Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
File: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft (raw, json)
Hash identifier: BiTX2U8Jc/UKhVVDUJoh21kopnUG5UHa1LpI82mF9QQ=
Subject key identifier: 6C:6D:9B:DD:96:58:BC:4E:99:A8:43:95:3B:0B:7F:02:47:F4:6A:66
Authority key identifier: FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
Certificate issuer: /CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Certificate serial: 0197B6A1120845073814A7BF96FCFE71B992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
Manifest number: 1435
Signing time: Sat 28 Jun 2025 13:01:38 +0000
Manifest this update: Sat 28 Jun 2025 13:01:38 +0000
Manifest next update: Sun 29 Jun 2025 13:01:38 +0000
Files and hashes: 1: ZBvl9kgTfl9xpoCDalOQ41fsQlA.roa (hash: eTBJG42QxSY9j5MKHECEE0ZbmMhc6Mb5ITGizx3+EdE=)
2: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl (hash: pin45ycTv/teYHRwhbZx2WQrd93VoJ2q3tHiGO45Rlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:12:08:45:07:38:14:a7:bf:96:fc:fe:71:b9:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Validity
Not Before: Jun 28 13:01:38 2025 GMT
Not After : Jun 29 13:01:38 2025 GMT
Subject: CN=6c6d9bdd9658bc4e99a843953b0b7f0247f46a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ed:f9:51:e9:8f:a7:07:f4:6b:db:a3:42:aa:
60:32:45:68:9e:1a:40:97:d7:b6:6d:5b:ce:97:47:
fe:c3:07:23:b1:1d:a1:51:b8:33:48:35:75:28:2e:
f7:d6:21:02:2b:d2:5d:6a:ea:c2:29:d4:c1:55:d9:
fc:bd:e2:7e:b4:7e:ee:a7:3d:33:d2:e5:b9:05:f2:
d9:90:61:46:a4:41:f4:7f:c1:7b:79:53:ce:97:0d:
4c:da:c7:0e:76:99:5b:ef:ab:54:a7:03:73:df:be:
72:fd:a9:01:e0:d7:03:4f:7d:91:64:a6:79:ec:16:
49:05:ed:ad:2c:a9:be:a8:e8:ab:7f:b3:4a:62:62:
d0:e6:d5:6a:fc:f5:dc:f2:65:23:5d:c4:8c:85:47:
b6:1c:d6:1c:e8:2c:ab:05:30:d1:ed:62:6e:05:69:
67:14:f7:a2:cf:c3:57:30:6d:83:fc:83:1e:79:ce:
d8:0e:50:2b:c3:11:34:63:7e:0b:6d:0e:e4:dc:65:
5b:42:e6:83:eb:b2:3c:b6:c7:c0:1e:fc:ea:74:49:
25:70:9c:b3:8a:09:5a:e6:51:4f:d7:dc:09:df:02:
76:9e:8b:31:c1:5a:a1:e8:cf:c7:11:43:af:39:7c:
1d:6e:3e:3c:39:2a:38:91:3b:4b:32:5a:43:90:f9:
a4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6D:9B:DD:96:58:BC:4E:99:A8:43:95:3B:0B:7F:02:47:F4:6A:66
X509v3 Authority Key Identifier:
keyid:FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:fe:b1:a0:62:42:7e:a3:19:7b:ba:cf:27:7f:da:a1:ee:90:
fd:62:85:77:68:0b:ca:c3:8d:4f:00:a7:7f:90:90:e7:49:e1:
0d:2d:f1:17:2c:c8:6f:f8:e8:2c:0f:35:5c:d2:23:fa:91:ae:
c5:cb:bd:e6:1e:89:df:6d:bf:b8:ee:dd:6b:49:0f:77:6f:7e:
e7:f1:9c:18:2c:a2:eb:8e:98:6a:d7:2b:60:45:d6:37:37:ed:
2a:11:c5:ef:b8:be:3b:86:2b:76:ab:15:10:0e:4f:c6:0b:d0:
c8:81:f3:01:09:83:4a:a6:41:ab:d6:89:b7:b4:ae:25:d3:bc:
65:fd:14:43:42:8e:83:0a:34:9e:59:16:07:3e:4b:51:ab:8e:
c6:a6:b3:85:eb:90:ac:f3:49:76:82:89:e4:f2:51:d5:3e:c7:
fd:ec:16:cb:73:ee:c5:49:5e:33:ee:57:ce:98:a6:90:17:dc:
2f:6d:90:a7:bf:0e:80:c4:81:11:a8:5a:ca:fa:03:88:a5:88:
55:cd:54:ab:d9:ff:a3:a8:23:58:d8:8f:e6:5b:74:b0:06:83:
f2:5c:6a:6b:89:c9:2a:e2:5b:ab:56:df:4d:ce:7b:15:c7:91:
40:dd:a9:5b:56:e9:8a:ac:13:8e:e8:63:b9:a2:4b:3a:98:57:
c9:4d:48:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:34 2025 by rpki-client