Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
File: y9dF6_zsOC3yUsL3UNtkj08DSr8.mft (raw, json)
Hash identifier: UBGsh8IMOwCFhUUTsQgTc/nxqdlXW+9buoMslD9SJ14=
Subject key identifier: 9A:9E:52:80:07:33:AC:C0:62:79:E5:D9:08:E6:55:CD:12:6F:15:63
Authority key identifier: CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
Certificate issuer: /CN=cbd745ebfcec382df252c2f750db648f4f034abf
Certificate serial: 0197B89030FECF8EF557122EEBB524A004D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
Manifest number: 0F39
Signing time: Sat 28 Jun 2025 22:02:26 +0000
Manifest this update: Sat 28 Jun 2025 22:02:26 +0000
Manifest next update: Sun 29 Jun 2025 22:02:26 +0000
Files and hashes: 1: wDvIF8IUEQhjnYm69O7DnmCZNJY.roa (hash: AHCZUkCpuvskw07HtMA8aALHO5a1ETyk504pdPIdAIc=)
2: y9dF6_zsOC3yUsL3UNtkj08DSr8.crl (hash: STHKREmsF621/yQqenZazOFNDeahqXZjKbCLAhRD/Jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:30:fe:cf:8e:f5:57:12:2e:eb:b5:24:a0:04:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd745ebfcec382df252c2f750db648f4f034abf
Validity
Not Before: Jun 28 22:02:26 2025 GMT
Not After : Jun 29 22:02:26 2025 GMT
Subject: CN=9a9e52800733acc06279e5d908e655cd126f1563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:54:87:bd:a5:ce:b2:6d:0a:e8:1c:27:b2:
76:14:c1:ab:44:38:8d:1e:a1:53:78:99:55:e0:a8:
d8:87:65:b1:5e:44:fe:92:11:c5:b9:16:a4:49:c3:
12:d7:10:a8:74:9d:b9:dd:df:74:84:41:d0:61:ba:
ac:58:4b:21:10:5f:f5:76:99:db:65:a7:c6:d4:99:
92:ff:4d:1d:42:e3:ed:0f:f3:54:dc:7a:63:7c:be:
38:03:96:02:1e:39:bd:5b:8d:79:2b:c7:97:9d:82:
a7:5c:b2:f6:05:87:a6:be:61:35:db:7a:f5:b4:b4:
de:cb:52:f8:8f:24:a2:41:87:26:46:a4:21:8c:df:
8c:2d:9b:68:62:97:96:8d:fb:6a:99:8f:49:c7:8f:
bb:e3:91:6f:e1:31:5e:0c:97:a2:c8:f8:4d:51:00:
1b:d5:0d:0c:63:4c:39:7a:b9:16:46:97:b7:83:bf:
ff:8d:63:04:52:a5:7e:a6:fd:48:ff:de:8e:2d:7d:
9a:7c:e5:70:74:2e:3f:c5:70:8c:1e:58:2e:7b:ca:
b4:c3:47:ed:6f:5f:8a:c9:1d:8a:e0:0b:f1:b9:0b:
5d:0c:a0:f6:fa:10:1d:1a:72:29:3f:73:3f:16:a6:
9d:f8:4c:1c:00:68:e3:d0:5d:59:d4:bb:d1:2e:a7:
e7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9E:52:80:07:33:AC:C0:62:79:E5:D9:08:E6:55:CD:12:6F:15:63
X509v3 Authority Key Identifier:
keyid:CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:1e:54:35:47:50:93:8e:6a:2e:40:5b:c8:2b:b0:5c:57:c3:
e5:7d:06:b9:e8:d6:39:a4:16:aa:56:24:77:60:18:d3:f1:34:
3e:da:0d:9c:41:24:2d:8e:1a:cd:ab:72:e2:7c:9d:39:ca:88:
44:4f:07:84:e9:13:d6:ba:15:1e:03:7c:8b:a3:21:62:0d:8b:
bb:55:36:bb:2d:a5:b8:81:e4:e0:28:21:88:1d:d9:71:43:c3:
2e:a0:88:7a:cf:fb:5d:09:7c:e6:c5:ea:a6:a9:de:6b:fc:68:
f9:a1:21:18:e6:cf:5c:e0:23:33:2c:2a:e2:94:4e:57:28:12:
01:cf:44:f8:3d:52:7a:50:30:1f:53:f9:4d:9c:d1:c0:f2:1a:
3e:ca:f4:97:98:35:ee:c7:71:d5:e7:70:99:37:92:62:d1:c9:
8a:e6:1a:10:eb:e8:fd:f5:2d:db:a0:20:ec:ed:51:03:44:a7:
a2:e7:87:e5:44:d9:66:93:13:ba:12:0a:04:61:1d:f9:4f:3a:
cf:0c:a7:f5:d9:ee:b8:a5:20:84:4c:28:9a:93:e4:c5:fc:70:
99:d0:a7:76:69:c2:5a:8e:17:89:28:da:91:73:62:2f:94:b7:
ca:f2:90:73:1b:9e:f0:9a:e2:b4:f3:05:d2:54:60:b9:47:1e:
2a:f3:f5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:17:22 2025 by rpki-client