Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
File: yliutBKfjiybxCzRkYXI1_Dm6vk.mft (raw, json)
Hash identifier: IjQLVILoW5OKUY5yyfOZBT7ohH3W416kE7LNVyJ7YPs=
Subject key identifier: B5:51:1C:38:14:75:E4:6B:F4:DC:92:DC:C5:18:93:F5:36:FF:BC:A4
Authority key identifier: CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9
Certificate issuer: /CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
Certificate serial: 01974B8D3C32FAC3A057F92B2F1E76E39E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
Manifest number: 063F
Signing time: Sat 07 Jun 2025 18:00:36 +0000
Manifest this update: Sat 07 Jun 2025 18:00:36 +0000
Manifest next update: Sun 08 Jun 2025 18:00:36 +0000
Files and hashes: 1: 0HTDBk5MYK2X7vH3zirTqZcpE2s.roa (hash: Sj1nNxaVvmVnP+tRZkLAz31ImmjJvQaxWp+RCkXDwnM=)
2: WfvC6123xfKENVd-zb3XlASAszo.roa (hash: 6SvW+m32iHXt+VqGMoFD6E0jUHXyHvqrZQ85os+ovbw=)
3: yliutBKfjiybxCzRkYXI1_Dm6vk.crl (hash: Ksv/8as8RIDfCs9mmUPGyK9TP2izXXDi+SSpaUyhKX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:3c:32:fa:c3:a0:57:f9:2b:2f:1e:76:e3:9e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
Validity
Not Before: Jun 7 18:00:36 2025 GMT
Not After : Jun 8 18:00:36 2025 GMT
Subject: CN=b5511c381475e46bf4dc92dcc51893f536ffbca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:29:bf:03:f8:cf:0a:28:d4:0d:de:0a:de:8f:
7b:9f:4e:1c:a3:8e:db:dc:8d:d3:bb:1d:80:ba:57:
bb:d8:78:0c:ee:d6:42:ae:c3:cb:f1:ee:d7:a5:81:
3d:f6:cc:ee:19:4e:37:dc:f5:13:cb:98:90:50:d6:
6d:b0:72:68:c2:00:ff:96:b7:be:06:00:b1:38:9e:
d7:e2:fc:00:b1:5b:b7:26:b2:8c:72:f6:fd:78:11:
ed:59:70:74:60:ce:7b:5f:de:73:b1:d9:29:a3:5b:
b2:ca:85:cf:58:02:02:ff:87:bc:38:0e:fb:f3:dc:
fd:09:7f:6e:8c:64:8c:04:84:ff:ad:06:f1:98:13:
1c:45:33:29:73:f7:62:85:e4:4e:94:b4:eb:93:37:
c1:f7:07:ad:af:46:06:14:53:f4:13:7d:81:15:d9:
bf:fa:3e:4e:71:15:4a:04:d1:53:b5:01:1e:3f:9a:
e3:3e:4b:b4:eb:d1:ce:8e:02:84:f0:7b:d7:8a:ae:
96:b0:6b:ea:ad:6e:05:14:20:e5:e7:b4:37:ec:52:
3c:56:ce:cd:4e:37:0c:83:0d:69:4d:06:9e:15:40:
50:39:7e:52:83:b7:1a:77:4e:71:f2:36:e6:a0:c7:
63:54:c6:f5:40:2b:74:c7:10:55:d4:b0:d7:77:5d:
47:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:51:1C:38:14:75:E4:6B:F4:DC:92:DC:C5:18:93:F5:36:FF:BC:A4
X509v3 Authority Key Identifier:
keyid:CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:3a:83:c5:28:c9:13:1e:91:63:53:b8:fb:27:2b:34:87:a4:
96:f8:7f:e1:51:7b:08:5d:5d:ca:b2:ab:f6:10:eb:59:a8:65:
7b:90:8c:ae:a5:ae:28:10:16:8a:be:a5:1d:d2:d2:e0:26:b0:
e5:94:c4:b6:39:5e:73:fa:81:36:39:75:6b:40:80:bd:0f:76:
d7:ae:0f:f6:84:a5:ff:21:48:d0:a8:24:2c:a7:c5:fe:37:a1:
22:c9:b0:26:35:05:48:e6:61:3a:1b:ec:9d:a2:a8:40:8c:c7:
56:7e:f5:8f:c5:6d:43:c8:5e:5a:12:af:cf:98:64:27:96:c1:
0f:dc:31:88:42:83:79:8f:1d:f6:e5:4b:ab:57:eb:14:46:15:
8f:8c:1a:f7:7f:ba:bf:40:26:6b:78:9b:82:39:c6:78:86:14:
64:ec:3f:c3:96:72:08:c2:87:8f:d1:a5:16:29:9d:4a:7d:95:
ad:30:17:4b:0c:ec:3d:44:a3:cb:f4:9b:c4:0e:bd:94:f0:e2:
7f:f2:21:e6:f9:2f:5a:b2:19:ed:7d:ca:7e:b6:22:36:58:c6:
83:cd:3c:ad:15:c4:8f:af:94:a3:79:cf:a7:2f:8d:2a:b4:2d:
3a:9c:b1:80:ec:fe:3c:0a:53:44:05:58:f4:83:78:fa:46:1b:
e0:8d:1e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:33:09 2025 by rpki-client