Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
File: CYsceb-uEqW4fzXJmLtgs_pOZiE.mft (raw, json)
Hash identifier: 8UB+LGwBeLGS7c4yvWhNqRKoHdrKFs8mekGd1Z2hJPE=
Subject key identifier: 44:20:BC:32:62:22:7F:28:9D:5C:EB:D3:5A:B4:C8:41:2B:B8:C7:BF
Authority key identifier: 09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
Certificate issuer: /CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Certificate serial: 0197B6A186017B1B2B7D8097DE302466A085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:02:08 +0000
Manifest this update: Sat 28 Jun 2025 13:02:08 +0000
Manifest next update: Sun 29 Jun 2025 13:02:08 +0000
Files and hashes: 1: CYsceb-uEqW4fzXJmLtgs_pOZiE.crl (hash: 1ssbeIS5H9+BcMOcFwq0MeTZJHjvby/jE81sIGA5nGE=)
2: azMfriENBDiIJYosRP-8DXKTAfY.roa (hash: SyiAg9Yx6L4V6Q7e4+QQHSJOd2fmFI1gwl+oA6hcHVg=)
3: ibvrneMp14yx1aeNF9L_aPTpyR8.roa (hash: VZVseX73bEIVKUE/+ZPW5JNub6b1T9krDYglkTTQtpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:86:01:7b:1b:2b:7d:80:97:de:30:24:66:a0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Validity
Not Before: Jun 28 13:02:08 2025 GMT
Not After : Jun 29 13:02:08 2025 GMT
Subject: CN=4420bc3262227f289d5cebd35ab4c8412bb8c7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d6:48:47:bb:8c:90:3c:90:f4:2a:91:f7:07:
3f:ff:03:48:75:43:f9:15:b8:04:66:c0:43:a0:b4:
30:18:10:a0:30:8c:7d:45:55:ed:85:db:59:bd:13:
27:f4:67:e7:86:bd:e2:75:5e:c0:c2:2f:55:69:5b:
dc:91:40:9d:7f:76:b6:fa:a1:5c:30:fc:2a:43:b8:
62:7d:09:84:3c:e5:f7:b9:74:8a:3b:9b:a3:9f:b4:
f8:08:85:ad:71:b0:19:6c:b0:d1:ea:8b:08:97:58:
90:97:39:75:a8:50:61:e5:96:6d:a7:a0:09:96:80:
76:2a:37:09:f4:b5:e1:1f:36:14:e9:b0:29:4b:dd:
4d:72:8d:ac:04:71:70:72:bc:88:36:13:eb:e9:7f:
a8:f0:f7:42:76:6a:6d:ac:0a:1c:aa:e3:e9:a5:40:
37:e6:48:c4:92:79:f2:5e:43:7d:19:c4:7c:2c:b4:
17:a1:ca:8e:83:80:cc:4a:83:a2:e8:3b:09:b3:cd:
7f:99:3b:f5:8e:1b:50:f2:a7:95:1a:d0:21:10:04:
a1:ca:7a:a6:5f:ef:6a:d2:04:0d:cd:5e:95:37:b9:
d8:96:53:0d:11:28:56:65:92:ca:c4:5c:82:82:ab:
6a:4c:9e:63:3f:5d:df:09:24:1b:cf:3b:42:e4:65:
20:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:20:BC:32:62:22:7F:28:9D:5C:EB:D3:5A:B4:C8:41:2B:B8:C7:BF
X509v3 Authority Key Identifier:
keyid:09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:68:4b:87:76:1e:3c:17:29:8b:7d:5f:0b:bd:2c:67:ee:53:
11:0d:1b:c0:11:d6:34:d1:e9:e1:1c:a8:ce:2a:65:2e:94:49:
59:c1:c0:a2:61:63:3d:04:33:c7:c6:a1:d9:b3:15:c1:10:c4:
63:05:a9:de:29:cb:a7:4e:b5:6b:7b:27:ff:fe:99:d0:30:6c:
a1:fb:26:92:21:04:f0:db:a2:bc:4e:f7:02:83:bf:07:4e:e1:
26:da:6e:aa:96:71:94:dd:6a:4f:6d:90:1f:87:fd:b7:5d:aa:
3d:45:79:6d:83:3a:a7:bf:44:bf:63:ca:0d:43:ec:ee:80:64:
33:19:e0:3d:d0:0c:72:e2:a8:3f:b2:18:80:c1:21:d7:77:40:
35:f3:a6:38:ff:60:c3:19:8f:91:c4:88:46:6c:0f:dd:d8:be:
77:7c:99:85:e9:ac:62:11:de:ae:cb:11:7a:7b:b2:4b:eb:b5:
c1:b8:ad:42:8d:e1:39:45:c2:dc:f2:2d:32:6c:7d:a7:68:13:
99:f0:1b:28:3f:6f:b7:59:30:21:f7:0c:e1:9f:d7:49:5a:17:
73:64:74:f2:cb:cb:c9:df:5d:cf:e8:1d:18:3b:a0:96:65:ed:
dc:e9:b4:9b:48:70:ac:8d:52:1d:06:6a:8c:51:b0:f0:b0:11:
d7:f1:9c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:04 2025 by rpki-client