Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
File: y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft (raw, json)
Hash identifier: Mrv8zhY4FQ0SH36kDtep5IU68NEiKAz0ylX28sKRboM=
Subject key identifier: 17:4B:16:96:41:A7:B4:39:C3:7D:61:45:F3:E3:22:84:D6:6C:5F:A9
Authority key identifier: CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
Certificate issuer: /CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Certificate serial: 0197C64A7EED78C7BE7F3BBC030213D7FE06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
Manifest number: 15BC
Signing time: Tue 01 Jul 2025 14:01:00 +0000
Manifest this update: Tue 01 Jul 2025 14:01:00 +0000
Manifest next update: Wed 02 Jul 2025 14:01:00 +0000
Files and hashes: 1: 7T8vel-RvUDAb6LdSmoGnY1MBEg.roa (hash: Bv42HU9ZNI49CjZAPUApOp/bLDu91m+dP9rH1Q/6aaU=)
2: sKarxrcp3TYbOa1lj25cFgvPm1M.roa (hash: hzIQC+6QcM0KejfwF/J95Pb7an1/Oimflf+mKhKCBQI=)
3: y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl (hash: LujqivQT4kpJ6k9qIjmZfK+dt8fscuHIxt3YT3DIRSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:4a:7e:ed:78:c7:be:7f:3b:bc:03:02:13:d7:fe:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Validity
Not Before: Jul 1 14:01:00 2025 GMT
Not After : Jul 2 14:01:00 2025 GMT
Subject: CN=174b169641a7b439c37d6145f3e32284d66c5fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:84:f6:1f:c8:fd:c2:88:65:52:9c:46:98:74:
59:4a:f2:43:7a:60:1e:29:86:33:28:68:a9:b4:e4:
18:40:21:d3:b4:c3:33:31:e0:cc:ac:13:50:95:91:
8e:07:9b:41:42:da:c9:72:2a:25:b7:3b:c8:0e:2a:
b9:88:9b:7a:06:87:67:e3:98:53:a7:9f:70:5c:c8:
88:68:3b:d1:0d:53:f0:a9:ed:8f:3c:10:04:1f:21:
dd:34:04:83:ae:9d:15:05:dd:5b:ed:13:8d:4f:1e:
03:20:76:36:8f:c0:ea:f5:78:84:fa:f3:3e:fb:ae:
a5:f3:a5:a5:3b:2e:65:76:d9:31:02:6f:6e:80:c9:
25:73:6b:01:07:c2:e5:3a:3e:4e:b6:f2:35:ec:a4:
49:b6:04:35:86:62:bf:45:8e:6e:2b:3f:fb:7d:09:
d3:bd:16:f8:a7:54:80:fd:2c:d2:d3:a9:43:0f:ca:
4b:15:40:ce:46:0f:30:1a:6b:16:c0:ad:85:79:72:
9d:46:99:fe:4a:ab:c3:5a:1a:2e:41:21:b2:86:94:
de:c4:17:5e:45:5a:fb:5a:ae:77:0d:b2:f1:29:cf:
1e:d7:81:47:d4:ef:d8:4e:87:8c:fb:7b:3a:c5:30:
37:89:74:d8:77:eb:64:6d:ba:c2:4f:71:fa:5c:17:
90:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4B:16:96:41:A7:B4:39:C3:7D:61:45:F3:E3:22:84:D6:6C:5F:A9
X509v3 Authority Key Identifier:
keyid:CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:10:44:07:b9:2d:50:87:a1:90:76:cc:eb:cb:65:07:5c:e4:
51:d5:91:30:65:98:75:8e:fe:42:46:d5:5c:30:37:91:0b:4b:
76:0a:f1:4b:12:fd:90:16:76:bc:14:68:bb:19:dd:97:71:42:
b5:fb:e0:96:8d:3c:9d:96:a9:a4:98:7f:a0:d2:97:84:11:c8:
0e:7b:64:39:63:08:0e:0f:17:73:dd:8c:73:b0:0f:bc:ff:22:
22:93:7f:df:49:c0:36:26:ac:aa:67:12:04:19:e1:80:73:a9:
05:ed:21:dc:a2:ab:7b:42:27:4f:e2:17:98:85:da:b7:35:1e:
16:c4:16:cd:11:fd:1d:43:b1:42:04:9c:b8:a3:e3:db:6c:22:
d8:fb:10:6f:97:b6:9d:0a:95:f8:e8:36:35:14:8f:19:28:4b:
4d:04:3a:40:55:d3:10:9c:d6:42:a3:f8:01:b0:aa:c2:86:66:
b4:df:2e:85:af:2b:84:86:a7:16:e2:ef:a0:1c:f6:cb:b2:b2:
e9:14:b4:a0:44:0c:c9:d6:2e:19:ad:84:34:00:14:55:85:ff:
ec:03:f7:4b:83:12:ca:04:bb:ea:49:5f:97:9f:78:9a:ea:63:
a8:87:5a:7d:1c:e4:1f:53:81:29:f1:0c:d2:71:f2:24:66:12:
77:a1:f7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:19:06 2025 by rpki-client