Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
File: Y9nR2VwetxbugZUEWnfLohgdeew.mft (raw, json)
Hash identifier: hwRlBEaXaHJVFoKVf79fyI0oTKfWdLbLBAKeWHx0ScU=
Subject key identifier: 7D:8B:3C:5B:DA:E2:B2:3D:83:7C:B3:2C:4C:9A:C7:88:25:E0:ED:85
Authority key identifier: 63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
Certificate issuer: /CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Certificate serial: 0197B58DBDD288E719CD5F28080E070B89A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
Manifest number: 15C6
Signing time: Sat 28 Jun 2025 08:00:54 +0000
Manifest this update: Sat 28 Jun 2025 08:00:54 +0000
Manifest next update: Sun 29 Jun 2025 08:00:54 +0000
Files and hashes: 1: Xpr9sRgbPmZViC8BU1QHYCRAm3g.roa (hash: /PhmdbdMunM2MY+0QaCxgwKDHy7Elu8z4ortzYVhL+Y=)
2: Y9nR2VwetxbugZUEWnfLohgdeew.crl (hash: ajRzuKvLTERslydEZe9/rSTVd4EXZFBGShZytcqbwy4=)
3: emyVhdOtUpRyesCtl5eoHp0JGEE.roa (hash: 86qnK0w4Cm+zX9631HiXs9UjrDd9iFThMb03qwigYKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:8d:bd:d2:88:e7:19:cd:5f:28:08:0e:07:0b:89:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Validity
Not Before: Jun 28 08:00:54 2025 GMT
Not After : Jun 29 08:00:54 2025 GMT
Subject: CN=7d8b3c5bdae2b23d837cb32c4c9ac78825e0ed85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:22:55:e3:23:76:51:cf:54:7f:db:59:6e:13:
c1:5d:62:0c:6a:52:44:2c:2e:48:35:af:b6:1d:7f:
c1:0f:c4:66:a8:8c:b3:bb:2c:e6:be:f4:53:eb:f0:
25:60:73:ba:09:10:25:d8:67:95:06:2d:b2:9e:37:
8b:7c:02:c2:aa:5c:c8:04:8e:ec:4a:19:35:cf:6b:
60:e2:42:56:f7:01:b0:d2:e9:0e:08:15:d4:6b:48:
9f:59:ba:69:0f:1c:6d:45:06:6a:ae:56:0d:6c:b4:
5c:09:43:96:1f:98:bc:b6:8d:22:8d:9f:71:e6:4b:
e1:91:8f:ae:b1:8f:e5:6a:78:c4:cf:75:84:b5:23:
84:47:58:5a:3e:d8:3d:b8:21:51:21:53:fd:8c:89:
e2:c3:de:18:a5:e9:7c:b9:f8:a8:a9:81:65:95:24:
42:fb:d9:6b:3c:90:34:b6:78:5e:5f:6e:c3:c8:08:
69:86:94:f1:86:c9:9c:e2:2e:86:0f:1b:b9:4a:4e:
06:4a:ab:c7:7c:25:b9:d4:d8:58:f2:82:d1:38:df:
a8:ec:7d:76:c3:ae:f6:8b:3c:7a:ea:38:b5:7a:49:
9f:eb:32:23:6c:ae:db:a1:f2:56:ab:aa:ce:f5:dd:
2b:1c:8b:a6:8e:45:75:5d:b8:99:e9:4a:a5:9b:4a:
31:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8B:3C:5B:DA:E2:B2:3D:83:7C:B3:2C:4C:9A:C7:88:25:E0:ED:85
X509v3 Authority Key Identifier:
keyid:63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:fe:10:64:db:50:fe:7c:a1:9a:10:9e:17:69:b9:98:54:8a:
c0:0e:c0:5c:d2:9f:d2:7b:fa:a2:ba:74:cd:7c:4a:0d:ce:48:
57:95:44:5e:58:7b:29:5e:4e:ed:13:df:84:2c:a7:79:aa:35:
22:a2:2a:05:06:50:be:e3:07:ff:b7:a2:3c:0a:19:38:87:fe:
5f:fb:74:1e:35:f1:4d:2b:1f:c5:44:81:e8:be:58:fc:1f:93:
69:0b:fe:da:1b:f1:8e:41:6f:18:e9:8b:39:4e:68:76:4e:20:
2f:6f:da:16:83:73:96:a7:ae:0d:ab:b5:b6:fb:4a:69:a2:57:
75:f1:32:db:95:c0:0b:53:c1:ab:d9:61:19:bd:16:e7:95:d9:
a2:55:e4:b2:96:59:81:a6:2f:9a:36:56:2c:f0:60:57:a8:28:
28:00:0c:61:10:d0:82:b5:b9:06:cc:14:d2:12:86:19:6c:d7:
4b:7f:13:ca:de:26:e0:17:7b:c6:79:82:7e:a7:49:de:d3:c8:
eb:24:97:d6:36:23:5d:c2:67:6c:2f:3f:14:ea:0d:15:56:18:
65:b5:e5:61:2f:9b:0e:da:b8:33:3e:64:12:f3:4b:a8:25:32:
41:c1:81:18:9f:e4:15:da:0f:00:18:b1:57:8f:ee:cc:13:2d:
e2:bc:b9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:57:26 2025 by rpki-client