Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
File: y9_aIe3gGO3_VJgRY1eoxhUux-8.mft (raw, json)
Hash identifier: 3WxJ6j5i815lQy+QpvzmAyTblfagi9mFq7mW1mUrmcg=
Subject key identifier: CA:71:B3:86:71:49:02:60:E8:88:E7:A9:5A:E4:02:37:CB:F2:E4:3B
Authority key identifier: CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
Certificate issuer: /CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Certificate serial: 0197B6A1009B47506E488DA28F80B599623F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
Manifest number: 0925
Signing time: Sat 28 Jun 2025 13:01:34 +0000
Manifest this update: Sat 28 Jun 2025 13:01:34 +0000
Manifest next update: Sun 29 Jun 2025 13:01:34 +0000
Files and hashes: 1: 9qNQB_i0eu4jjJmVJKka4rzSK5w.roa (hash: NblnquqC2LajKbqJk5Dgnmv5h35qFu2LGP00XRuQHvU=)
2: y9_aIe3gGO3_VJgRY1eoxhUux-8.crl (hash: aobLKroe7jsxUHz3HKI9OrVkGKj+4wjo0tBIRxqU7yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:00:9b:47:50:6e:48:8d:a2:8f:80:b5:99:62:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Validity
Not Before: Jun 28 13:01:34 2025 GMT
Not After : Jun 29 13:01:34 2025 GMT
Subject: CN=ca71b38671490260e888e7a95ae40237cbf2e43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:15:4c:4d:b0:74:d4:86:d9:2a:22:24:58:fd:
5b:57:ba:bb:e2:c6:b0:f8:42:1d:cd:f5:e1:da:d6:
75:df:73:67:04:27:e1:30:1d:ce:16:4c:c3:8f:3e:
78:9f:d0:47:74:26:97:73:67:67:7b:ef:9d:41:3f:
ae:dc:0e:91:f5:84:9b:5d:17:6f:ef:18:9f:6d:a2:
60:25:32:51:df:c6:7c:f0:1e:5f:07:46:25:f3:a9:
42:12:85:df:87:f3:65:55:1a:ca:81:e9:f7:a5:d3:
7e:0e:bd:49:b2:9f:b5:c0:e3:a3:cd:81:fa:90:25:
61:d7:f2:af:b1:66:75:b3:c7:e5:ae:77:b8:cd:c7:
3e:2d:ec:9e:5b:a1:6d:17:85:6c:29:be:3b:54:f4:
98:26:80:b8:68:a0:83:ac:c4:d5:0c:c8:ef:e0:9b:
46:04:9b:77:74:3e:b6:13:69:98:a0:ad:c5:b5:04:
90:23:e6:0b:fc:b4:ca:33:7a:f6:ce:9e:ca:64:6f:
70:29:b8:0e:34:b5:b6:69:3f:7c:e6:7b:60:dd:93:
7f:dd:85:c6:e8:9f:d4:d2:01:b7:e8:db:77:6d:ff:
e9:2b:1f:c5:0f:73:ab:32:b5:ea:37:79:89:57:a0:
02:ba:86:12:ae:aa:2b:39:f8:fb:20:5b:30:23:56:
27:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:71:B3:86:71:49:02:60:E8:88:E7:A9:5A:E4:02:37:CB:F2:E4:3B
X509v3 Authority Key Identifier:
keyid:CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:94:c4:6e:67:86:b7:90:6c:71:d0:08:4f:c5:c1:83:84:42:
49:73:b8:6c:d0:70:4a:9f:2e:0a:13:fa:ca:ce:0e:07:19:9f:
aa:d9:15:b0:37:60:ef:fb:7e:36:e4:9f:5e:72:f7:e7:65:8a:
e2:45:97:4c:2f:68:ab:77:86:3f:7a:7b:d3:7f:b1:b3:da:d2:
cb:a0:7c:8c:aa:e6:44:f3:fc:49:ec:ad:bb:c4:e8:94:bf:cb:
e5:2f:e6:36:5f:9b:ee:a3:f1:fe:9f:78:34:81:c1:cd:0b:69:
e9:7f:6e:aa:26:f6:dd:d3:4b:5a:9e:cd:95:ca:be:97:08:b7:
69:02:0a:ab:3c:aa:32:ed:39:fc:2c:5b:3a:20:12:40:91:39:
3f:40:61:33:a3:2e:84:a0:dd:fb:15:ce:66:37:f0:22:1f:76:
d0:b4:76:24:9f:65:6f:f1:49:8f:e3:65:90:1c:e5:7d:e9:c4:
12:92:03:fe:09:a3:06:6e:83:bd:74:85:ab:58:07:8b:bf:30:
59:66:44:90:e6:b8:21:ef:c2:5b:1d:50:62:d4:8e:1a:6c:c1:
88:af:3c:29:c0:61:8b:99:bf:69:ca:c6:e8:46:40:ae:72:ac:
ea:6e:70:cd:6c:5d:99:9f:b4:16:67:c7:fd:bd:62:6d:4c:40:
d1:c2:dc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:44 2025 by rpki-client