995EFDA1A3E6F0F4F4DD25286E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
Manifest number: 0398
Signing time: Sat 28 Jun 2025 20:01:22 +0000
Manifest this update: Sat 28 Jun 2025 20:01:22 +0000
Manifest next update: Sun 29 Jun 2025 20:01:22 +0000
Files and hashes: 1: OpWpWHElMT6Em0cb46EU4-eZHBM.roa (hash: UkmgnvSBtnTTqSpYqYCCjTjePdoSg2sK2f+rfkHw/HY=)
2: ydWxKeBvlSRoXnABAoQfctaRXDM.crl (hash: GFnWuHoSzr/MenDXJ4bQArcBW9Zjv/tHdvypptz9GFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:59:95:ef:da:1a:3e:6f:0f:4f:4d:d2:52:86:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d5b129e06f9524685e700102841f72d6915c33
Validity
Not Before: Jun 28 20:01:22 2025 GMT
Not After : Jun 29 20:01:22 2025 GMT
Subject: CN=53db18bbe2aa3467f07d3227bccec2304a16583a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e8:b1:a9:1b:ec:03:24:e7:01:bd:fc:36:60:
88:09:7f:8e:10:75:05:c0:ca:5d:b7:9c:6c:3d:08:
05:0c:2f:3d:85:d1:d0:b5:70:95:0a:2c:3c:2c:75:
79:24:69:37:1f:72:0e:ea:c2:29:fb:54:a6:19:c1:
34:56:dc:22:26:c2:d5:1b:9b:1a:f8:3b:11:97:cd:
b5:72:36:ee:f3:a4:d8:d0:af:22:2f:4b:b5:b6:f2:
49:b3:21:15:b1:48:d5:b0:c3:ba:93:7f:11:83:1c:
25:b2:29:7e:c8:8e:ad:72:e0:7b:d3:c5:09:1f:0e:
f2:5d:e4:20:96:57:c8:95:9e:65:c3:dc:c6:36:0f:
f0:a5:ae:b9:44:27:60:34:f6:f6:6f:5e:ca:2a:51:
9e:3f:93:f0:fa:98:37:8a:4c:2d:dd:73:e9:01:8c:
bf:f4:b2:df:c9:8e:66:0e:3e:23:7e:96:3e:96:56:
62:68:76:aa:f5:bf:59:1f:fc:3e:56:37:3d:11:f8:
3a:20:5a:5d:f7:20:80:29:3c:bb:31:09:df:98:1f:
05:c2:a6:98:f4:28:40:e1:f6:82:37:c8:86:52:b7:
b6:22:63:ae:c4:5f:f2:46:a9:84:c5:aa:f6:55:f2:
5d:7f:71:4a:1e:ee:1a:40:a0:d0:84:2c:a2:ac:ad:
3a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DB:18:BB:E2:AA:34:67:F0:7D:32:27:BC:CE:C2:30:4A:16:58:3A
X509v3 Authority Key Identifier:
keyid:C9:D5:B1:29:E0:6F:95:24:68:5E:70:01:02:84:1F:72:D6:91:5C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8d:21:5d:7f:73:7d:eb:9e:62:82:d0:14:39:a2:3d:b2:96:
8d:85:34:85:5f:3b:49:12:72:fb:6a:cb:9c:c5:5a:33:3c:97:
4d:64:70:9c:0b:d7:f2:3b:58:cc:82:4d:eb:0e:03:04:fe:8a:
a6:77:c5:0d:cb:47:0e:24:89:2a:f5:7f:00:e4:96:30:88:f9:
9a:db:7e:ec:81:15:10:31:4a:91:1e:59:75:6c:5e:3c:b4:c0:
4b:9f:6d:96:96:ea:d3:ac:10:7c:14:b8:a8:ef:2e:ff:2c:b9:
fa:96:c4:f3:f2:b9:3a:0e:4c:92:84:70:b5:cf:d3:33:23:c5:
2b:8f:36:51:97:91:ad:3b:aa:d4:8f:09:71:ac:26:d1:b5:90:
49:f0:51:33:c7:3d:ea:ed:50:c5:90:57:fe:d7:46:35:0a:39:
71:80:a2:e5:2e:4e:7d:72:3f:61:75:3c:4f:73:3d:97:40:9b:
00:22:ed:bf:7a:8f:4d:68:96:d1:82:42:08:de:f9:72:ec:fe:
1e:c3:60:79:05:92:44:98:46:8e:23:02:73:17:37:5c:e3:b9:
e2:9e:49:a4:38:58:3a:b4:2b:75:f1:55:4a:0e:75:3a:34:7e:
e6:4b:83:9b:c3:f2:a0:f0:b9:da:6e:46:63:71:5c:0e:0f:64:
47:03:62:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:08:21 2025 by rpki-client