Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
File: Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft (raw, json)
Hash identifier: jZjwuSyIHIx9mA3cy0NxwmRWyLsbM/ken20Mok/VDU0=
Subject key identifier: F3:96:E3:CC:91:C3:E4:B1:3D:FC:67:7F:D0:01:D4:75:FB:B2:AF:57
Authority key identifier: 63:71:15:F7:28:F9:7D:16:E0:D1:24:96:37:64:08:81:20:20:5A:E0
Certificate issuer: /CN=637115f728f97d16e0d124963764088120205ae0
Certificate serial: 0197B77C11A8F24B4BD9FE1662531D12EC3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
Manifest number: 0581
Signing time: Sat 28 Jun 2025 17:00:50 +0000
Manifest this update: Sat 28 Jun 2025 17:00:50 +0000
Manifest next update: Sun 29 Jun 2025 17:00:50 +0000
Files and hashes: 1: Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl (hash: LtpnDRCFLHggwIoyK/hRvDyhF1gbafmaaDtKaj+r790=)
2: bS_l2Fl7JfNBEh4vQiqWP7zWt_E.roa (hash: rZgNK/vUggsFadv3q4dKfzKV95jK84/8a/5X5Aa/1YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:11:a8:f2:4b:4b:d9:fe:16:62:53:1d:12:ec:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637115f728f97d16e0d124963764088120205ae0
Validity
Not Before: Jun 28 17:00:50 2025 GMT
Not After : Jun 29 17:00:50 2025 GMT
Subject: CN=f396e3cc91c3e4b13dfc677fd001d475fbb2af57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:53:e9:f1:57:42:6d:34:62:97:48:bb:ab:07:
eb:9d:b9:46:36:57:7d:c8:95:4e:c9:23:cb:f6:1f:
02:d7:61:4e:e0:63:7e:68:e2:38:85:ec:c7:f2:3e:
07:d2:32:3b:3b:00:80:85:fa:38:a7:f9:f8:f7:9a:
50:d0:a7:13:4b:cd:a0:5a:73:41:bf:34:f0:8c:d7:
52:e7:ed:80:8a:3f:0e:70:4d:90:a1:f8:3e:9d:9c:
be:74:24:b7:8b:1b:61:b7:4c:e5:90:13:f6:6c:36:
5d:1f:04:4d:12:33:d7:60:4b:7b:0d:3b:c1:db:36:
c5:27:60:26:e6:2a:dd:ef:30:37:2d:91:fd:dd:f4:
69:d4:25:c7:57:00:40:0e:fb:b6:b8:00:c4:25:b1:
6b:36:b2:34:77:29:42:bc:9a:9d:fb:b6:37:19:e5:
12:f7:bd:29:f2:f5:01:ba:62:43:ad:79:2d:8e:1c:
ea:06:29:ff:ee:18:1c:ab:fc:40:4f:93:19:90:a2:
97:4a:f0:bd:9c:80:6b:d3:fd:49:3e:c4:45:e3:1a:
ed:22:8f:8c:aa:17:bf:b7:ba:f1:60:c9:99:c2:92:
2d:99:06:b1:a4:a6:3e:99:c2:a0:60:23:8b:20:f3:
0d:6f:97:75:37:bc:e1:5c:89:ef:99:97:fa:d8:1b:
94:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:96:E3:CC:91:C3:E4:B1:3D:FC:67:7F:D0:01:D4:75:FB:B2:AF:57
X509v3 Authority Key Identifier:
keyid:63:71:15:F7:28:F9:7D:16:E0:D1:24:96:37:64:08:81:20:20:5A:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:09:11:49:06:d8:79:90:25:04:1a:04:16:5b:1f:29:d5:1e:
64:3f:83:e1:d0:17:1a:97:f6:f9:2a:79:2f:a9:46:84:b9:ca:
38:8f:46:e5:6e:6d:9e:3d:e0:21:b1:7d:dc:ea:70:d5:0b:c4:
8a:ca:cb:d9:24:b9:27:c4:58:f1:c7:01:d2:9e:b1:44:76:bd:
af:d5:8b:96:9c:ea:69:09:31:f3:ea:3b:9c:59:14:e0:2f:db:
d9:06:26:36:8f:37:9e:c4:75:ec:da:54:b2:12:56:de:01:63:
d0:69:34:64:71:30:57:85:a5:60:47:56:c8:23:ab:0b:65:09:
b7:00:18:d9:e7:1f:e0:10:23:9e:52:7e:13:98:14:6f:2e:23:
79:f0:3e:df:6d:8e:0a:e7:3c:e7:62:d1:62:3e:92:1b:7e:c0:
21:1a:73:04:cd:68:ab:16:fc:fa:7a:21:a3:0a:8f:d7:4c:c2:
44:62:77:a8:5d:bd:16:be:dc:41:44:38:4c:f5:89:a7:eb:cc:
a1:a2:87:6f:38:96:53:ea:8d:24:0e:f2:ef:35:ba:a2:50:70:
61:5d:20:70:e5:99:49:73:e0:93:be:65:3e:85:67:8e:be:33:
34:08:dc:dc:2d:80:ca:15:43:ec:c4:f4:94:2a:1e:c9:f3:5f:
b3:8b:62:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:14:40 2025 by rpki-client