Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
File: Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft (raw, json)
Hash identifier: cHnbyOMdO4YP4xG76aw49upAP00Knxo3BRdg2fmoE1U=
Subject key identifier: 17:80:35:EC:95:9D:E6:A7:55:60:57:89:01:F9:BB:FF:C2:DA:8A:7E
Authority key identifier: 63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
Certificate issuer: /CN=6353829c061a8af26de946fc9e81885c74c174c7
Certificate serial: 0197B6D75C7F7D314B26BD161DB64CE45149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
Manifest number: 07B7
Signing time: Sat 28 Jun 2025 14:00:56 +0000
Manifest this update: Sat 28 Jun 2025 14:00:56 +0000
Manifest next update: Sun 29 Jun 2025 14:00:56 +0000
Files and hashes: 1: La2c1GzhO3LCYjtEuOjFcoNgj6s.roa (hash: hdTkzvggjd5erT4guotzR+j9YHEwpmHcJ+YP7gw1WZs=)
2: Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl (hash: iA7nV/wGJ3caQq+kClwM7JWZOuBxSbDUkaAyrE5On5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:5c:7f:7d:31:4b:26:bd:16:1d:b6:4c:e4:51:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6353829c061a8af26de946fc9e81885c74c174c7
Validity
Not Before: Jun 28 14:00:56 2025 GMT
Not After : Jun 29 14:00:56 2025 GMT
Subject: CN=178035ec959de6a75560578901f9bbffc2da8a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:79:75:30:30:26:b2:b7:d1:f1:1e:55:51:
31:b3:cc:dc:de:da:95:0e:ba:0c:11:a7:54:69:f6:
1f:07:53:b9:39:5e:99:5d:1b:99:b4:c3:05:95:bf:
bd:dc:71:29:3c:2f:56:3c:22:25:f1:7e:e5:1c:bf:
f9:37:6a:90:44:79:22:87:4e:5e:37:30:46:de:76:
4b:23:e8:c9:1c:73:a3:42:76:98:82:3a:56:8d:1f:
2e:60:be:cc:d1:af:ec:1d:10:d0:57:41:00:8e:74:
ca:05:c0:4f:f1:56:95:b5:0c:2b:d9:ee:9b:6d:7b:
bb:8a:14:2c:9a:de:4f:4e:52:ed:d5:cb:93:fc:a5:
8e:8e:aa:d8:73:0b:1c:f5:29:f2:73:8e:c5:dd:fd:
28:4e:16:49:76:73:f6:2b:b7:61:cb:0b:dc:1a:cc:
ff:69:ec:99:ff:35:52:be:91:1f:87:ad:bb:4d:bf:
0d:86:f9:53:ab:82:96:72:2a:04:41:6f:4e:ac:b4:
68:1b:e8:b0:83:35:53:6c:fd:52:a7:79:ed:a7:d4:
8a:8f:50:67:93:7b:d9:32:56:84:2c:6b:60:a3:ae:
db:a6:3b:1d:d2:b9:44:72:66:09:b8:e1:45:9f:1e:
12:dd:ea:c2:76:bb:c5:5e:43:0e:ec:a9:e7:c9:d3:
33:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:80:35:EC:95:9D:E6:A7:55:60:57:89:01:F9:BB:FF:C2:DA:8A:7E
X509v3 Authority Key Identifier:
keyid:63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e2:d8:50:8a:ef:36:29:b2:02:4b:fe:b8:96:4b:39:87:6e:
46:db:4c:4d:25:53:b7:24:75:20:a0:29:c2:3a:b9:1a:20:8d:
33:94:71:8f:7d:0c:6b:dc:e3:df:e2:b0:52:b6:34:fe:16:16:
23:49:bc:51:15:78:cf:87:f2:ba:4c:16:8d:35:a6:55:4c:9b:
1f:13:38:34:bb:ef:e5:3f:fd:7a:e4:dc:cd:e8:7b:ae:f2:8a:
8e:50:53:0e:e0:0f:57:2f:c3:f0:a1:22:03:95:4e:a5:af:9f:
26:e8:e3:6a:c7:ac:f5:c0:e0:8c:99:ed:10:b6:76:e2:c2:db:
93:2a:45:4b:c7:c7:e6:17:63:f5:52:8d:6d:68:21:6e:da:86:
56:34:e1:09:cc:72:89:c8:e6:b8:5d:6d:9f:15:27:a8:ca:f9:
d1:b1:24:06:51:6e:4b:f2:cf:21:73:59:63:30:11:9b:1d:4a:
f5:5b:df:76:0f:98:de:2f:f3:93:63:b0:2a:a1:b0:95:08:2d:
31:06:2c:8b:3b:d3:a5:2c:62:ee:71:b6:33:4f:9c:45:5a:19:
79:1b:cd:17:f6:7b:14:44:20:c5:f5:82:7b:ec:1f:c9:b5:4b:
ff:5f:e7:5f:1c:a9:fd:34:05:df:16:23:53:63:0d:29:c1:4f:
5c:5c:dd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:59:33 2025 by rpki-client