Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
File: y6AXGgLV5KdftAY1VFrgBkyMzK0.mft (raw, json)
Hash identifier: s0Shz7wJvOOWKQ0cKYVk2iF1CNGLq4m8x3TX+PdTSVg=
Subject key identifier: 8A:BE:E1:53:55:60:57:ED:CC:D2:43:D7:80:72:2A:CD:A3:A0:28:57
Authority key identifier: CB:A0:17:1A:02:D5:E4:A7:5F:B4:06:35:54:5A:E0:06:4C:8C:CC:AD
Certificate issuer: /CN=cba0171a02d5e4a75fb40635545ae0064c8cccad
Certificate serial: 0197B745B58C2A73E6F3B826B05CDC407EAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
Manifest number: 12C2
Signing time: Sat 28 Jun 2025 16:01:28 +0000
Manifest this update: Sat 28 Jun 2025 16:01:28 +0000
Manifest next update: Sun 29 Jun 2025 16:01:28 +0000
Files and hashes: 1: mj2SP2YUf8OOW3PWyfsSenlnbcQ.roa (hash: 7rYL22HIBA9YP5PrLL9E5bTyxJEJdAa2DC73cuHwaP4=)
2: y6AXGgLV5KdftAY1VFrgBkyMzK0.crl (hash: ZCiHW/vFAdUy8YpLZcCbsUVSlSPDybKiDg8wrTDPJbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:b5:8c:2a:73:e6:f3:b8:26:b0:5c:dc:40:7e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cba0171a02d5e4a75fb40635545ae0064c8cccad
Validity
Not Before: Jun 28 16:01:28 2025 GMT
Not After : Jun 29 16:01:28 2025 GMT
Subject: CN=8abee153556057edccd243d780722acda3a02857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4a:0e:c8:cf:71:d1:d4:73:a8:92:98:32:31:
b8:78:6e:2f:72:d4:b4:8d:0c:d7:bb:52:dd:71:98:
6b:4a:0e:0b:e3:35:be:ef:73:5f:ee:71:99:26:60:
8d:3a:aa:e8:a6:e2:96:04:79:ce:2e:3a:d3:34:80:
5e:29:05:ec:4a:97:cb:22:a8:a0:a7:09:2b:44:df:
1b:c3:26:fe:68:7f:80:65:1d:39:e0:b3:ec:42:60:
06:1f:34:f5:a6:67:c5:58:c8:c0:26:ce:ab:56:ed:
eb:d6:ec:80:9c:d9:c0:38:e2:df:bc:c5:58:e9:5b:
62:60:da:17:0d:bc:5e:84:ba:d8:67:dc:39:f6:5a:
ac:b1:b7:be:e4:1a:ac:d9:e8:c8:cb:7f:9d:33:2c:
49:c4:f1:52:fe:9a:63:f0:24:2f:0e:7b:11:58:96:
91:a0:a9:49:33:a6:80:84:05:42:45:34:21:8c:2e:
d4:3d:ed:91:91:4d:ab:ef:41:02:8c:e1:63:63:2b:
d2:9a:ec:e9:d0:05:a5:08:e7:0b:66:8c:c4:91:fc:
f3:be:51:f8:8c:5f:d1:52:92:ba:33:6f:5f:49:0e:
da:da:7e:16:f2:f9:05:a1:3d:68:e9:84:97:bb:4f:
f4:71:b2:50:c6:40:f7:6a:c5:77:aa:1f:e6:3f:c4:
38:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BE:E1:53:55:60:57:ED:CC:D2:43:D7:80:72:2A:CD:A3:A0:28:57
X509v3 Authority Key Identifier:
keyid:CB:A0:17:1A:02:D5:E4:A7:5F:B4:06:35:54:5A:E0:06:4C:8C:CC:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:24:e4:4e:4e:8e:d4:eb:a0:89:07:cd:43:84:8f:99:f6:3a:
67:6f:76:b0:3e:c1:d1:da:b3:68:46:4f:b1:cc:26:76:8c:c8:
26:47:e0:d0:a8:96:2d:2c:41:fc:2b:ed:85:63:c3:4e:4a:48:
e7:c5:0f:45:aa:bb:50:2a:29:f5:e4:eb:74:2e:c5:d6:c8:fb:
48:a8:ff:46:dc:19:7d:3a:10:6c:43:38:60:fb:87:b6:ad:78:
26:75:fd:12:4d:78:24:90:d8:fc:46:24:b8:28:cf:20:92:4d:
89:4e:99:7d:16:f3:ea:fb:06:0f:95:ec:45:bf:6e:4b:f8:0d:
61:1f:a1:77:c3:f6:f7:89:e7:8c:ec:03:cc:e8:dc:f1:2c:01:
e1:af:11:2e:6d:6d:8c:a2:68:ca:6a:6b:14:6c:3d:cb:43:c7:
89:6e:82:1b:be:dc:e6:a8:82:2a:37:6a:39:17:12:16:af:e0:
f6:c2:93:1e:ce:c3:81:01:f8:3d:83:c5:ff:54:62:8e:a2:cd:
52:d8:39:f9:77:2a:58:e5:1b:d3:f7:77:7a:60:ea:54:d5:3d:
cf:32:e7:10:bb:8d:5b:4d:60:7e:90:c6:fd:23:cd:ac:52:3c:
63:cf:1d:35:e9:34:f7:e0:88:ec:e0:25:bf:d1:a9:82:b8:49:
98:cd:d4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:41 2025 by rpki-client