Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
File: y9IWsAV0TBjLOE09CdEkBm1V9i0.mft (raw, json)
Hash identifier: 6JSH2GGUSs5HY32Nl5ebJgiTvO0wbBY+pe+YwDogWTA=
Subject key identifier: 90:03:54:C8:BE:D9:BE:BA:93:3E:49:47:6E:5F:EA:1D:B3:18:9C:F0
Authority key identifier: CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
Certificate issuer: /CN=cbd216b005744c18cb384d3d09d124066d55f62d
Certificate serial: 0197B6D77827E2636353CB01582C5102C122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
Manifest number: 06E3
Signing time: Sat 28 Jun 2025 14:01:03 +0000
Manifest this update: Sat 28 Jun 2025 14:01:03 +0000
Manifest next update: Sun 29 Jun 2025 14:01:03 +0000
Files and hashes: 1: UP5nddVRXKDFwn0rBo0YDADmUWk.roa (hash: c3q9Feje6DSdFs0M8UM9vMSjOtIoCDA85WxaounA6ns=)
2: y9IWsAV0TBjLOE09CdEkBm1V9i0.crl (hash: CWlm0dB9zn9A1JflENecvzDTI2tD2kFjHeK49uQnCxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:78:27:e2:63:63:53:cb:01:58:2c:51:02:c1:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd216b005744c18cb384d3d09d124066d55f62d
Validity
Not Before: Jun 28 14:01:03 2025 GMT
Not After : Jun 29 14:01:03 2025 GMT
Subject: CN=900354c8bed9beba933e49476e5fea1db3189cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:7a:3b:e3:bd:94:85:7a:40:89:a4:d7:31:bf:
47:d8:ff:b9:fe:4c:76:82:67:87:cc:ab:5e:20:98:
23:0b:c8:aa:d5:f5:5b:d1:44:95:ea:32:34:b0:11:
1b:0b:d4:1f:71:d1:0f:21:29:ec:79:38:67:f8:07:
52:3a:11:98:d0:4d:d8:63:5b:9d:7f:93:99:7b:2b:
3b:e6:8a:3e:b4:4b:c3:3a:e5:c2:d4:45:8b:a7:4b:
f2:20:05:9f:68:d9:58:1c:dc:f1:32:cd:14:d6:4f:
b2:95:c6:45:8b:c4:a5:af:b4:49:a6:c2:5f:fa:66:
e3:a4:aa:19:92:99:0e:05:71:d1:f0:79:ba:96:5a:
36:d3:9c:65:87:37:01:53:a4:47:65:a2:cf:08:5b:
05:39:b0:11:b2:f0:4e:ff:f2:1d:2f:0c:bc:54:99:
f8:8e:c4:60:28:31:87:02:2f:ff:cb:39:4e:ea:02:
ab:63:b5:40:fe:d4:82:f6:39:38:9f:49:6b:b8:05:
40:a7:f8:9e:83:d0:48:5e:4b:a8:07:ae:fc:4e:ce:
af:16:a8:52:b6:58:ff:8b:75:0e:21:99:1e:2b:6a:
cf:ce:74:87:88:af:44:32:24:0c:66:fc:be:36:17:
cb:ab:c4:09:74:46:82:82:12:30:c4:4d:2f:c2:ef:
b3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:03:54:C8:BE:D9:BE:BA:93:3E:49:47:6E:5F:EA:1D:B3:18:9C:F0
X509v3 Authority Key Identifier:
keyid:CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:3f:27:e9:29:b8:b6:00:f6:c4:03:e3:ec:24:26:5a:04:42:
e4:55:2e:b0:49:97:0d:3b:42:51:79:8d:2c:3d:9f:ae:09:20:
45:05:0c:87:42:7e:72:73:81:36:c5:69:25:e9:fc:07:b7:a9:
c7:3e:7b:f0:d6:54:d4:a4:00:26:5c:75:bd:84:b6:2d:17:4d:
96:74:1e:8f:9c:72:a1:45:cc:d4:50:ca:b6:11:59:fe:35:2c:
10:b6:71:5d:fe:02:b5:ad:e7:91:a8:17:6b:f7:fc:95:24:74:
3b:e5:a3:ff:53:22:0a:50:d6:f2:86:00:0c:0a:05:17:9f:6a:
d9:a0:d3:b5:bd:bd:2c:ac:f1:8b:b3:fe:dd:57:c8:b5:21:f5:
7f:ef:37:07:4e:d0:59:b6:af:d0:a2:19:04:bb:d9:41:c7:8e:
22:26:ee:45:f3:bb:e5:15:c6:4d:75:6f:64:e9:36:5f:9a:e4:
f8:af:6e:d8:46:c5:f0:46:c2:f8:24:09:0f:11:77:90:e9:ce:
89:86:c2:37:57:a5:f7:36:43:55:94:a1:88:49:08:42:00:6b:
fd:7b:9d:44:52:d1:6d:9d:1e:39:64:92:59:87:d1:4b:90:4c:
f5:36:5f:12:dc:a3:cd:82:ef:b9:7f:b2:58:4c:38:ef:23:5c:
ff:60:e6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:02 2025 by rpki-client