Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
File: mfCyyNezyhPFnFM3LyXiAsharcU.mft (raw, json)
Hash identifier: iGN/8ij6GQrglCrYvP4S3unGVjrCi7uahpD5BMeTln8=
Subject key identifier: 6E:F3:61:EA:99:EC:81:8E:3E:92:6F:9E:3C:D0:0F:E6:3F:AB:3D:E3
Authority key identifier: 99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5
Certificate issuer: /CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5
Certificate serial: 0197B6A2090A00434214005BB1BD3C35E1A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
Manifest number: 08BA
Signing time: Sat 28 Jun 2025 13:02:41 +0000
Manifest this update: Sat 28 Jun 2025 13:02:41 +0000
Manifest next update: Sun 29 Jun 2025 13:02:41 +0000
Files and hashes: 1: mfCyyNezyhPFnFM3LyXiAsharcU.crl (hash: TYz8D+W0xHML1jufTCpq8rZRE5Ej1p3FQgc/dwonyz4=)
2: oVf5pbd8qfOWaMtymVg3zBpo1aI.roa (hash: /JkkHPoUwL9WPqaL9lMZRl9hvH2fpXEuWKNlqu6l9cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:09:0a:00:43:42:14:00:5b:b1:bd:3c:35:e1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5
Validity
Not Before: Jun 28 13:02:41 2025 GMT
Not After : Jun 29 13:02:41 2025 GMT
Subject: CN=6ef361ea99ec818e3e926f9e3cd00fe63fab3de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:15:ca:0c:47:4c:34:12:04:71:1d:cb:55:4d:
62:ae:b2:b0:2f:9f:5d:05:e1:00:2d:d7:43:e7:10:
9a:f3:b4:77:42:40:08:c3:47:10:72:a0:ec:6a:2f:
21:c7:1a:1b:4b:4f:f4:93:b7:2b:6f:1d:d2:67:73:
38:ed:e0:73:43:24:69:10:e9:22:d5:f5:ae:79:d6:
d4:5d:98:9e:66:d0:79:43:aa:4a:18:1e:09:75:3e:
e8:2a:28:0b:61:80:02:96:53:10:af:90:dc:b4:6f:
22:07:6d:af:49:46:e9:67:26:e3:9b:ce:1f:6f:15:
0a:84:a8:c2:a4:ca:74:a7:92:2a:96:f8:0a:4e:96:
f6:c0:ba:7b:0d:5d:5b:83:e6:62:40:94:05:55:30:
3b:b8:06:ee:a9:28:35:9d:22:24:fb:b7:6e:d1:36:
25:eb:f2:27:ec:3c:aa:c5:7d:21:88:3a:88:f7:3f:
9a:01:b9:49:fc:a8:bc:2a:18:3f:0f:57:a6:ac:d4:
1f:b3:ce:51:60:09:51:61:c1:bf:2e:55:f3:69:82:
7a:25:ff:e3:6b:7d:4c:a5:b2:a6:57:6d:c7:2d:be:
6d:ad:79:56:72:ee:91:2d:f8:2d:df:de:de:38:9e:
5d:64:1b:9e:86:39:17:7a:f0:4f:ac:90:6f:8b:ef:
f0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F3:61:EA:99:EC:81:8E:3E:92:6F:9E:3C:D0:0F:E6:3F:AB:3D:E3
X509v3 Authority Key Identifier:
keyid:99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:46:7d:2b:15:54:bf:51:f7:18:dd:97:27:2f:c7:3c:ef:56:
91:df:6f:be:19:d1:d1:43:2a:fc:46:1b:d4:3b:31:ae:37:16:
55:73:61:2f:ad:e2:12:47:ee:54:a8:d2:0e:a8:c6:42:21:0e:
76:f7:53:8b:94:67:0b:7c:34:d5:17:0e:94:74:7b:86:8b:48:
29:3e:70:7e:90:f9:82:ea:70:4b:30:64:f7:e6:44:cc:95:60:
9d:fb:c6:ec:b8:60:aa:6c:a6:90:02:98:80:b5:24:c3:6e:74:
e8:40:24:5f:b6:c2:89:a8:fe:7f:0a:6b:0b:82:09:c6:5b:eb:
0d:bc:a5:d5:d4:56:b3:4e:8b:38:24:19:00:5e:3b:c5:20:37:
38:b1:a9:23:0f:44:27:22:a5:ee:52:86:65:5d:5b:90:72:50:
99:e2:c7:d1:6e:d8:9a:40:cf:8e:18:67:d1:89:e8:b8:fa:7e:
85:0a:50:d8:c7:c0:4a:a1:07:6c:b0:0a:50:4c:08:8f:25:31:
2f:65:3d:40:6b:8a:d7:d3:d2:0b:82:8a:f9:55:7b:76:60:03:
ef:28:22:a2:d5:6c:90:16:75:04:58:d6:44:c7:09:e6:ff:83:
d4:a3:4f:0d:ec:c0:d1:cc:a3:12:0b:1e:d8:eb:4a:b4:a2:4c:
88:90:df:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:58 2025 by rpki-client