Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
File: Ymd-4I9LshmAS2czR8OgtqMy1yI.mft (raw, json)
Hash identifier: 7UV7oADeZVcvTfMQs4NJo7LONrglMwOEAWicFeVFOq4=
Subject key identifier: 53:08:5F:2D:FA:AD:60:9F:3B:A4:5E:23:3E:E5:1D:A7:E9:6A:3D:FB
Authority key identifier: 62:67:7E:E0:8F:4B:B2:19:80:4B:67:33:47:C3:A0:B6:A3:32:D7:22
Certificate issuer: /CN=62677ee08f4bb219804b673347c3a0b6a332d722
Certificate serial: 0197B77CDC671F751CE464C82CED051C9676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
Manifest number: 0573
Signing time: Sat 28 Jun 2025 17:01:42 +0000
Manifest this update: Sat 28 Jun 2025 17:01:42 +0000
Manifest next update: Sun 29 Jun 2025 17:01:42 +0000
Files and hashes: 1: Ymd-4I9LshmAS2czR8OgtqMy1yI.crl (hash: unzakZUMZeKS2Hk2Oo8oiOipX5/f3VYt1/+BlziL1T0=)
2: gQ1Mk4Ko4bazOy7pZDxAv9B_6qk.roa (hash: FoB5dUGf24mZ9gRXtihHS6AK0Gj+K7gCvGHMZywvDao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:dc:67:1f:75:1c:e4:64:c8:2c:ed:05:1c:96:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62677ee08f4bb219804b673347c3a0b6a332d722
Validity
Not Before: Jun 28 17:01:42 2025 GMT
Not After : Jun 29 17:01:42 2025 GMT
Subject: CN=53085f2dfaad609f3ba45e233ee51da7e96a3dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2b:a7:8a:fe:aa:11:31:30:ae:94:6a:82:19:
e1:c7:06:2f:1c:3e:2e:05:20:c4:f8:a7:44:d4:ac:
cf:2b:66:29:e7:7c:cb:06:80:bc:3d:57:c0:7d:14:
29:a1:4f:9e:b6:53:88:e1:52:a4:cf:7f:f6:17:55:
c7:c4:55:5e:d0:03:ae:df:2b:f2:b0:0a:be:45:9d:
a4:01:fd:ae:96:49:5f:69:0b:41:70:25:04:00:88:
e5:23:71:7c:aa:f0:ce:bb:fb:3d:3d:31:db:83:31:
61:9e:9d:7b:3f:83:c3:9f:d9:ad:e9:95:1b:e7:47:
f1:65:2a:19:92:e9:1f:2c:e1:c7:98:db:35:1a:a4:
b8:40:2a:f1:95:b2:e3:7a:2b:63:4c:18:b5:b0:67:
89:2a:63:0b:2d:b1:53:1e:9b:1c:e7:97:d6:ac:fc:
5a:25:f9:f6:fe:32:a4:d7:f1:e8:65:7f:5a:d4:c1:
66:ef:1e:e8:3f:1b:b0:7a:e3:28:f7:78:85:1d:68:
03:c8:f6:ca:9e:08:3a:51:8d:c3:fc:d3:a0:1f:4a:
8c:ad:b8:40:62:3d:00:48:44:b9:22:83:22:a2:e5:
94:7a:94:b3:42:20:bc:43:c3:a6:9e:60:1e:29:fa:
16:96:f0:3c:c6:fd:63:ac:05:d9:e0:5e:0f:4c:19:
e8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:08:5F:2D:FA:AD:60:9F:3B:A4:5E:23:3E:E5:1D:A7:E9:6A:3D:FB
X509v3 Authority Key Identifier:
keyid:62:67:7E:E0:8F:4B:B2:19:80:4B:67:33:47:C3:A0:B6:A3:32:D7:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:93:fd:bb:7d:b9:4f:e6:48:97:fe:d8:3a:4b:9e:b6:c9:33:
ea:72:ad:96:ed:6a:ec:ce:27:ba:b4:c2:4c:bb:f9:62:33:dc:
fc:bd:34:59:f0:08:0d:e0:c5:0f:17:34:34:42:64:cc:cd:bf:
7f:e2:b0:0a:f9:9d:dd:5f:e7:29:3a:9d:25:03:0d:f7:c5:a5:
67:6f:55:e0:82:c4:d9:22:81:26:23:e7:f4:89:7a:05:31:4a:
4e:8f:2c:92:37:80:3a:75:22:50:8e:c6:d3:d8:80:9e:e5:ea:
6c:49:02:e7:d6:7f:2c:6a:de:c6:ff:e4:e9:00:bc:a5:37:5f:
c5:9a:39:3e:1e:1b:f5:be:52:0f:4e:d4:0d:fc:ef:33:13:30:
c2:33:af:30:3a:f9:59:f7:b5:13:31:f9:c0:bf:18:da:82:f0:
55:ab:a3:1d:41:5e:1a:16:50:df:50:de:80:b5:c5:ff:43:65:
24:ae:f3:0a:46:58:4c:95:c7:93:99:21:b7:3c:41:10:03:ac:
60:11:f4:9e:de:8b:e4:5c:e9:95:52:58:2a:ca:6b:5f:24:0d:
e9:ca:d5:37:05:1b:7a:31:83:16:43:54:30:b9:ab:16:64:26:
51:bc:8a:b9:10:53:14:0b:55:0f:5d:99:42:51:ee:22:98:e4:
59:e2:42:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:53 2025 by rpki-client