Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
File: YsX8533eTi7k_WU1EAUpwvRE15o.mft (raw, json)
Hash identifier: 49VZJC2DLtqqaU4NtuNAoehwrHcaBmUx5BOjxiT+Czc=
Subject key identifier: 67:CB:FA:55:33:42:AD:63:6F:EF:76:37:4B:B4:EE:65:88:84:6D:1E
Authority key identifier: 62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
Certificate issuer: /CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Certificate serial: 019738AB3EC30290966AADEE5D196A6A3AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
Manifest number: 1573
Signing time: Wed 04 Jun 2025 02:00:35 +0000
Manifest this update: Wed 04 Jun 2025 02:00:35 +0000
Manifest next update: Thu 05 Jun 2025 02:00:35 +0000
Files and hashes: 1: HKNH5qVY82EVhwf41jFwu0WLXWQ.roa (hash: lq97v+q7hVfTasgsk/QjtVrEG9iM12Kuyq3A6kQDZ7s=)
2: YsX8533eTi7k_WU1EAUpwvRE15o.crl (hash: mA9ayt3+hzpKPdjc1irXgIqtQ0qC9EHX78q04NxQ2Xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:38:ab:3e:c3:02:90:96:6a:ad:ee:5d:19:6a:6a:3a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Validity
Not Before: Jun 4 02:00:35 2025 GMT
Not After : Jun 5 02:00:35 2025 GMT
Subject: CN=67cbfa553342ad636fef76374bb4ee6588846d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fe:ea:15:71:bf:e0:c7:53:d3:d8:d2:3e:0b:
4d:c3:58:a7:fe:06:23:ad:dd:bc:97:ad:7d:36:4a:
65:c6:45:8d:cd:58:b0:16:1b:72:c2:80:c7:5c:68:
e0:1d:16:6d:8c:05:5d:57:c0:c2:be:83:99:94:dd:
d0:63:1c:ed:5a:e8:43:6c:38:23:79:0f:2c:eb:10:
af:21:90:63:55:50:bc:d0:2d:0a:be:75:3c:23:af:
74:1a:55:46:85:f8:83:56:06:71:2b:92:49:b6:d7:
f4:dd:45:cb:7c:f0:8c:14:15:af:91:8e:66:d4:43:
d3:b3:6c:25:7a:5a:e3:66:df:09:0f:a8:19:fb:83:
ed:c7:49:d4:64:dd:fc:86:eb:7a:ad:87:5d:7a:b9:
53:9e:de:03:8f:0c:26:a9:f1:72:99:89:79:d6:39:
f7:71:d6:92:12:03:15:66:76:2a:f3:08:7d:03:84:
28:fb:5e:73:06:2d:19:6b:4e:1a:ce:97:f6:57:b8:
12:9c:1a:63:e6:aa:45:c7:63:1f:f6:c6:86:89:97:
d0:3d:c6:e5:c6:bc:a5:ec:bb:ed:ba:4b:0a:85:37:
03:a5:aa:79:8f:89:6f:55:95:dc:a0:85:16:f8:b7:
81:06:6d:8d:2b:66:be:5f:32:e9:6e:4d:34:e3:d2:
55:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CB:FA:55:33:42:AD:63:6F:EF:76:37:4B:B4:EE:65:88:84:6D:1E
X509v3 Authority Key Identifier:
keyid:62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:98:d5:b9:02:df:0d:01:00:04:d0:19:96:fd:52:fc:8e:b2:
74:8b:a9:49:6e:2c:cd:98:66:e7:36:f5:49:8c:0d:f8:ce:51:
df:b8:7d:c8:bb:53:f6:a9:1d:9c:ad:87:2e:00:d5:c9:a3:8b:
56:8c:f9:84:d1:ea:63:c7:2f:c9:5d:4a:2f:38:40:bf:fd:67:
7d:14:d4:83:a0:00:8d:cf:71:4d:0d:a6:f5:75:7d:4a:74:ed:
1c:5e:c8:66:6c:31:4d:29:42:7d:84:90:63:80:bc:2b:a6:7b:
61:d9:59:15:04:c5:3a:1e:dc:fc:ac:d1:85:57:9a:54:33:12:
7d:5e:24:36:d1:4f:58:88:79:7d:0f:b5:d3:9d:00:d7:a3:33:
72:eb:0d:43:c7:ae:5a:a9:08:fa:aa:7d:a0:77:a4:55:02:e6:
58:89:4a:3e:83:f8:6d:64:6f:88:33:44:52:03:fb:05:f2:45:
12:d7:0b:38:1f:20:c8:64:f3:01:75:3e:8c:3d:7f:8e:4c:ee:
db:b5:88:b4:a6:d1:54:e3:54:c3:85:ff:00:ab:9f:ee:8c:e8:
a8:17:fb:0b:90:8e:cb:3b:fd:67:89:78:25:1e:c7:af:e1:9e:
a0:5e:9b:0a:e4:52:7b:f9:6e:51:2e:bc:7b:12:b9:36:14:48:
15:da:83:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:36:46 2025 by rpki-client