Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
File: dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft (raw, json)
Hash identifier: 8ey+rOYGVHMeF/oBwsEawO0Rq7hgncodb325YCyuV9c=
Subject key identifier: 3A:8A:DE:75:75:98:0B:28:41:0E:44:26:CB:8F:37:78:10:49:2F:E8
Authority key identifier: 75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC
Certificate issuer: /CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc
Certificate serial: 0197B6A05CE5FB115E26E0317B80FB761D95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 13:00:52 +0000
Manifest this update: Sat 28 Jun 2025 13:00:52 +0000
Manifest next update: Sun 29 Jun 2025 13:00:52 +0000
Files and hashes: 1: PKUF3H4nGREVMJD2dPtsZCb0xVA.roa (hash: bRtt/6wvb5BpNmugIhLVhjBbUyT5JnZDmpL0RvuD7vw=)
2: dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl (hash: erCqP2iOqfLeGbtGg4P2gzlO8/lJp5EddCDL5IgkyN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:5c:e5:fb:11:5e:26:e0:31:7b:80:fb:76:1d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc
Validity
Not Before: Jun 28 13:00:52 2025 GMT
Not After : Jun 29 13:00:52 2025 GMT
Subject: CN=3a8ade7575980b28410e4426cb8f377810492fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:94:32:54:4d:87:ab:ab:d1:ee:56:30:6c:52:
af:3e:47:6d:e6:26:87:6c:ff:1d:aa:13:25:ba:f6:
c4:85:22:ac:ee:43:4f:b7:83:3f:47:bb:e2:fe:a2:
36:a8:3c:f3:78:05:da:07:13:bd:cd:77:85:6f:8b:
43:c0:83:1c:66:90:9e:d6:b8:e5:f0:55:89:ba:97:
97:13:b9:05:3f:54:18:43:dc:24:39:da:5e:07:e1:
3d:54:7c:a3:86:7f:a7:83:06:81:b4:48:28:6d:81:
30:28:6a:6f:8e:cc:69:48:0b:79:13:f6:10:0b:cc:
e2:e6:21:29:c7:d3:c0:58:c8:da:80:05:fd:53:f1:
9e:83:bf:a8:23:84:fb:76:7e:0e:87:f6:20:06:ec:
e3:a1:5e:c7:2f:68:b5:6d:ac:2f:7d:17:8f:d9:92:
52:37:a6:15:2a:93:d3:f9:2d:93:14:41:a7:70:b1:
60:f4:b0:e1:d9:b6:77:55:3d:48:0d:73:b3:fe:85:
fb:c4:95:ab:5d:d3:2a:54:96:50:18:31:86:5f:eb:
c2:d9:0c:98:3e:9c:a6:50:b1:92:16:f0:06:ce:b6:
64:4b:08:5a:23:3c:b5:10:89:1e:ee:03:aa:33:3d:
ce:88:00:7c:1b:45:24:5b:c0:46:78:51:6e:3c:fa:
a7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8A:DE:75:75:98:0B:28:41:0E:44:26:CB:8F:37:78:10:49:2F:E8
X509v3 Authority Key Identifier:
keyid:75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:fc:b9:6b:01:76:03:93:87:f6:68:2c:ea:b4:33:eb:c4:37:
74:83:ae:f7:ab:28:19:f2:e5:31:5c:b5:7b:88:50:39:e6:17:
45:b4:07:14:91:fa:54:d5:88:3c:68:cc:c4:5f:fd:4f:fe:34:
59:b9:db:3e:43:dd:06:ca:0b:a3:7d:a4:28:1e:f7:4b:54:9a:
c5:2a:07:08:47:53:9b:1e:ed:b9:1c:4f:ae:30:7b:01:60:4d:
a1:22:e1:d2:59:9b:c5:fd:12:af:86:0d:33:f6:b4:a0:7e:ba:
7c:58:de:59:05:5b:95:41:72:73:eb:b4:e4:81:ff:56:5c:2a:
eb:58:c3:ba:3e:d4:1c:94:f3:14:64:0c:a4:91:64:df:97:52:
2b:63:18:b1:92:87:e5:07:c0:1c:2a:8b:0f:98:88:5e:63:9a:
5a:a9:a8:bb:3c:81:1f:a5:ab:fe:6f:91:0b:cf:75:bd:3e:f2:
1d:18:a7:15:cc:8b:1c:65:0a:42:c5:e6:c0:22:53:6d:8d:86:
b9:f0:43:3e:36:ce:73:42:09:58:4f:2d:79:43:d6:15:3d:97:
1a:d7:95:47:3f:f5:43:5a:59:b4:a7:d3:ba:e9:e9:a9:ff:0c:
ec:cd:a9:b9:88:bc:1a:5b:5e:e9:46:2a:90:45:1a:50:8c:76:
2e:3f:21:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:17:12 2025 by rpki-client