Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
File: yjNIUNrzcSIFIBmSKevekO8osBg.mft (raw, json)
Hash identifier: hCv+1jq/AV9F0lEuoTIj2K1Z+9mSnQ67jW7Ut7MVknQ=
Subject key identifier: DC:D0:BC:5C:38:E4:50:8F:A3:9A:E1:67:BC:5F:0E:AE:80:47:55:5F
Authority key identifier: CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
Certificate issuer: /CN=ca334850daf371220520199229ebde90ef28b018
Certificate serial: 0197B9A1A6F0B9C40D6D3487CCA944401D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
Manifest number: 0633
Signing time: Sun 29 Jun 2025 03:01:08 +0000
Manifest this update: Sun 29 Jun 2025 03:01:08 +0000
Manifest next update: Mon 30 Jun 2025 03:01:08 +0000
Files and hashes: 1: 6eOqvZGDKFDuA6yXPPPze8WOsrA.roa (hash: ERZvSVqw/o5/S8YL0KRBFbpGBsSfCd4T3Hhjomrg6eY=)
2: yjNIUNrzcSIFIBmSKevekO8osBg.crl (hash: Mipi1/JqHrAinnQwiNY/mJhyKZaZNyFqjb2vzjf58ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:a6:f0:b9:c4:0d:6d:34:87:cc:a9:44:40:1d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca334850daf371220520199229ebde90ef28b018
Validity
Not Before: Jun 29 03:01:08 2025 GMT
Not After : Jun 30 03:01:08 2025 GMT
Subject: CN=dcd0bc5c38e4508fa39ae167bc5f0eae8047555f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:6d:98:8a:a8:d9:11:b8:9d:e3:9a:ab:cb:
f1:58:db:6b:21:eb:0d:d0:64:41:01:3e:93:42:02:
45:bc:fa:e7:67:e0:11:cf:1d:a9:bc:88:22:1b:71:
53:78:10:c0:25:c6:3b:6e:5a:cf:0e:34:b0:83:18:
70:a5:1f:94:c2:59:f2:40:bd:91:c2:e1:13:fb:15:
5f:1e:1a:88:cd:03:00:32:17:6d:8e:1a:a0:d4:ad:
ec:18:26:1f:bc:bb:a9:93:95:9a:a9:ae:7e:01:54:
f6:02:c9:27:66:12:df:5b:a7:19:e7:4a:4a:c1:f3:
a3:01:b7:9f:e4:4b:96:7f:ae:f0:ca:3c:f0:5d:0c:
1d:40:a9:14:78:fc:47:62:c1:fd:d6:27:46:ad:e9:
50:e1:32:cf:d9:fd:45:ae:84:92:42:26:3f:ac:8b:
39:09:f7:f5:80:58:b5:be:c7:e1:76:96:5e:1c:fc:
29:be:eb:f4:de:8e:27:f0:70:63:d8:4e:6a:25:f5:
dd:4e:20:9c:14:43:60:9e:cc:24:ec:09:3f:04:c8:
22:38:44:63:5c:06:07:3f:27:5e:c5:d0:e1:76:23:
48:88:60:35:c3:17:3a:76:1d:00:ef:54:ed:03:9e:
65:d3:e3:1d:a5:88:38:6e:d8:28:6f:c7:57:fa:ce:
85:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D0:BC:5C:38:E4:50:8F:A3:9A:E1:67:BC:5F:0E:AE:80:47:55:5F
X509v3 Authority Key Identifier:
keyid:CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d8:34:2b:ce:12:ed:83:f7:1f:10:75:70:a2:1f:e5:74:e7:
77:16:ba:55:22:f7:77:f5:ac:bc:eb:f3:37:24:44:46:73:d4:
5f:36:b4:45:c5:1a:cd:b3:e4:ad:72:7a:2d:01:45:f3:a6:94:
d6:9f:3d:a0:ec:c1:1f:18:92:45:80:74:0c:cf:e8:41:38:d1:
2a:de:13:c7:c5:41:8e:01:57:b3:cc:ac:95:a9:39:92:3d:df:
08:6a:d3:97:02:f8:de:8f:d0:33:05:91:0d:5b:16:13:e7:25:
34:3b:b6:af:0f:92:bf:4c:e7:10:6c:b1:33:70:6e:eb:83:b3:
f9:d6:17:2c:37:34:dd:87:2e:31:69:b9:aa:d2:05:8b:33:3a:
75:1b:97:1c:b5:5e:97:bf:9f:f5:87:db:85:0a:55:7a:39:8d:
bd:97:50:dd:0b:39:4f:93:06:80:b7:b0:13:9b:ec:89:ff:73:
20:3f:15:37:39:0d:70:c6:11:ae:4f:fc:c9:89:2a:49:9c:da:
38:97:05:5a:87:17:d1:33:9e:55:ba:4a:a9:44:fc:96:0b:ae:
2c:24:12:97:26:8b:00:6c:d5:89:e0:2d:56:77:68:fd:f0:99:
2d:16:45:bf:12:bc:47:3a:54:d4:2f:f0:58:96:94:3f:96:8b:
ef:1c:70:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:04:58 2025 by rpki-client