Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
File: Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft (raw, json)
Hash identifier: WanfnyVr1TaR0RdXYKSp92c8vjVOxLHPxH5vtAWUPow=
Subject key identifier: B3:CC:C6:B6:9B:D1:A4:E5:98:6C:D8:3A:52:F0:13:F2:04:96:12:10
Authority key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
Certificate issuer: /CN=632e3d037bf0507571b2a068cb90308374ce53ed
Certificate serial: 0197B70EC9FB2DF0059FFA6E75AAC0A4D2F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
Manifest number: 07E2
Signing time: Sat 28 Jun 2025 15:01:29 +0000
Manifest this update: Sat 28 Jun 2025 15:01:29 +0000
Manifest next update: Sun 29 Jun 2025 15:01:29 +0000
Files and hashes: 1: U47KHWtk8fl1zeBfptx2dxwuW-0.roa (hash: MCpZ0AwLfoDIQ9+ASI13wQUEawZmPsd+gtRUPbEtBbI=)
2: Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl (hash: Hd4gOjk6vuMzQkNyJKlVM6AUbUA9tB/LMgroDtxlHJc=)
3: yMbSdUOBKCqn_NswdvutijlK684.roa (hash: K0IjYQFHztO8K2x6H3KgphHn4JSijnZlB4Ox3bR44Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c9:fb:2d:f0:05:9f:fa:6e:75:aa:c0:a4:d2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632e3d037bf0507571b2a068cb90308374ce53ed
Validity
Not Before: Jun 28 15:01:29 2025 GMT
Not After : Jun 29 15:01:29 2025 GMT
Subject: CN=b3ccc6b69bd1a4e5986cd83a52f013f204961210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:53:20:79:71:f5:56:10:ae:e8:a2:26:c7:1d:
05:01:c9:eb:71:eb:d5:fe:0a:ce:9e:77:e7:0f:67:
a3:f8:98:3d:12:aa:c1:e1:7c:b6:40:80:95:9b:af:
9d:9c:ad:48:c2:d6:17:5f:75:96:da:34:de:3f:14:
e9:25:bf:ec:bf:59:7e:e4:fb:41:da:88:5e:59:5a:
0d:5b:75:aa:bb:43:f8:7e:83:4f:58:a0:d9:a2:00:
c3:5d:3d:b1:35:8e:fa:72:fa:e6:bd:4c:e0:7c:cd:
9a:84:1d:45:2f:7c:20:0f:79:94:81:39:3b:03:d2:
3b:e8:d2:20:53:35:62:5f:7a:c8:83:1d:15:9e:11:
92:4c:f7:0c:5b:2f:fc:93:6a:b5:cc:92:61:4f:57:
52:41:2b:38:7a:84:de:9d:c3:d2:33:44:4e:e5:8c:
3b:a3:c6:a2:ef:60:2d:2d:f8:53:a4:ec:ef:00:28:
a1:38:22:e1:a1:20:97:f2:32:27:46:a5:6d:d5:96:
41:5c:5a:a4:af:e1:19:64:c3:b2:62:7d:20:04:24:
bb:2a:4a:f5:c2:00:ff:ea:21:d7:2c:7a:30:8d:0a:
bc:8f:20:26:d4:9b:73:54:23:55:98:07:81:ce:75:
c1:72:2a:ea:da:61:9e:a4:2e:db:d6:7a:01:76:0c:
bf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CC:C6:B6:9B:D1:A4:E5:98:6C:D8:3A:52:F0:13:F2:04:96:12:10
X509v3 Authority Key Identifier:
keyid:63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c4:fd:af:8f:3c:ab:fa:c2:81:42:9e:70:b1:cc:5a:40:34:
ff:4c:48:3d:dc:9d:96:45:b8:67:af:01:2e:86:3c:bf:21:c1:
eb:6e:ad:f3:f7:c1:f2:dc:da:d7:e2:9d:91:ea:56:64:7d:d7:
fa:0d:8d:7f:d4:1c:a3:27:12:63:e8:43:80:31:8d:ee:70:5e:
1f:30:8a:00:bf:0a:bc:85:5d:69:59:15:ad:31:02:28:2d:f5:
2d:88:73:b9:49:3f:ff:62:26:0c:2f:a8:49:ae:c0:af:c2:47:
81:d2:97:b3:a6:29:b4:c9:c4:eb:22:29:f4:66:74:92:6a:01:
96:96:74:9a:6c:1f:99:0b:14:bb:8d:ca:19:a7:4f:ec:80:18:
9a:da:67:44:fa:72:23:74:be:fc:5d:e1:e9:aa:69:01:12:7a:
37:aa:66:20:c5:17:03:8f:81:d0:7f:60:19:28:c0:d6:8c:97:
cf:7d:9f:79:6c:68:47:46:a6:d9:d8:68:00:0a:d1:69:83:16:
a2:93:e3:71:d6:4d:02:33:23:25:37:f8:fd:6b:13:f7:93:7d:
27:1e:69:56:c0:66:e7:80:59:05:6c:20:77:ca:24:85:7c:2f:
a0:6e:75:0c:dc:7a:ba:45:41:b0:70:e1:2a:e8:01:07:7e:53:
f6:c0:f1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:26 2025 by rpki-client