Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
File: Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft (raw, json)
Hash identifier: uPcJDqokPG+sePtcU/jy2x9shGSL+7BuI8ix0F3uoUo=
Subject key identifier: 70:B7:55:30:B3:50:18:2B:F5:C0:E3:AB:F2:47:82:C9:F4:2E:3A:94
Authority key identifier: 62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
Certificate issuer: /CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Certificate serial: 0197B70F18948F7B83937E08931A03393B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:49 +0000
Manifest this update: Sat 28 Jun 2025 15:01:49 +0000
Manifest next update: Sun 29 Jun 2025 15:01:49 +0000
Files and hashes: 1: Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl (hash: A1ZJbWcvR0R9wMhXawW0BKUvmKo7FrehGFOK5z5Z/d8=)
2: riaXA0o3ztBtwF7sKqg1RflsJeI.roa (hash: PkRZUeqNmDsfT7G4mjGXrdMXe4M5/AEybH+EkbWMiv4=)
3: yYaisXyChRiN2DpvBoKyqem_xcE.roa (hash: 2YMiZxn9BzAJh7sY9ViGLpVIJNMsE1y+h4ErGfBrx8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:18:94:8f:7b:83:93:7e:08:93:1a:03:39:3b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Validity
Not Before: Jun 28 15:01:49 2025 GMT
Not After : Jun 29 15:01:49 2025 GMT
Subject: CN=70b75530b350182bf5c0e3abf24782c9f42e3a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:33:ec:b4:97:41:ea:22:0a:70:2d:24:96:3e:
9b:8f:81:31:7d:d2:6f:d8:32:e9:97:bd:b5:46:44:
7e:eb:55:a8:4b:a0:7c:d2:9f:8d:52:f2:98:f3:a5:
d5:6e:1a:73:f4:0b:75:74:45:04:8e:dc:be:c8:4f:
19:ca:36:a2:d5:56:f9:3b:cc:78:e3:d3:25:61:21:
46:6d:92:d8:5c:c5:45:4d:24:d8:d8:c2:a3:5a:1c:
c2:34:34:93:7a:46:8f:66:53:4c:df:82:17:32:08:
ab:eb:40:88:cd:2e:ae:95:1a:aa:ee:30:45:44:6e:
e5:9f:ee:5f:b4:41:fa:52:d5:32:d2:ab:09:fd:e6:
dc:cb:80:06:cd:b5:ad:ee:d7:48:c4:6e:94:ff:41:
13:12:c7:b5:58:9d:64:45:ed:bd:c9:d4:f1:e6:e2:
93:58:79:b9:be:96:d4:a6:b4:3d:96:5e:da:d2:0a:
b7:c0:0e:a2:89:a1:5e:e7:66:e7:3b:34:76:36:f4:
fa:d9:15:be:cf:3e:11:fa:a4:a3:4a:5b:70:27:3d:
c2:9e:07:a9:07:04:49:de:ed:f7:33:36:18:e1:eb:
de:4b:3f:b0:1a:61:6a:4e:9a:ce:e8:34:47:6e:1d:
f5:dc:a5:b5:73:4c:aa:e8:a1:3c:da:5f:f7:f7:fd:
5a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B7:55:30:B3:50:18:2B:F5:C0:E3:AB:F2:47:82:C9:F4:2E:3A:94
X509v3 Authority Key Identifier:
keyid:62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:08:62:30:3a:c5:69:63:fa:9d:29:41:26:3d:77:63:b1:20:
c1:db:72:b5:7c:83:c4:f1:c3:cb:be:76:c0:4d:fb:ad:36:59:
f2:9e:50:d7:6d:14:21:c2:bc:62:c9:a6:55:67:53:d7:22:a5:
a6:ca:95:21:53:ff:5c:20:7c:9b:c7:7c:ed:34:ae:65:d1:64:
24:a5:bf:c8:b0:34:a2:39:39:b9:45:38:6e:7c:e7:62:39:0f:
01:61:05:8a:ce:a2:5b:11:d7:3f:bc:f7:96:5d:95:75:77:7e:
d7:d8:c8:25:62:50:b6:e9:4c:9e:5d:d3:89:ed:33:02:0a:73:
ec:3c:56:d6:1e:46:2e:75:83:cb:ba:32:1e:1d:6c:e0:df:4d:
5e:05:8c:d0:08:12:5d:f7:49:ba:19:f0:ae:32:38:5d:89:73:
ef:f4:c1:ac:2f:56:08:47:a8:05:f4:08:a8:29:33:45:c2:76:
f2:f4:83:25:05:f3:19:ad:f0:a2:ba:d0:cb:79:4e:cd:bf:3a:
d9:c6:24:9e:de:ce:fb:19:4b:99:0c:8b:90:d5:87:4b:13:3c:
4c:82:f8:98:f2:6f:70:5c:eb:bd:36:2e:9e:f5:3a:73:9c:bb:
7e:7b:68:be:66:7f:9c:c0:73:f7:37:fd:a4:ac:bd:0a:9b:60:
b8:af:7d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:40 2025 by rpki-client