Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
File: y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft (raw, json)
Hash identifier: Pe6B1eGyiP9YfgJoTfU8Vy0As1WgdIM/R/YgYlLVUpM=
Subject key identifier: AF:EB:2B:2D:66:D7:63:96:13:78:2E:80:84:B0:A9:F8:66:BD:61:98
Authority key identifier: CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
Certificate issuer: /CN=cbd4719d72d288a73218d8c1a498823333297e25
Certificate serial: 0197B8FD0E9B740393AB8809B68B895DD2AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
Manifest number: 15BD
Signing time: Sun 29 Jun 2025 00:01:21 +0000
Manifest this update: Sun 29 Jun 2025 00:01:21 +0000
Manifest next update: Mon 30 Jun 2025 00:01:21 +0000
Files and hashes: 1: FCsvVRb4swZVn7i4DbPOyl1zfXM.roa (hash: pWG3xc+TD2BjxXH94IjEoL3ycjPpI1BrWH3pnVMhatw=)
2: d7nnb22eByZ3PgdzvIIdeg7bVrw.roa (hash: MtT+ZrWZXS09kZHHdiFFktcO1Kssl/83QQmCIziV1ms=)
3: fX9eMLnK7xVb4_2F9g2DOCYqfvU.roa (hash: 1sy/TAEfLZZfPClLeEAAWlanxJu879FILQU8C/alm0M=)
4: y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl (hash: zKyTZF0Evdbs90QOtq4XY8JLbyGwDOapEDh8TKOsn+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:0e:9b:74:03:93:ab:88:09:b6:8b:89:5d:d2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd4719d72d288a73218d8c1a498823333297e25
Validity
Not Before: Jun 29 00:01:21 2025 GMT
Not After : Jun 30 00:01:21 2025 GMT
Subject: CN=afeb2b2d66d7639613782e8084b0a9f866bd6198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:54:53:b7:6e:78:8d:c7:7e:e7:98:c9:b0:be:
5a:bf:84:37:42:bd:91:34:6b:e4:cb:12:3f:d4:3b:
8c:89:6b:fb:3d:4f:98:d5:35:f1:bd:5a:89:6c:ca:
f7:da:d8:f0:63:34:79:d6:b3:3c:ae:c9:54:6b:79:
5a:6a:6d:ff:98:cc:f9:5a:b2:33:cc:6d:57:a9:29:
97:80:04:c8:bb:6a:29:a0:1d:09:24:5d:c5:50:2e:
a4:39:55:99:c5:42:e7:1a:e0:e1:94:7c:19:23:1b:
96:e0:38:a8:66:27:ee:d7:ec:48:17:a2:2a:55:7f:
9e:b9:a5:b6:8d:34:44:d0:5e:f0:a3:86:73:0b:81:
91:e5:c7:90:20:d7:b1:cb:b5:d0:f0:fa:71:5c:14:
67:6c:27:ca:d0:16:17:3a:00:e4:e6:21:dc:00:2f:
bd:08:d4:6b:54:af:0d:2b:7c:df:4c:92:90:c6:88:
ed:b0:08:40:4c:ee:83:90:8a:3e:73:26:b6:06:79:
29:e8:31:94:e4:9a:00:da:73:6f:58:fc:54:55:51:
1d:29:df:48:72:97:3f:6f:b4:d9:ca:de:fa:17:c1:
21:4e:ba:6f:81:a1:2b:c1:01:a1:54:de:94:83:c5:
21:ac:ca:59:99:cf:0c:87:31:1a:a2:1d:c1:fd:41:
22:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EB:2B:2D:66:D7:63:96:13:78:2E:80:84:B0:A9:F8:66:BD:61:98
X509v3 Authority Key Identifier:
keyid:CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:61:e5:f3:89:c9:b7:58:e8:54:e1:80:c5:61:2c:e2:0c:e8:
a7:5b:70:24:29:85:2e:08:37:cb:54:8b:68:04:75:3a:3b:4c:
7e:16:7e:8e:8c:a0:1e:bb:df:8f:e5:45:31:10:ae:4f:e3:f0:
a1:c2:f5:da:12:5a:41:1c:23:c5:38:3b:65:e8:4c:15:96:ea:
1e:7f:4f:8a:0e:f0:48:ec:f4:ce:e7:96:d5:f0:d2:e8:69:60:
c6:3f:6d:4e:8a:05:eb:8b:ca:76:70:0d:a0:ef:77:3e:22:6b:
9c:5a:5a:0f:7d:5b:fc:a8:02:2c:37:a0:8c:e5:8a:33:47:e8:
68:bc:fe:62:26:3a:f2:4a:fb:9a:14:3d:52:b8:0b:80:5b:37:
b9:75:04:f7:06:1f:be:67:1e:ff:5f:9f:0e:2b:e8:06:18:e1:
b7:f8:38:4d:f7:25:42:64:19:e1:18:7a:83:0d:fe:76:b5:1f:
43:ed:c2:5d:90:5f:43:6a:30:22:1a:52:37:bc:c6:70:c7:8b:
78:fc:08:a1:17:8a:a4:9f:01:dd:00:82:6b:75:a6:65:de:c5:
67:97:64:2c:d5:59:b1:5f:e8:6a:6b:0a:f0:52:0d:08:ff:d5:
09:09:a5:33:a2:65:cf:5c:66:53:72:53:fc:62:d2:9c:7f:65:
1b:e9:70:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:26:34 2025 by rpki-client