Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
File: Y2NsO-9V0SpkU2twEwp09T9E1tA.mft (raw, json)
Hash identifier: 1YCaymdUFgRZgwZQHooJ7aYFvG6BosDYOBup+JFoZ8U=
Subject key identifier: 13:D3:B6:43:43:DD:89:10:C7:98:82:4F:DA:52:E5:EF:0E:2D:00:23
Authority key identifier: 63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0
Certificate issuer: /CN=63636c3bef55d12a64536b70130a74f53f44d6d0
Certificate serial: 0197B82141AF44E94B8580EE1DA2F0B04776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
Manifest number: 079F
Signing time: Sat 28 Jun 2025 20:01:16 +0000
Manifest this update: Sat 28 Jun 2025 20:01:16 +0000
Manifest next update: Sun 29 Jun 2025 20:01:16 +0000
Files and hashes: 1: DtOZa_QnwbfCZcw6Ri25L5g5nKw.roa (hash: gPjF2bHK3b5JRNcNAuMcqGVmU2CAaScFraaS80Iy5UA=)
2: Y2NsO-9V0SpkU2twEwp09T9E1tA.crl (hash: M9h/fIu8nu53wKi0gfAxiBBY6cnFv/uXqFV5OC8t8tU=)
3: e9Z_8CtChGt4iClYaH_YgcqeT1k.roa (hash: 2K2jsaRk3MeR/R/Hwsml8Lc+ehwc8rBqNjGIvU2lgG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:41:af:44:e9:4b:85:80:ee:1d:a2:f0:b0:47:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63636c3bef55d12a64536b70130a74f53f44d6d0
Validity
Not Before: Jun 28 20:01:16 2025 GMT
Not After : Jun 29 20:01:16 2025 GMT
Subject: CN=13d3b64343dd8910c798824fda52e5ef0e2d0023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6f:9c:bb:6e:7b:ec:8a:97:a4:bc:77:9b:3d:
f1:c6:e6:2f:da:de:41:e5:8f:9e:e5:76:c2:62:ba:
f8:2d:61:4c:df:21:76:ae:97:07:e2:ac:3a:d7:e4:
cd:ea:f8:df:fd:14:c0:76:ad:68:44:a6:d6:64:61:
a5:d9:0a:14:d1:ce:d2:cc:6c:11:e5:66:47:64:07:
bc:51:6a:f0:91:4c:06:53:ac:08:44:ac:e1:c2:ce:
ce:41:58:c9:a5:be:58:55:9b:c6:c9:bf:64:6d:b6:
7e:f9:10:13:cb:dc:41:c6:e1:2f:cb:81:3c:7a:c3:
f6:bc:99:2d:10:b8:e9:b3:53:12:25:f9:ab:a0:ab:
ed:7e:ee:43:2e:99:a2:40:ce:f5:13:28:6c:74:41:
7e:e4:05:11:63:fb:e8:79:44:ea:0f:6b:c9:29:ec:
09:70:15:1b:0a:48:56:2c:96:21:21:ad:95:8c:fd:
45:c9:45:a9:22:3d:93:c5:60:4e:ef:18:66:02:bb:
98:c4:ae:2c:d1:55:8f:a7:b0:bb:75:1e:36:f1:41:
7c:26:0e:db:73:a9:de:05:94:6f:8b:80:85:a4:dd:
17:79:cd:50:60:a6:ca:07:d9:5e:92:54:23:a1:a4:
f7:ed:5e:9a:27:72:7b:d5:72:e5:fa:56:e5:90:98:
ed:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D3:B6:43:43:DD:89:10:C7:98:82:4F:DA:52:E5:EF:0E:2D:00:23
X509v3 Authority Key Identifier:
keyid:63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:6b:43:6d:be:0d:7e:74:bb:c5:50:26:42:9e:78:9e:fd:17:
99:ce:6b:14:3b:47:ef:4d:3b:4f:eb:99:5e:fd:c6:09:24:ec:
6d:c3:ab:20:e8:5e:48:df:79:ad:87:6e:74:f0:b5:39:8d:e1:
fb:b5:96:b3:69:71:64:bc:88:10:e8:59:c0:a7:d4:ae:05:cf:
eb:cd:f8:cc:35:e3:99:8d:65:06:c1:2d:96:dc:d2:bb:3f:3c:
da:0b:c9:15:73:af:6a:10:04:47:2f:ff:f6:05:41:8a:f7:5d:
67:9b:39:41:54:79:80:1f:61:80:60:c5:d4:b9:95:e7:a6:b8:
95:97:e8:7c:e1:a5:12:f4:73:9f:c0:83:b6:6f:4e:3f:51:f6:
35:cc:ca:1d:f5:a5:89:66:40:72:fd:d2:eb:9e:17:ea:f4:a9:
c7:99:a9:28:47:3e:10:c7:6e:dd:2b:83:81:0a:e5:b0:68:72:
46:ac:9e:87:c3:28:9b:cf:f8:3c:7b:bd:96:8e:c0:68:41:bc:
69:5c:96:8f:04:21:85:73:67:3b:6a:d5:1f:8d:aa:9e:ae:04:
88:51:d7:be:3b:20:c3:d8:d2:0e:b7:52:b7:00:20:f2:ff:92:
74:bb:b5:07:3e:a5:d8:6e:e2:91:1f:37:c9:a8:dc:52:95:f8:
f0:f4:8c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:32:59 2025 by rpki-client