Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
File: hY6VYi_VRF1u00P4DgU-r_sRiyw.mft (raw, json)
Hash identifier: +DpQ6vKQHlOeCT3LT78gG0uoieOVFvd278Q23h8eGzw=
Subject key identifier: 96:73:27:A9:F5:25:41:6E:E6:47:0A:1D:E0:5A:CD:07:8D:45:47:6B
Authority key identifier: 85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
Certificate issuer: /CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Certificate serial: 0197B745771350692FCEF1245634B81B605E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 16:01:12 +0000
Manifest this update: Sat 28 Jun 2025 16:01:12 +0000
Manifest next update: Sun 29 Jun 2025 16:01:12 +0000
Files and hashes: 1: VqHyyiIf_MNHRUQN5mAvsdQ_W6I.roa (hash: MDdqX3nQAwimP61KTWNfGEm7PlFzODAKVqf8oTIIVz0=)
2: hY6VYi_VRF1u00P4DgU-r_sRiyw.crl (hash: jtHBdoRazygp+okmJciHSgc501LMPo6t6tbzT5dHDeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:77:13:50:69:2f:ce:f1:24:56:34:b8:1b:60:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Validity
Not Before: Jun 28 16:01:12 2025 GMT
Not After : Jun 29 16:01:12 2025 GMT
Subject: CN=967327a9f525416ee6470a1de05acd078d45476b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bb:7a:dc:3e:fc:35:7d:60:1f:fd:ec:1e:0a:
77:52:46:e5:c1:8c:c4:2b:be:62:2e:2c:9c:eb:1a:
15:37:82:89:41:fc:da:05:31:cd:be:a5:0f:ec:58:
d4:16:b9:fd:12:6d:a7:ca:90:7f:1d:98:b9:19:3d:
45:eb:5a:88:7d:c8:72:76:31:ae:9c:ec:36:55:94:
72:d2:66:d2:93:e6:b3:43:33:ff:30:48:ed:54:a7:
63:dd:c3:e6:99:51:c6:60:d5:9b:4c:71:f9:7e:bd:
4a:f5:6d:61:9e:92:2b:7b:48:f8:0e:49:66:83:eb:
65:e3:f3:f4:17:3c:72:53:0a:36:3d:0f:70:f2:80:
c3:21:bb:89:63:1c:c4:21:02:40:8d:2b:1d:0c:7a:
05:e2:71:0a:b9:27:0d:77:90:10:55:39:a0:9a:95:
8e:94:db:65:c2:30:e6:bb:2a:8a:71:25:50:83:e7:
fb:b8:40:05:f5:e8:23:4c:f8:39:75:45:bf:db:f2:
35:85:4e:32:b1:43:c7:01:d0:60:b0:03:b0:8c:fb:
67:8b:d3:79:c5:4c:92:10:f7:60:6f:7a:fd:d0:2b:
8b:70:34:de:0d:63:f7:e2:dc:e5:c9:06:3a:1a:68:
9b:0c:85:ac:2a:c6:6b:b4:da:a0:9d:3a:9e:be:56:
e9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:73:27:A9:F5:25:41:6E:E6:47:0A:1D:E0:5A:CD:07:8D:45:47:6B
X509v3 Authority Key Identifier:
keyid:85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:83:9a:5c:76:a1:28:2c:d6:a6:6a:79:0b:bd:2d:25:f0:03:
96:96:f4:15:4f:1d:1c:5d:37:1c:3b:42:77:dd:6c:2e:62:00:
bb:59:cb:89:92:46:b6:75:3f:af:85:68:12:f8:4b:3f:ec:79:
0b:e0:91:c3:56:8c:bb:67:04:2f:cc:66:8f:2b:bc:56:2d:b8:
e8:fb:3c:e0:7f:82:77:03:2f:2e:c9:b7:22:0a:83:78:63:a1:
dd:46:3c:20:16:71:40:d2:67:40:65:4c:2c:d2:25:5f:8a:13:
5f:24:15:eb:d5:58:f6:8d:4e:37:d4:b0:34:90:69:57:e3:46:
c3:00:a5:88:63:26:58:96:c9:76:4f:fb:ae:1a:49:18:92:2b:
f2:d3:b1:a2:1b:d7:c9:37:92:d6:8d:6c:02:91:7c:c4:6b:1c:
94:25:5f:17:ec:8a:ce:a6:01:a6:ab:8b:7c:92:ca:f7:3c:20:
45:9f:98:b0:5b:ed:5e:53:d4:fa:44:9b:c5:2e:32:1b:45:a4:
0b:45:d0:87:6a:d4:4f:e6:65:82:2b:08:4e:82:58:87:e3:69:
93:09:aa:73:72:f1:f6:46:85:a8:54:73:8e:bf:2e:e0:20:ad:
df:76:61:66:89:5c:a4:c3:94:9e:b0:5b:0e:da:af:87:25:eb:
bd:bc:f8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:21 2025 by rpki-client