Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
File: yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft (raw, json)
Hash identifier: uGP3A02wV0cP2T6cxGEjmDPDNmeljj5BYwHAl+fOdEI=
Subject key identifier: 27:8E:92:5D:E3:4B:FD:BA:41:93:C9:E4:31:D7:1A:3C:03:6A:CD:A4
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Certificate issuer: /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial: 0197488CBD9B85E7B6FC83B397195D18CCBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
Manifest number: 1582
Signing time: Sat 07 Jun 2025 04:01:12 +0000
Manifest this update: Sat 07 Jun 2025 04:01:12 +0000
Manifest next update: Sun 08 Jun 2025 04:01:12 +0000
Files and hashes: 1: 2q7qFO0SAjMdaNENG8krQrfpEsw.roa (hash: MRyfRcQ3vFTbqLu3EtrXWQ8bXorq49HiuJbhIqPCu2k=)
2: qdjN7PwUTgcUnjjFAlonTerXwAE.roa (hash: VbOA5tJgv2XPJFvDfrmwF7dfcvJwsiBE98hvS8Guihg=)
3: yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl (hash: b3iK1iSrALro0HmSlXRWKuDy+KImeE8DlZ72Bui/hdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:bd:9b:85:e7:b6:fc:83:b3:97:19:5d:18:cc:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Validity
Not Before: Jun 7 04:01:12 2025 GMT
Not After : Jun 8 04:01:12 2025 GMT
Subject: CN=278e925de34bfdba4193c9e431d71a3c036acda4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1c:18:5c:65:c2:17:12:40:62:4d:4f:bb:10:
ea:88:79:45:9a:f9:b8:5c:9e:ac:d8:b3:b1:eb:90:
8b:9c:72:42:9b:dc:73:1c:da:b4:4f:87:04:9b:05:
03:88:d2:4d:61:21:97:10:bd:63:6c:1c:7f:7b:74:
3d:f7:20:32:b8:4f:5c:17:6e:bf:59:a7:82:db:ff:
3f:4d:de:95:3a:1b:0c:04:d2:10:0d:6d:cc:51:ea:
92:7c:74:24:48:9d:7f:d7:29:b3:8d:8f:41:fe:28:
e3:ff:90:44:f1:f2:4e:6b:1d:db:d0:b5:ab:d5:13:
63:c0:82:7c:cb:2c:ce:a6:8e:eb:51:18:24:c7:35:
97:47:a0:f2:00:8b:37:b4:0a:f2:46:13:9d:01:3e:
b5:7b:78:8a:c0:c9:5a:05:44:be:a4:c6:f0:64:b3:
83:9b:01:ea:dc:99:c2:03:57:74:83:08:87:25:38:
b1:fb:53:b4:3e:18:82:31:54:8a:b4:70:58:eb:75:
5b:12:4a:02:bf:01:de:53:14:6d:36:f6:5e:94:93:
b3:6f:69:91:12:d5:32:67:ef:10:8e:90:1e:a6:b7:
c4:10:a3:a1:39:21:c2:34:89:c9:76:99:b7:94:36:
6b:5f:d7:71:69:71:0e:87:b5:04:ed:5c:fa:9f:26:
9c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8E:92:5D:E3:4B:FD:BA:41:93:C9:E4:31:D7:1A:3C:03:6A:CD:A4
X509v3 Authority Key Identifier:
keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:83:0c:b0:cf:d3:79:5e:9e:01:3e:e7:66:90:21:b3:22:0c:
be:4b:cb:f0:8f:ea:58:79:0b:8d:8f:70:c3:9a:f6:b9:79:97:
af:8f:ce:40:06:91:ea:39:bf:78:07:13:86:90:b4:f0:54:61:
89:b9:77:e2:22:0b:bb:63:7d:6f:fb:3d:36:97:51:8c:2f:3a:
e0:f1:f5:f6:ac:bb:5b:b9:b8:3d:a7:b2:df:27:22:07:a5:44:
61:91:ee:2b:26:74:de:26:9b:01:d3:88:47:99:92:c3:9f:40:
16:8a:85:6c:3e:c0:95:29:e2:7c:49:41:19:3a:36:4d:62:a2:
2a:20:ae:7f:b7:d8:ae:ac:b8:1a:70:dc:ec:69:23:1b:21:55:
21:80:74:55:14:95:6e:6f:b3:46:74:6d:34:06:cb:a5:50:19:
68:81:fa:42:b0:1d:c3:79:ba:54:13:74:ef:b7:16:82:d8:07:
96:13:86:04:15:f2:19:13:d7:a2:da:04:5d:1d:9f:30:05:f7:
39:77:b1:5c:0f:c6:3c:f7:be:6a:2e:73:26:f2:8c:80:85:7b:
9a:29:62:45:2f:c7:49:fd:97:e5:fc:d4:d4:95:1d:f4:0d:b6:
6b:3a:9e:c4:07:93:21:c5:52:3b:56:5e:23:ce:68:14:4b:d5:
64:e7:f8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:55:58 2025 by rpki-client