Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
File: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json)
Hash identifier: rz8Bh1aCdLK17oBN6FiUU+0uz1H3GNHvXtWNVkZhwcQ=
Subject key identifier: A1:31:CD:75:50:E2:6C:E5:FB:9A:C7:5B:88:C7:C3:AF:79:25:AC:16
Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Certificate serial: 0197B8C603193D9DD349943A2C33BF4DC5AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
Manifest number: 0C3A
Signing time: Sat 28 Jun 2025 23:01:14 +0000
Manifest this update: Sat 28 Jun 2025 23:01:14 +0000
Manifest next update: Sun 29 Jun 2025 23:01:14 +0000
Files and hashes: 1: 1c8AtbAMfHlASe1nRmNmVLi-IPE.roa (hash: Yc6B/ACFRjBHZdeDucnbU591dd3oO9WG4VeSfIdJAWg=)
2: B-YGSnw6mlzmsy9e1WdnYiYl8uA.roa (hash: dqAKP/dgHYPVRyqQIAqMlRLtWiN+IpM+mjudxWdaulM=)
3: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: +f5ni9+uTijeprSDbGSIePFOqgdE93nBaEMpcWnplAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c6:03:19:3d:9d:d3:49:94:3a:2c:33:bf:4d:c5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Validity
Not Before: Jun 28 23:01:14 2025 GMT
Not After : Jun 29 23:01:14 2025 GMT
Subject: CN=a131cd7550e26ce5fb9ac75b88c7c3af7925ac16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:07:81:bf:26:87:09:c9:dc:52:a1:74:a8:c2:
53:83:b5:f6:6c:ee:c4:c1:8a:9b:2b:94:d9:59:8e:
82:4c:c6:7b:17:a5:0a:11:6d:9c:0a:c2:02:32:5b:
5e:1e:e2:9a:04:57:af:e7:97:ed:64:9e:4d:d5:78:
99:6c:84:44:a6:64:56:21:98:da:72:a8:83:8d:f1:
7e:f6:83:a3:69:e2:1c:fe:dc:98:24:c2:d2:3a:b2:
2e:23:7a:59:bb:82:10:5e:03:5a:c7:63:04:19:15:
e8:d4:1d:a7:4b:5c:9a:2c:39:40:e0:2c:c5:fd:c7:
a3:17:32:c4:72:9a:6b:a3:da:f9:41:a9:c3:be:49:
b8:1d:5a:ab:d0:b0:a9:e0:b8:6b:50:77:e5:ee:ed:
f3:98:e4:f7:b9:5d:b1:19:28:a3:17:bf:e9:02:8a:
bd:66:c1:6b:d1:14:16:f4:0d:f7:71:52:05:ed:23:
5a:29:3b:3e:b7:ef:07:00:c5:71:38:28:57:8d:4c:
de:78:3d:03:dc:eb:81:f1:0b:24:12:39:7d:87:23:
d9:67:8d:4b:cd:79:65:24:99:97:ef:de:f3:ab:4c:
62:7b:2d:21:7c:77:ae:01:07:fd:5d:93:69:3c:b0:
00:70:97:1a:68:b4:ff:b0:26:f5:bf:84:0a:33:1c:
90:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:31:CD:75:50:E2:6C:E5:FB:9A:C7:5B:88:C7:C3:AF:79:25:AC:16
X509v3 Authority Key Identifier:
keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:be:6a:d6:d9:7b:73:e7:8c:5f:fc:9c:69:58:76:cd:44:48:
83:59:0c:26:24:6e:bf:3d:a0:3c:bc:13:d4:09:3e:0d:9b:47:
f7:2f:6d:6f:b4:b8:45:70:ba:56:2e:ff:60:22:8c:4e:0f:bb:
3e:1f:9a:cb:c8:df:b7:e0:f3:a8:09:e4:4c:d1:22:cd:bd:d5:
e9:50:8a:84:7f:61:7d:a6:db:4a:ae:3b:c4:a8:41:2b:ce:61:
d7:8c:90:e6:8b:f4:15:1f:6f:4f:44:26:ab:09:6a:b3:45:a0:
4c:ea:48:f9:94:2e:25:39:8a:f8:b9:3b:f1:dd:7b:2d:fa:2c:
d5:ca:b1:29:27:4b:e7:ee:24:8b:c2:4b:dc:85:7e:3f:c0:e9:
e6:4e:22:90:37:58:7a:3a:4e:fc:e2:25:ca:74:33:41:69:55:
7d:3d:f5:4e:76:3e:90:34:71:fe:d9:a5:74:8b:5d:a3:1d:ae:
d2:00:d9:03:9c:98:33:7b:1e:71:99:32:69:cf:59:da:32:88:
52:52:57:35:5a:86:5a:c8:91:c7:8f:03:45:5a:6e:8e:a2:e5:
02:28:97:32:ec:a9:3f:14:ac:18:4a:29:c3:82:66:ae:b6:70:
e1:9b:59:5b:a6:3e:37:25:2b:af:cf:0e:d9:fe:af:53:1e:71:
b9:f1:d5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:10:39 2025 by rpki-client