Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
File: 1YzIUG_tu1Bh3pklsH1kmRihmSY.mft (raw, json)
Hash identifier: wwq3tIAeQrU5VLBVm8hJI0yggbfW8eE1sdmNRcfpJRQ=
Subject key identifier: 09:89:F5:9D:EC:F1:A0:F7:D8:AE:DF:CB:7C:86:83:3B:23:09:25:96
Authority key identifier: D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
Certificate issuer: /CN=d58cc8506fedbb5061de9925b07d649918a19926
Certificate serial: 0197B77C2BDBFA3E29C956B50E64C36FEA7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
Manifest number: 1097
Signing time: Sat 28 Jun 2025 17:00:57 +0000
Manifest this update: Sat 28 Jun 2025 17:00:57 +0000
Manifest next update: Sun 29 Jun 2025 17:00:57 +0000
Files and hashes: 1: 1YzIUG_tu1Bh3pklsH1kmRihmSY.crl (hash: ERBi4OHIhO2DFW0V4FWcfupPyQiWHb7pROZXriHCeYk=)
2: DniqmtindUam8vj_sVzvh8icBDA.roa (hash: ta5Hj3U5JYOoiYd4yiO8g7IzMIhuCaznIwtfzYiosBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:2b:db:fa:3e:29:c9:56:b5:0e:64:c3:6f:ea:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58cc8506fedbb5061de9925b07d649918a19926
Validity
Not Before: Jun 28 17:00:57 2025 GMT
Not After : Jun 29 17:00:57 2025 GMT
Subject: CN=0989f59decf1a0f7d8aedfcb7c86833b23092596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a5:3f:6e:d0:c8:23:98:f6:df:f1:74:37:5d:
0d:c2:55:68:25:ff:df:da:95:6a:d0:fe:5d:c9:ad:
be:2c:36:8c:1d:24:2e:31:19:ea:58:a3:65:90:6d:
09:f6:6e:1d:c5:1a:af:49:c3:8b:71:73:74:ae:ca:
6b:b9:6f:81:47:bb:64:09:fb:0e:20:85:4a:47:b2:
77:af:bc:a1:21:79:92:75:c2:56:c6:df:53:02:ab:
fe:78:8c:e8:df:37:d2:f5:0b:f1:84:ba:4c:3e:97:
3e:46:f0:c9:76:5e:de:b5:3b:46:d9:05:38:00:db:
52:55:8c:5b:6f:25:61:cf:d0:4b:29:0a:bc:6b:4d:
00:00:69:ed:e6:2e:d9:bf:ea:18:ea:ee:0a:9b:d6:
e5:c3:4a:7f:f9:b1:6a:02:c2:8f:ac:5c:43:a4:2e:
36:de:7f:48:54:de:95:fb:28:dd:5c:26:69:71:57:
93:4d:8b:a4:eb:08:fb:d8:a5:ed:6b:03:7d:fa:36:
33:80:a3:43:bb:db:f5:7e:07:56:b9:bb:c1:9d:78:
40:f0:69:8f:6e:c4:6f:69:75:03:6b:dc:65:2f:ee:
8d:d1:a2:37:10:77:69:10:50:ea:99:c7:4b:90:e3:
32:f0:14:1e:14:60:3b:fb:d9:63:75:e0:7f:f1:e0:
f7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:89:F5:9D:EC:F1:A0:F7:D8:AE:DF:CB:7C:86:83:3B:23:09:25:96
X509v3 Authority Key Identifier:
keyid:D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:80:1b:02:2f:b9:35:f8:a8:11:7f:4b:26:0f:85:47:c4:2f:
19:9d:75:ea:45:5e:09:a8:81:0d:65:93:b8:ab:0a:e4:5c:4d:
04:91:7f:4f:2a:5a:aa:33:dc:44:6b:51:64:0f:8b:52:df:4a:
d3:a8:70:99:27:71:91:51:f1:bf:d7:81:0f:b2:db:55:32:58:
ec:2d:99:e8:ac:08:f3:13:a9:d7:49:35:bc:b2:73:3c:34:35:
5e:39:85:7c:92:7a:da:ef:6e:a8:d6:94:36:cf:9a:eb:c2:9d:
5e:19:55:9f:82:2a:22:2c:89:d9:a8:a2:8b:31:ec:09:d8:d3:
79:19:d8:5a:21:1c:54:b7:f6:ed:12:d4:f8:f6:f1:1a:1c:57:
02:64:5d:d1:b5:16:31:cc:2e:e1:65:c8:a4:1e:a5:97:aa:c2:
b7:86:15:45:c0:97:2b:7d:5a:44:b3:e2:87:d6:c6:80:61:d8:
b2:3a:c7:c7:93:21:9b:07:62:fd:d3:f2:2f:d5:f8:c7:62:d6:
6e:ac:25:e7:fe:04:e0:f5:d7:d6:af:54:98:58:7c:1c:27:da:
4a:f2:87:0f:ce:19:65:49:82:b2:22:1d:61:82:17:e7:3d:2a:
80:18:fd:78:c2:5f:fb:45:3f:4f:df:ff:40:f9:ff:ec:ed:07:
56:57:6f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:28 2025 by rpki-client