Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
File: 0627YSN4H_DjVBNEaseTHP9KSQ0.mft (raw, json)
Hash identifier: FZR8Q8Wpo/ITDpuRB918PKhqZdl1u+15d5iY2n6H5wU=
Subject key identifier: 06:40:09:82:B2:AE:98:FC:E4:24:B1:73:0D:EB:CE:4F:B6:17:E6:25
Authority key identifier: D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D
Certificate issuer: /CN=d3adbb6123781ff0e35413446ac7931cff4a490d
Certificate serial: 0197B9A1B04572DFA7DA2BCB961B59CD5596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 03:01:10 +0000
Manifest this update: Sun 29 Jun 2025 03:01:10 +0000
Manifest next update: Mon 30 Jun 2025 03:01:10 +0000
Files and hashes: 1: 0627YSN4H_DjVBNEaseTHP9KSQ0.crl (hash: p0sqSBk9tr+a3/jD9gy52m7IkGud62g/3bBxJuyrJKc=)
2: yWi1Y-nakOmyfRqesRZIzBZCSpo.roa (hash: XIYZfLdl8kZlRiSAj90PT17pvRJ8h9U9zRjI6i+BCkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:b0:45:72:df:a7:da:2b:cb:96:1b:59:cd:55:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3adbb6123781ff0e35413446ac7931cff4a490d
Validity
Not Before: Jun 29 03:01:10 2025 GMT
Not After : Jun 30 03:01:10 2025 GMT
Subject: CN=06400982b2ae98fce424b1730debce4fb617e625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d4:5f:cc:03:10:b9:19:cb:81:f0:9b:1b:2f:
e8:47:30:80:a5:a5:b5:c7:0e:79:e2:03:8e:7b:68:
e7:dc:ea:c5:07:89:62:40:91:44:bf:bd:38:50:f3:
09:8b:0f:8a:3e:d5:3d:d6:a4:d9:33:e1:63:17:24:
81:17:04:d8:80:c3:0b:b8:f0:03:a6:51:c7:81:0e:
96:6e:20:0b:fb:99:64:00:a8:6f:82:f4:44:47:e0:
65:65:0e:b4:c3:0d:55:ba:e6:19:a5:f5:da:4a:f3:
93:b2:68:92:65:70:5b:f7:a9:38:fa:9b:8a:4c:0e:
3d:08:55:41:8b:9c:97:a9:8e:5d:1d:f1:de:72:ea:
9e:f4:f4:45:33:81:6e:72:42:79:e6:8e:24:42:30:
55:5a:4c:ec:6c:aa:4b:e4:1d:4c:34:c4:2e:1b:03:
75:05:7c:62:e2:4f:18:bb:a0:4d:b4:36:c3:4e:6d:
be:1a:07:fd:67:1a:25:9a:44:e0:61:a8:b3:45:80:
6a:66:b2:07:dc:c3:74:44:6d:34:d4:a0:65:15:17:
97:89:d3:d2:59:0c:06:78:0e:7e:09:51:3b:2d:5c:
88:58:5d:51:fd:39:3b:a0:69:41:4d:02:05:e0:14:
df:b5:c1:47:60:d3:e6:dc:fa:8a:7d:4f:01:18:58:
be:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:40:09:82:B2:AE:98:FC:E4:24:B1:73:0D:EB:CE:4F:B6:17:E6:25
X509v3 Authority Key Identifier:
keyid:D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:99:88:f9:9c:ca:8e:b5:a5:1f:8d:78:fa:b7:3b:ca:11:cd:
30:5f:fe:60:3e:ac:33:d3:5e:14:e2:22:f8:51:d4:f3:1c:0d:
53:9e:60:bd:cd:ce:cf:b2:ef:cc:48:52:7c:b4:6f:ba:c2:1e:
e5:bb:0f:69:33:3d:05:81:9f:54:56:00:f2:c4:0a:ea:0f:f9:
dc:7e:d6:70:ca:ab:bc:e8:f3:21:bb:38:54:99:ec:d4:a4:da:
97:16:16:e5:53:78:bd:47:80:79:d5:d2:91:92:a4:aa:9f:a5:
90:62:38:c6:af:f1:21:20:bb:19:3a:a0:00:33:50:3e:f3:fc:
80:d8:ec:66:1c:4c:ce:e2:13:6e:3f:63:ac:8e:e1:ec:4d:c8:
1b:81:da:cb:7b:47:d1:f7:83:5b:2d:ca:f3:ca:14:55:93:f0:
21:26:44:de:c7:43:1e:c3:fc:18:d7:bc:a3:ad:1a:39:6a:6d:
57:31:c3:33:76:a0:ff:52:e9:96:87:4a:69:1d:33:23:e7:44:
03:79:65:9e:24:2b:87:da:3b:1d:c9:49:ec:12:45:ef:32:dc:
37:71:ef:0d:c9:e6:e4:5d:56:f7:89:29:c7:0c:42:ef:fb:1c:
be:1a:d8:ea:5d:3b:40:df:d1:0d:7a:64:31:4d:ff:d7:72:b5:
4f:55:4e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:37:14 2025 by rpki-client