Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
File: Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft (raw, json)
Hash identifier: Md5Aj7KVhaVCc0TAcPuSXct6FNlLcq7UkI5VaP45hvU=
Subject key identifier: 3B:F8:59:6F:E7:2B:23:D5:55:D8:6E:5D:27:65:53:69:58:21:47:0D
Authority key identifier: 63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32
Certificate issuer: /CN=63b5072a0701221e1d291f02deb8cd5169e6ac32
Certificate serial: 01974E5838B81D512FDF166B2834C0AE4AEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
Manifest number: 0548
Signing time: Sun 08 Jun 2025 07:01:33 +0000
Manifest this update: Sun 08 Jun 2025 07:01:33 +0000
Manifest next update: Mon 09 Jun 2025 07:01:33 +0000
Files and hashes: 1: Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl (hash: 624kz9sPF9UjDXlSm0ICX2YRuRgfg1hzBHs3KdWM7Co=)
2: YUQVyrq4PHervTbSyhk_DAk9Eqc.roa (hash: awqm1ZtQIXxZlbailLUEsiOtmvaS6joj09FbNkED+tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:58:38:b8:1d:51:2f:df:16:6b:28:34:c0:ae:4a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b5072a0701221e1d291f02deb8cd5169e6ac32
Validity
Not Before: Jun 8 07:01:33 2025 GMT
Not After : Jun 9 07:01:33 2025 GMT
Subject: CN=3bf8596fe72b23d555d86e5d276553695821470d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:69:62:01:f6:88:60:e9:a0:2f:33:e7:48:2f:
04:c4:f1:47:52:5b:bf:71:8c:75:4b:a5:97:96:03:
36:2d:55:b4:56:89:23:c7:75:6a:87:78:f4:a5:28:
c2:26:f5:cb:ba:41:5a:d7:4a:43:a4:d3:d4:1e:c3:
ee:a8:47:52:1d:95:e2:87:24:67:e3:20:a2:fd:52:
a1:cd:0c:74:dd:ce:18:80:e9:0b:bf:85:e2:81:65:
b6:a7:33:c3:2d:0b:4d:43:72:38:c4:f0:f4:a5:79:
3b:e4:6d:30:e9:1f:32:de:dd:73:36:29:69:03:72:
5e:a3:88:d8:22:8b:d4:6b:f3:3e:99:c2:9c:f6:1d:
31:7b:1f:1b:df:5b:da:ca:df:d3:5b:4c:f6:c5:1b:
e1:d7:02:74:b0:3f:df:69:68:e6:99:dd:85:8c:80:
0e:95:9c:ec:21:fe:6e:7b:6c:3f:70:b5:45:2e:43:
0a:59:ab:3e:c3:90:bc:91:77:dd:20:e4:6c:3d:11:
1c:ec:9b:43:9e:92:f1:4f:cd:2e:6e:fc:86:1d:f8:
94:63:44:e4:ba:69:25:79:16:03:61:a1:02:fb:24:
8d:c0:ee:3c:79:d5:80:80:d9:ee:a3:8e:5d:22:68:
00:ac:84:3d:75:0e:41:31:a2:48:a4:61:5f:55:78:
98:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F8:59:6F:E7:2B:23:D5:55:D8:6E:5D:27:65:53:69:58:21:47:0D
X509v3 Authority Key Identifier:
keyid:63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:52:4a:db:dd:39:a7:92:b8:e4:48:ca:68:76:fd:eb:f6:62:
9e:c8:c8:79:1a:09:c6:07:b9:fa:ec:79:f7:25:e7:b4:58:1e:
21:61:8a:2b:c4:0f:cd:f4:67:e9:90:1f:34:af:5c:b6:ee:51:
f2:ac:82:48:68:58:b0:a3:12:bb:cf:fe:db:56:2d:1c:4d:93:
64:f0:72:6e:7d:09:78:78:46:c1:c4:32:2d:30:b4:53:48:e5:
ae:1f:15:8d:58:1f:71:01:4d:9f:68:c0:8c:46:ec:9c:74:5c:
79:66:9e:37:66:40:32:65:55:dd:f0:6e:56:13:31:31:f3:12:
53:75:2d:3a:0c:c4:32:2d:16:97:7c:cf:5d:50:c1:95:4b:19:
df:0d:93:d4:51:59:e5:ad:66:1a:39:c8:df:16:29:0d:ac:14:
b0:05:97:3c:75:af:6d:66:13:fb:c7:3b:bd:07:be:ba:77:dc:
e4:35:40:b1:ae:98:0c:79:6e:bc:5b:31:8e:fc:fb:73:01:b4:
72:b4:ea:c2:5c:15:29:d8:bd:4f:cd:62:7c:53:53:cb:e5:3a:
41:55:82:0b:ff:1b:42:a4:59:17:01:2c:2e:6c:09:8d:01:47:
37:73:83:06:1d:d8:1b:dd:35:47:18:ac:b7:5a:56:58:8c:0b:
47:11:9f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:25:47 2025 by rpki-client