Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
File: _y3yl9sa8DdqWipy5pin6yh6868.mft (raw, json)
Hash identifier: 5c8hmHvIxZuBz6raf2wF1B/lSLSljlDyBih/0W9nU8U=
Subject key identifier: 9B:56:43:72:2E:EE:CD:0A:15:0B:F8:B9:2F:ED:48:3E:26:1D:3A:F2
Authority key identifier: FF:2D:F2:97:DB:1A:F0:37:6A:5A:2A:72:E6:98:A7:EB:28:7A:F3:AF
Certificate issuer: /CN=ff2df297db1af0376a5a2a72e698a7eb287af3af
Certificate serial: 0197B70E6C1F165258D7A07A99DF3C3C2E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
Manifest number: 0470
Signing time: Sat 28 Jun 2025 15:01:05 +0000
Manifest this update: Sat 28 Jun 2025 15:01:05 +0000
Manifest next update: Sun 29 Jun 2025 15:01:05 +0000
Files and hashes: 1: LatVmLe7_3HhJVu7rsLTHeovBKs.roa (hash: IGGEFB71BgJP92qEL3zGMAOiHYa+Of8dpxdn55D3Bac=)
2: _y3yl9sa8DdqWipy5pin6yh6868.crl (hash: SyFLIkw5GM3pHQJIoeiFrwCav5DyFu5MHuBN1osEvSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:6c:1f:16:52:58:d7:a0:7a:99:df:3c:3c:2e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff2df297db1af0376a5a2a72e698a7eb287af3af
Validity
Not Before: Jun 28 15:01:05 2025 GMT
Not After : Jun 29 15:01:05 2025 GMT
Subject: CN=9b5643722eeecd0a150bf8b92fed483e261d3af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ee:5b:fe:77:c7:37:a1:d4:9e:bb:8b:b0:0c:
34:ed:0d:ac:93:00:87:3c:5c:79:2a:09:07:99:37:
7a:ca:bd:08:f5:a7:4a:d2:80:9c:21:08:bf:43:d3:
6f:da:23:d9:be:9d:dc:5d:cb:b1:41:62:56:99:58:
83:81:34:9f:5e:ce:e0:23:90:ee:8b:40:15:0a:ad:
70:da:84:50:64:36:3c:fc:f4:be:62:e6:6e:90:f3:
cd:c1:0f:cb:9b:79:dd:d1:5e:0d:af:7b:9d:6b:38:
1d:3e:75:7c:74:ce:40:cf:b3:29:3f:61:1f:8c:ce:
1b:62:ff:35:48:a7:bc:c0:f3:a0:84:40:de:7e:0d:
63:ad:cd:f1:04:a0:4c:9a:2b:a5:8b:52:f1:fa:88:
9b:29:ab:a5:5c:67:91:35:18:20:f1:d0:bd:d5:95:
d6:33:3a:cc:60:c1:2e:7c:a2:bb:a9:20:a7:3f:92:
db:01:5a:1d:2f:5f:78:35:49:e6:9e:39:ac:cb:f1:
06:85:e9:ec:94:28:72:51:fe:68:39:c5:e0:7f:be:
89:d2:09:53:a1:4a:7f:37:f6:44:0e:47:ce:f3:8e:
94:30:d6:06:97:c4:40:fc:3d:0e:2b:5d:3e:83:36:
2a:1f:39:c2:80:5e:cb:cd:08:1a:a4:7f:b1:99:35:
e1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:56:43:72:2E:EE:CD:0A:15:0B:F8:B9:2F:ED:48:3E:26:1D:3A:F2
X509v3 Authority Key Identifier:
keyid:FF:2D:F2:97:DB:1A:F0:37:6A:5A:2A:72:E6:98:A7:EB:28:7A:F3:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:53:30:7c:de:59:3c:31:9a:6a:dd:e3:48:d5:71:9d:5c:34:
6f:8b:85:1b:97:05:79:5c:3b:b3:b6:c4:e6:1d:bc:0f:fb:67:
03:13:ba:73:0e:33:c3:a6:4f:79:b7:9a:24:56:6e:1a:34:70:
6b:11:6e:cd:29:6b:53:a6:de:eb:a8:28:1e:32:50:c7:af:ed:
49:74:54:65:75:58:39:b0:dc:16:22:06:31:2c:d0:6c:3a:a7:
f2:d5:5c:41:56:1b:68:ce:22:d1:54:96:e3:36:16:58:8b:71:
d1:57:5d:3e:37:7e:75:f6:ee:d5:2d:14:b4:33:35:5d:6e:5d:
7a:17:38:b6:4a:3a:99:a5:f0:a8:13:23:e8:ba:a9:6e:5b:65:
ae:3f:f7:c1:94:5e:e9:4c:7b:23:f9:bf:60:dd:d8:1b:02:e4:
c2:94:7b:56:24:91:1d:32:ed:d2:b2:10:0b:cd:a7:d1:9d:8e:
dc:e4:31:51:55:dc:12:61:b9:a3:d0:b6:92:41:8b:d3:14:22:
b2:fd:c0:a6:a1:80:1b:9e:db:24:28:ad:cf:02:c2:3b:f3:73:
76:76:3a:fb:c4:d8:6f:f2:ec:5e:e8:a2:a9:b9:a7:73:63:07:
2b:91:46:06:66:e5:84:bb:b5:76:a9:53:20:f8:f5:ab:63:37:
b1:9b:3d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:18:01 2025 by rpki-client