Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
File: cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft (raw, json)
Hash identifier: w5GGZfpdQ9+ARj1NCul4lId2Dfg9sJIITeDshzZA9E4=
Subject key identifier: 4D:FF:00:9B:12:2B:87:65:93:77:9E:F9:E1:64:44:72:D8:7D:B1:A6
Authority key identifier: 71:86:E6:4B:58:23:C4:C6:12:87:85:8D:97:70:C7:0D:F7:06:B0:CC
Certificate issuer: /CN=7186e64b5823c4c61287858d9770c70df706b0cc
Certificate serial: 0197B77C203DE9DF661EC6D1464FE4A4C653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 17:00:54 +0000
Manifest this update: Sat 28 Jun 2025 17:00:54 +0000
Manifest next update: Sun 29 Jun 2025 17:00:54 +0000
Files and hashes: 1: b88Rl7W3m-ZgN433QwmekbZFP6o.roa (hash: NoA21W8ly2WxwAuP2zZWwmclSVAV10KXOOvNxpP+/rg=)
2: cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl (hash: ltvBnW3k+dI9eMeI6r85NzkQEaMtNnQl/OWfdBLwTig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:20:3d:e9:df:66:1e:c6:d1:46:4f:e4:a4:c6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7186e64b5823c4c61287858d9770c70df706b0cc
Validity
Not Before: Jun 28 17:00:54 2025 GMT
Not After : Jun 29 17:00:54 2025 GMT
Subject: CN=4dff009b122b876593779ef9e1644472d87db1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:05:4c:9c:81:43:3d:48:27:08:df:9d:d8:45:
d1:df:46:fa:46:6b:b4:18:05:f0:30:d9:24:c3:0e:
02:70:3a:fa:58:7e:6a:c9:0d:82:b9:27:36:58:0f:
59:a1:76:6d:61:91:c1:96:58:57:2a:71:78:b9:14:
57:87:c2:f0:05:c5:f7:31:8b:a0:ea:ca:c0:ed:6c:
2c:b7:ee:1e:39:ad:82:2f:ca:dd:a8:0d:b9:96:e2:
a0:2a:92:29:9f:06:8a:a6:47:5b:a2:64:eb:58:2a:
3c:0f:6a:91:57:65:f2:b1:d3:8a:e1:c6:f7:9f:37:
02:dd:4c:7e:b6:be:42:c1:77:85:2e:c7:f4:6c:ce:
68:85:06:ee:c0:f1:ce:4f:b6:d3:c8:7a:7d:11:f8:
df:63:1b:3f:48:1f:2c:5c:2e:8a:df:81:db:9f:70:
3c:54:f0:ca:ec:61:49:9d:63:0c:a9:5b:5f:2b:dc:
89:f3:45:8c:f8:10:dd:f6:88:ae:14:af:68:53:d3:
59:05:0a:a7:10:17:e1:b9:52:9e:ad:bf:56:43:35:
69:fb:b3:8f:3c:a0:b7:1e:b2:ac:8e:75:1f:b2:e9:
d5:ef:f6:c5:59:9a:fb:e9:ce:d1:af:1d:0b:ec:a8:
0c:73:ba:ab:07:ec:41:de:1f:1c:58:8a:36:31:55:
f7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FF:00:9B:12:2B:87:65:93:77:9E:F9:E1:64:44:72:D8:7D:B1:A6
X509v3 Authority Key Identifier:
keyid:71:86:E6:4B:58:23:C4:C6:12:87:85:8D:97:70:C7:0D:F7:06:B0:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:39:51:ed:fb:50:7f:e1:6d:98:cd:7b:4e:02:e2:ce:ed:de:
73:d2:bc:52:16:21:5c:55:12:ee:49:f7:1d:49:32:84:7b:12:
99:79:ba:e3:9e:d5:9b:e4:76:79:f4:54:0a:19:f9:c4:ba:42:
0c:1e:fc:21:ce:07:da:20:f3:b6:48:0f:d0:4d:c4:7e:28:28:
e9:a2:07:33:11:4f:4a:13:d6:04:4e:23:ca:76:6c:c3:9b:0e:
0b:01:54:74:6c:6b:a0:51:b8:34:07:63:fc:b5:13:1b:eb:d9:
3a:ba:8d:4f:0e:e5:c4:86:e1:a3:64:91:82:86:b5:2f:4a:21:
94:bf:79:44:fd:e0:6c:57:7b:ca:64:d4:ae:86:8d:c8:70:df:
6f:0f:cb:3d:9b:73:9b:84:f1:37:92:9e:fb:3d:90:3b:15:c9:
0f:0b:5b:e2:41:b4:b4:1e:1c:8b:26:3c:6c:03:7e:52:4f:52:
0a:de:d9:43:57:e6:75:66:63:b3:e9:5c:ee:1f:27:c1:97:8d:
cc:bd:46:06:6c:68:ff:7a:47:81:cc:f9:83:51:05:23:f6:d2:
db:f8:05:49:74:29:1c:06:85:de:7a:db:73:a7:f4:30:cf:dc:
6c:be:cc:93:2b:21:87:fa:76:19:22:cf:82:1e:81:63:d9:47:
12:5c:a1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:14 2025 by rpki-client