Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
File: rvy2RB1w0usQ12M9pzGaPT_5d64.mft (raw, json)
Hash identifier: LY6F9wxrlede80gQpy3/jqIIJh0mECUemGK51ejVxCw=
Subject key identifier: 37:0C:73:37:03:86:09:F1:D4:BF:12:5A:75:19:26:7D:5E:ED:A6:3B
Authority key identifier: AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE
Certificate issuer: /CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae
Certificate serial: 0197B933E38A2EC3E106893A5A78E83CA216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
Manifest number: 062D
Signing time: Sun 29 Jun 2025 01:01:14 +0000
Manifest this update: Sun 29 Jun 2025 01:01:14 +0000
Manifest next update: Mon 30 Jun 2025 01:01:14 +0000
Files and hashes: 1: OywOw90-BmuDTm7-vAr4oYdaiWc.roa (hash: 8bINvDgAJsHgmIljWuh30WywbwSEgdwt4RUZy9xG14w=)
2: rvy2RB1w0usQ12M9pzGaPT_5d64.crl (hash: 5BUWqd/EfE/xhQVFqH6ah+fwhRHMasA4+YeF18OLBh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:e3:8a:2e:c3:e1:06:89:3a:5a:78:e8:3c:a2:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae
Validity
Not Before: Jun 29 01:01:14 2025 GMT
Not After : Jun 30 01:01:14 2025 GMT
Subject: CN=370c7337038609f1d4bf125a7519267d5eeda63b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b8:d4:08:7b:b2:7a:a7:d2:9d:fb:c7:60:44:
80:df:ad:60:55:a7:d2:3d:82:ff:85:b6:25:f3:21:
cb:69:5e:f2:51:62:02:07:be:2c:ac:44:d0:bc:de:
3b:bb:57:6b:51:23:d3:20:1a:c9:7c:27:1c:cd:20:
b4:a9:69:88:c5:81:7c:63:a3:79:58:d4:8c:86:19:
92:43:3e:8b:9d:7e:7f:a3:8b:93:16:1b:7e:82:9e:
96:58:0d:69:78:62:4f:72:82:9f:03:3f:84:8b:06:
cc:97:52:4c:a5:7c:11:f2:d4:93:ac:f3:79:7f:0b:
10:31:2d:fb:eb:c6:b4:f7:4c:4d:0b:c2:db:83:5f:
2f:52:6f:a7:93:49:f6:4f:28:57:2d:4d:bd:0d:12:
26:79:17:45:35:26:4e:97:64:8e:0b:de:95:56:74:
cb:07:04:6c:a4:0f:0a:35:23:a2:23:8d:c5:cf:57:
6f:61:bb:42:08:9e:8e:f6:0a:52:98:3c:4e:59:5b:
96:41:4e:4b:4f:55:9e:af:96:b1:ee:05:2b:e6:dd:
38:5a:70:74:a0:64:91:af:80:c1:ad:fb:09:f7:7e:
e7:c2:a6:3e:48:1d:d7:17:83:b6:cb:c1:18:4d:aa:
2a:bc:d8:2e:17:99:34:28:1d:60:cc:40:9f:b5:3b:
78:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0C:73:37:03:86:09:F1:D4:BF:12:5A:75:19:26:7D:5E:ED:A6:3B
X509v3 Authority Key Identifier:
keyid:AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:7e:78:0a:58:7e:45:15:9e:ef:c0:0a:83:0b:cc:93:a9:a3:
ba:6d:3c:7f:59:a6:65:41:68:d7:5b:eb:f4:f3:20:e6:75:3f:
e3:19:4a:f2:7b:a8:f8:5b:02:8c:ec:70:69:81:b3:92:e3:b5:
ff:08:5e:d7:74:5b:e1:18:ad:63:15:dd:9c:81:70:53:cd:1a:
69:ef:2e:e8:48:65:2d:31:b1:0d:4f:2c:1f:0e:88:b8:b0:74:
07:94:8b:04:0d:54:85:a3:1d:8e:48:0a:2b:7d:c3:bf:12:b4:
1b:53:11:6d:8f:3d:8a:cc:20:71:fd:dd:73:42:3a:23:7a:c6:
ad:8d:7e:86:6c:6d:62:cd:c4:6b:a9:a0:fd:1a:ea:32:54:8c:
9d:37:fb:c1:90:70:06:dd:2e:07:05:ca:96:51:6a:98:eb:0c:
79:f8:90:9c:53:de:bc:61:62:7d:7c:ca:8f:cf:2e:78:1e:e0:
ff:43:79:17:80:b0:10:89:9a:56:69:91:4b:16:c0:64:5b:6f:
8a:d0:38:6d:17:c7:44:38:92:0d:5d:00:42:8b:d8:fb:32:94:
9e:fc:00:56:c1:59:89:4f:ba:44:0a:57:7f:7f:86:12:ba:94:
ec:10:f4:62:a3:8e:01:a1:db:a1:f9:a1:7b:43:1a:d5:a4:7f:
00:f9:f9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:07:41 2025 by rpki-client