Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
File: Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft (raw, json)
Hash identifier: 0+PGqH4zwv2Duj9GCtXNu1NrCAAtR2/UAHQE4ZiW/YE=
Subject key identifier: 1A:0F:E5:EE:36:13:6A:DB:6F:57:53:19:1C:71:3D:48:C5:3E:C6:4F
Authority key identifier: 63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90
Certificate issuer: /CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890
Certificate serial: 0197B9A196ED504AA0D9EF98996E4BCE5B02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
Manifest number: 0B99
Signing time: Sun 29 Jun 2025 03:01:04 +0000
Manifest this update: Sun 29 Jun 2025 03:01:04 +0000
Manifest next update: Mon 30 Jun 2025 03:01:04 +0000
Files and hashes: 1: 2ATvNbnGawNlZZ5eknfDSbXFIzQ.roa (hash: tXSd9lU5fCgD64Z/fTQv/A1ZJJrB3ZcLdqsIZET5sKI=)
2: Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl (hash: Psam/cm13w6kA9nBipAYrGwnvm2YoXM3S3IHVLhK9Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:96:ed:50:4a:a0:d9:ef:98:99:6e:4b:ce:5b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890
Validity
Not Before: Jun 29 03:01:04 2025 GMT
Not After : Jun 30 03:01:04 2025 GMT
Subject: CN=1a0fe5ee36136adb6f5753191c713d48c53ec64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:76:af:cc:19:4f:d4:08:47:4c:69:cf:b5:11:
da:60:dc:77:4b:1c:56:c7:e3:00:ab:ae:c8:7b:8a:
4d:66:83:9b:55:08:f4:d3:ab:57:bc:d5:f4:30:ed:
c3:9b:b4:d0:fe:f9:78:a6:27:8a:75:f6:1d:ee:17:
9b:a0:35:e9:b0:fa:0f:26:5a:dd:c2:a2:f4:d7:c2:
5d:31:34:9f:11:cf:4e:38:94:63:18:8e:5c:42:4b:
79:43:31:8b:4e:75:98:c4:fb:de:12:fc:b2:64:62:
e5:f5:2e:60:4b:52:4b:00:50:d1:99:24:3b:f9:b8:
fc:27:b9:46:83:16:be:c7:15:c2:37:83:3d:21:7d:
64:72:6d:08:7e:62:02:eb:a0:60:b8:b7:34:45:a3:
8c:2c:13:10:d9:4d:e2:2b:89:bb:f3:62:88:30:d8:
c0:c9:5c:2d:12:07:85:31:3a:63:a9:56:8d:f5:67:
c3:0a:53:49:88:00:61:1e:59:79:25:a3:fc:50:5d:
8c:a4:c0:6e:59:67:32:b7:28:19:0a:29:37:16:a2:
c6:60:e0:7a:cf:53:03:82:3a:d8:4f:b2:24:aa:d5:
1a:02:bb:da:61:d6:35:1c:75:b2:14:f8:3c:d9:c2:
ef:e5:8b:84:98:fc:4c:8c:04:5a:09:0f:34:93:36:
65:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0F:E5:EE:36:13:6A:DB:6F:57:53:19:1C:71:3D:48:C5:3E:C6:4F
X509v3 Authority Key Identifier:
keyid:63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:21:1e:87:95:35:53:c0:8d:bb:ff:40:d2:6a:b6:4c:d2:0e:
89:3e:e5:e2:8d:6a:8a:81:41:cf:87:fe:8e:23:07:58:44:b4:
ea:b9:6c:9a:e8:cd:fb:7d:db:87:f3:18:3f:a9:1b:49:60:60:
b6:87:c8:bb:96:87:af:ba:40:05:4b:93:3d:da:d3:63:9d:c8:
3d:80:e2:ed:5d:4b:82:e9:02:fc:3d:8c:8f:61:19:0a:cf:03:
ce:dc:f2:cc:d3:c4:40:a1:f3:bb:08:ef:12:65:a4:d4:bb:3f:
55:0b:3a:90:5f:05:51:06:9b:1e:53:71:d5:9c:01:8d:a9:ea:
37:16:cc:72:9e:af:1e:36:c4:02:d1:5c:0b:1d:62:c3:29:6e:
43:19:44:9c:c2:c8:04:73:4f:b6:f0:0f:36:53:50:52:a6:74:
13:96:d6:88:72:ce:ec:66:6b:c2:f5:21:3f:f6:f8:33:84:a2:
9f:dd:d3:17:d7:d6:d3:84:a9:81:f8:51:f5:91:36:91:33:34:
07:8e:93:51:b5:c3:21:84:36:cc:53:b0:50:dd:dd:ae:0e:ef:
cb:bb:18:f2:d7:f0:b2:03:13:7e:dc:0f:27:5e:87:ba:40:b9:
00:82:62:7e:be:92:a0:c9:a3:20:30:4d:55:48:82:55:a3:f6:
ea:46:93:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:29:36 2025 by rpki-client