Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
File: yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft (raw, json)
Hash identifier: DDZgdf+uw5jbbdHdRsrSLQcomDMSRmF6cuYUljYu2gk=
Subject key identifier: 24:AE:DF:C3:51:A1:21:52:98:3C:A1:3E:8C:60:BF:8E:76:2D:F7:7A
Authority key identifier: C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68
Certificate issuer: /CN=c82bedbcf7b5360fee245b7a255f6640b7276968
Certificate serial: 0197B6A1E54C53A128B6E14DC4973516B3C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
Manifest number: 068C
Signing time: Sat 28 Jun 2025 13:02:32 +0000
Manifest this update: Sat 28 Jun 2025 13:02:32 +0000
Manifest next update: Sun 29 Jun 2025 13:02:32 +0000
Files and hashes: 1: Hjt16ZgJYnsTZcWE0Va13YoIt7M.roa (hash: xjrK/sVAC5wf26/BaujuTP3RD5GR/bbBxu4fokZn8xY=)
2: yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl (hash: V06QC2KVDsMcgF8lzc/zuDdnIb/BzkPzjafHlQrSIwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:e5:4c:53:a1:28:b6:e1:4d:c4:97:35:16:b3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82bedbcf7b5360fee245b7a255f6640b7276968
Validity
Not Before: Jun 28 13:02:32 2025 GMT
Not After : Jun 29 13:02:32 2025 GMT
Subject: CN=24aedfc351a12152983ca13e8c60bf8e762df77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d3:38:96:94:7b:a7:36:d4:dd:eb:a1:56:2c:
24:8c:6a:ac:96:46:ce:a4:34:7a:dc:40:b6:59:77:
86:8d:01:12:e1:9e:ac:75:82:a3:0f:c8:e2:46:45:
82:f8:cc:99:d4:7a:76:46:0b:3f:d7:08:7b:7c:78:
dc:58:19:9d:4b:43:ef:13:34:12:1b:29:2e:c5:42:
29:69:94:03:a5:d1:f8:14:db:b0:82:49:0b:ac:fb:
7e:ca:db:45:e8:f6:86:c3:34:e8:77:81:4f:30:97:
76:a2:15:36:ca:9f:1b:bb:db:9d:66:db:e0:4e:d9:
6f:27:21:e0:a0:04:03:67:ae:eb:d0:10:97:04:87:
7a:44:f9:17:10:24:29:a8:fa:7c:4d:72:af:a4:b0:
01:30:44:e8:6f:ea:63:ff:00:9e:8f:f7:84:91:b6:
be:10:85:a6:10:f5:c7:bd:54:cd:7e:f4:4f:85:81:
92:2c:d7:c5:44:3d:2f:7f:a0:95:c0:61:e6:47:b5:
0c:84:9f:fe:19:53:e2:34:c1:4b:94:d9:16:2c:e5:
a4:b3:4d:48:a8:b7:99:37:ab:b3:f8:9c:21:be:d9:
f3:95:2e:be:99:fc:54:f2:d5:49:db:b0:05:2c:f2:
59:56:59:88:67:88:db:88:d6:63:4b:ee:21:c9:6f:
c4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AE:DF:C3:51:A1:21:52:98:3C:A1:3E:8C:60:BF:8E:76:2D:F7:7A
X509v3 Authority Key Identifier:
keyid:C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:67:bb:23:82:da:b6:52:90:c2:ff:95:0f:6f:bd:e1:66:a3:
02:35:fb:23:fb:cb:16:62:40:68:bd:63:7e:d8:d4:46:ed:fc:
58:c1:67:15:a5:c7:a8:0f:f6:9d:4c:d4:59:af:51:0d:1e:88:
95:d6:d1:21:c0:9a:ae:d0:dd:24:44:86:5b:c9:cb:99:45:78:
22:a4:b4:17:d6:f7:bc:eb:1c:c0:52:77:4f:32:f3:c8:af:83:
fa:28:59:ab:d1:8d:1a:d6:9f:b6:16:07:57:c3:3a:b3:08:d8:
20:5d:51:41:75:5a:39:ce:c5:6a:b2:97:a4:d9:30:25:58:38:
d1:cf:2e:90:ca:90:70:70:99:72:76:14:e9:bb:21:0b:6f:f8:
ee:06:4b:d3:b4:d5:7c:94:63:67:14:e6:ae:b4:86:3b:5a:a6:
a9:6c:88:2e:87:00:2e:ab:04:a6:ce:58:c8:d1:c1:92:0e:b7:
f6:17:ce:e7:06:44:23:33:58:a5:dd:e5:02:54:0d:ea:01:fe:
24:3b:c9:f0:bb:f6:cf:9e:71:f1:3f:44:55:b9:8c:40:63:3a:
d4:a1:a7:0c:24:d6:db:86:38:a2:fb:9f:7d:e9:ac:04:6e:2f:
91:aa:30:d7:87:67:4d:a0:be:24:19:36:6b:63:36:d1:af:a2:
bf:0d:ac:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:32:30 2025 by rpki-client