Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
File: Yj80T9SpG_rRODCNUnFVu85Sr24.mft (raw, json)
Hash identifier: /ASz1/Urfo6rz5Cua902drepvfwuvaZspkTNP4lD6Q4=
Subject key identifier: DC:38:77:06:43:17:1C:99:80:A2:3E:4A:5A:74:0A:CE:D5:32:F4:69
Authority key identifier: 62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E
Certificate issuer: /CN=623f344fd4a91bfad138308d527155bbce52af6e
Certificate serial: 0197B8FCD0A0EFC7D1A9D64B0661654B1BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
Manifest number: 15B5
Signing time: Sun 29 Jun 2025 00:01:05 +0000
Manifest this update: Sun 29 Jun 2025 00:01:05 +0000
Manifest next update: Mon 30 Jun 2025 00:01:05 +0000
Files and hashes: 1: PaAAUO_ixJ6swm7tE4jKyNdYpk0.roa (hash: TfUDJUozwqa+GvnOHe7awC0XZSqVbUNsIbWR0csLcfM=)
2: Yj80T9SpG_rRODCNUnFVu85Sr24.crl (hash: idx3bOvJp0dk1Ri4ZSQUFqZ3fS/m6FtKkoysVKutmMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:d0:a0:ef:c7:d1:a9:d6:4b:06:61:65:4b:1b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623f344fd4a91bfad138308d527155bbce52af6e
Validity
Not Before: Jun 29 00:01:05 2025 GMT
Not After : Jun 30 00:01:05 2025 GMT
Subject: CN=dc38770643171c9980a23e4a5a740aced532f469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:37:c4:30:a2:1d:0b:fb:1e:b4:63:29:22:42:
37:2a:ad:d5:2c:9b:45:dd:6e:32:ff:7e:ca:e0:5c:
fb:e3:4a:5d:79:c2:61:e4:f4:ab:e8:68:9d:de:5b:
6b:cf:87:51:a2:4a:4d:a0:14:5a:4f:ed:02:25:42:
89:28:c7:48:0d:9d:3f:7d:27:12:4c:0e:ac:58:d7:
a1:36:52:20:bb:23:e2:ae:9f:df:30:1b:92:0e:c1:
ee:c1:63:38:62:fd:22:14:a1:2a:d0:6d:7a:88:5c:
ae:cf:72:02:0e:06:78:2c:42:84:67:8a:dc:3f:bb:
01:a2:4d:df:21:b2:ae:ef:dd:1a:81:73:2e:f7:6b:
27:6f:c3:c9:20:26:cc:22:e5:c8:b1:96:c6:f0:2e:
dd:59:a2:32:da:ce:53:54:f5:cd:e9:70:a8:6b:5e:
a9:da:9d:c0:7a:b5:f6:47:d1:3a:4b:0b:54:c9:77:
31:b6:cf:44:aa:21:c7:de:e7:d5:d9:8d:46:ac:bc:
00:e2:17:31:61:e6:0a:82:55:4f:65:72:cb:a8:a3:
23:dc:6d:da:cd:25:38:48:ed:cd:fc:af:33:43:cc:
e3:07:d3:d0:e2:b8:ed:2e:63:e5:fd:34:17:f0:73:
d2:b0:1b:ba:a0:18:1a:c7:ec:ee:64:51:3a:f3:d6:
5a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:38:77:06:43:17:1C:99:80:A2:3E:4A:5A:74:0A:CE:D5:32:F4:69
X509v3 Authority Key Identifier:
keyid:62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:19:40:63:09:69:9c:c4:0d:5e:69:ba:2e:2d:53:10:4d:0e:
ee:79:80:d3:b4:c6:a9:0a:39:21:ae:61:03:c4:af:d3:06:fc:
65:b1:95:82:ec:48:c4:1f:06:e2:67:01:23:1f:4c:e5:1c:47:
66:7f:0c:ed:5a:8c:cc:34:c3:d2:a7:76:02:0c:95:da:d8:db:
e5:56:8c:3d:62:09:2e:c4:e6:06:e1:ea:ba:3f:8a:38:96:d5:
37:f7:30:8c:f5:1f:6b:63:24:64:89:82:11:21:8d:95:e4:30:
fc:64:09:63:50:ef:c6:38:0b:27:0d:35:03:85:e9:5d:68:7c:
4c:af:07:47:24:24:7f:be:de:aa:e3:ce:99:d2:04:b5:89:55:
74:70:14:eb:18:d5:79:44:e4:bb:c9:36:db:1d:e0:5a:b3:f1:
bf:85:c3:cd:40:01:43:9b:e4:9c:f5:29:40:c6:a9:36:2d:ad:
08:0f:45:fd:fd:6b:9a:64:e3:e7:4e:c0:46:37:30:df:94:ce:
79:31:22:f0:07:2f:9d:66:fc:07:74:a4:6c:fa:75:03:87:8f:
94:aa:bc:22:dd:c9:07:45:31:56:1b:d9:f5:a1:ae:40:7d:3c:
ec:2e:e1:d4:f3:30:81:00:25:1b:2b:c7:cf:cb:b0:4a:8d:ab:
c9:e1:41:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:21:36 2025 by rpki-client