Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
File: ydSf722tJmGevuBl0fIxwaJ2198.mft (raw, json)
Hash identifier: dP4AETetlD6iETRH5+pitBA35eMvJpqZ0w0Jqx3b+vE=
Subject key identifier: 94:EF:DF:C8:BA:DC:B8:75:B9:91:BB:26:C0:07:B4:7C:E0:3F:CE:FE
Authority key identifier: C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
Certificate issuer: /CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Certificate serial: 0197B9A166D75B47A3265D617126F8907076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
Manifest number: 04D8
Signing time: Sun 29 Jun 2025 03:00:51 +0000
Manifest this update: Sun 29 Jun 2025 03:00:51 +0000
Manifest next update: Mon 30 Jun 2025 03:00:51 +0000
Files and hashes: 1: Rxg5b8TVQSPFdWFOKvBN85kybDA.roa (hash: UtF92U/9meAF41tjwSEGw6eGscll7EeWN/zVkMTCT2M=)
2: UZjE-GQgoU3nRLnq0ZWQAXM992o.roa (hash: Ph8txzTNR1zk2KVvrV6FeKKiPwZkYzUc7t042+8KNcY=)
3: ydSf722tJmGevuBl0fIxwaJ2198.crl (hash: h9Zw5C8JqF3+fh+mIEVaTZuRBlIWMxnm77mExMLHIoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:66:d7:5b:47:a3:26:5d:61:71:26:f8:90:70:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Validity
Not Before: Jun 29 03:00:51 2025 GMT
Not After : Jun 30 03:00:51 2025 GMT
Subject: CN=94efdfc8badcb875b991bb26c007b47ce03fcefe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f7:3e:c5:b1:d6:ee:4d:08:77:72:81:04:21:
ae:15:b5:82:a2:6f:ca:50:90:5e:76:a0:71:71:7f:
d9:1a:d6:d2:03:f0:d9:bf:a5:79:99:06:28:f2:ad:
4c:27:2d:99:62:62:12:be:68:4d:c0:b0:a7:e6:bd:
20:b0:03:4d:44:c6:7b:4b:3e:7c:38:a2:96:38:10:
e4:49:06:e3:24:aa:d6:fc:51:15:bc:b6:31:d6:97:
64:fc:95:31:57:0a:a9:65:ab:de:80:65:8d:16:f5:
f5:9e:22:61:29:07:3f:cd:c2:77:99:73:9f:d2:85:
d3:0d:6b:84:23:3c:3f:f3:0c:0d:58:e9:76:d0:7c:
36:02:c9:e6:bc:5b:55:04:cf:54:c4:08:75:92:a4:
4e:7b:2c:b1:64:c3:8b:f9:a7:ea:4b:5c:87:81:11:
70:ac:69:34:b2:8d:e6:2c:da:7b:04:86:53:e3:c8:
ec:6a:90:ea:f6:04:43:4a:f8:18:e7:76:67:0b:e0:
84:c7:96:8c:8f:22:56:ff:ec:73:46:93:49:7c:1b:
68:ce:49:36:8f:eb:ee:12:b7:42:b3:40:02:64:20:
eb:20:2f:e7:54:2a:a2:76:1a:b7:9b:09:3c:06:cc:
b9:07:4e:f0:af:12:6e:03:ff:d0:a9:2b:18:1c:fa:
2a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EF:DF:C8:BA:DC:B8:75:B9:91:BB:26:C0:07:B4:7C:E0:3F:CE:FE
X509v3 Authority Key Identifier:
keyid:C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c6:a4:09:fb:93:af:6e:5a:9b:d9:c3:a1:15:c4:e8:3a:ca:
2e:f8:3f:85:fb:f3:2e:21:1f:68:c7:e1:2a:76:91:52:0f:13:
68:bc:00:9f:32:b5:30:2d:6c:db:47:6e:ab:f5:3f:5a:a7:a3:
83:1e:89:15:08:3b:2b:94:5a:45:a9:41:f0:76:38:cc:e7:7d:
53:c3:30:e7:02:01:03:ed:9f:f3:3b:15:14:f1:41:f1:74:f7:
44:3d:87:8d:06:f4:58:ed:07:7f:66:51:ad:81:96:29:cc:77:
a7:85:66:15:e9:9d:ef:20:c3:cf:a2:76:ec:20:c4:9b:20:d7:
60:2d:3f:34:36:e0:b0:69:2f:72:53:61:d8:e4:4f:c3:2b:f7:
50:d4:23:ec:ab:3b:68:e8:ec:e0:c6:d8:83:2d:52:fc:bc:4c:
c7:5b:4c:74:9d:66:9f:f9:11:24:c3:21:8e:5d:f4:5f:53:57:
88:f9:58:94:f9:f2:ac:04:23:fd:9e:2e:6d:a6:cb:fe:90:d1:
7e:7b:dd:21:be:66:a7:f5:64:96:9b:73:3c:ab:f5:69:c3:bd:
75:48:ed:6e:85:e2:98:f9:7b:4a:b7:0a:e0:ec:fc:9b:90:8d:
09:0a:34:4b:30:a5:dd:e0:0b:c1:86:df:e2:05:9b:1d:0e:97:
7e:8f:00:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:03:06 2025 by rpki-client