Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
File: yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft (raw, json)
Hash identifier: 7qrChWYchyCBn2p0/+iKK/FlLkK9TvbL9hJRdO3sJ1A=
Subject key identifier: 21:A9:9F:BC:7F:CE:A8:0D:E9:C8:34:8F:08:69:E6:55:00:68:CA:D0
Authority key identifier: C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
Certificate issuer: /CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Certificate serial: 0197B9A15322288EE5228228D25F22A79949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
Manifest number: 129E
Signing time: Sun 29 Jun 2025 03:00:46 +0000
Manifest this update: Sun 29 Jun 2025 03:00:46 +0000
Manifest next update: Mon 30 Jun 2025 03:00:46 +0000
Files and hashes: 1: qaAnyBes9jUnUhuZgA6_0wh2Utk.roa (hash: SqePUXPFn7aMkbwwWNRWIjpMhjMen/HlDEhNyjcwe8Q=)
2: yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl (hash: QSntZy7yyFnZPevCQ3TPW5Jlj54QaXGSMNgHmGzFmFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:53:22:28:8e:e5:22:82:28:d2:5f:22:a7:99:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Validity
Not Before: Jun 29 03:00:46 2025 GMT
Not After : Jun 30 03:00:46 2025 GMT
Subject: CN=21a99fbc7fcea80de9c8348f0869e6550068cad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:83:63:2a:d5:5e:e5:bd:aa:0d:2e:88:12:08:
ec:85:7b:fa:f9:1c:9b:2e:79:55:70:5f:a6:6c:75:
c2:b9:bf:63:7d:3f:05:64:ba:8d:07:b6:6c:e4:b3:
1f:7b:8a:f9:50:9a:72:d4:9d:ff:8c:75:de:c1:4a:
5d:4d:72:4e:ac:d1:12:b3:7a:c9:97:bb:af:55:03:
38:e7:bc:fb:2f:9b:db:f5:40:5f:78:2e:0a:b0:0b:
67:59:1d:c0:76:8b:e6:7d:db:54:ec:b5:77:02:d3:
e0:3d:71:e5:a7:7d:0e:18:fa:11:21:a3:b1:44:84:
95:2c:3b:fa:83:4d:29:53:a6:86:0f:36:0e:a4:33:
ea:01:b0:b1:8e:97:a4:a9:39:62:4c:7e:f9:ae:f1:
14:ce:fa:75:7d:a6:54:0f:af:66:71:b6:55:b1:61:
a8:99:61:93:42:62:c6:c3:59:e2:c3:52:7a:ce:c7:
71:1e:f9:d6:05:5f:eb:d6:43:9d:93:0d:1d:b5:4c:
ce:b0:e6:4a:3d:6f:47:6a:0b:95:07:31:38:43:74:
5d:5a:ad:53:8b:24:32:0a:f2:1c:8e:b7:24:80:12:
ff:86:18:d7:23:09:29:c5:f2:dd:b2:de:3f:51:e0:
2e:04:c5:98:bf:16:00:75:00:50:0d:86:38:55:78:
33:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A9:9F:BC:7F:CE:A8:0D:E9:C8:34:8F:08:69:E6:55:00:68:CA:D0
X509v3 Authority Key Identifier:
keyid:C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:2b:c6:14:3a:cb:05:aa:b8:8c:c2:29:fb:44:5b:3a:af:23:
f6:3c:e4:6f:e6:74:23:78:ba:f3:82:e7:86:23:93:e0:5d:0e:
e3:14:bc:e7:14:7c:ac:c2:d4:e8:38:28:5b:8c:20:ef:02:0f:
bb:31:73:d2:cb:fb:88:f0:cc:19:29:f8:f1:ef:88:a1:ad:a2:
36:bf:ef:41:01:96:f3:e8:d2:a5:f8:e9:19:b2:7d:0d:39:54:
4e:99:a7:bf:3f:71:25:51:6e:73:73:b2:19:75:40:36:fb:b7:
1e:94:61:28:23:9e:e7:6c:f0:33:fe:cf:01:11:12:3d:8a:70:
d4:13:e4:2b:fe:07:9f:eb:24:66:90:46:db:37:86:a6:41:49:
f0:47:75:14:83:33:7b:63:3e:d5:b6:ed:67:ac:e2:4c:ed:60:
f2:90:d7:ab:1d:10:77:6e:2f:84:12:f5:13:65:13:c5:a0:dd:
29:a6:d2:bf:ab:8c:7b:27:d9:e3:17:41:46:4b:52:26:34:a8:
2d:72:46:9b:77:ac:5a:6d:1a:41:f4:c6:58:db:0c:92:07:3d:
01:cb:e2:11:2a:f9:0e:8b:97:ae:57:26:6a:02:68:a7:e6:d1:
50:f1:6b:78:f5:07:77:47:12:59:47:9f:f7:83:c8:26:a4:24:
cd:2a:64:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:51:54 2025 by rpki-client