Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
File: _Yk4EweuXjsbqGWM2n7iraQUFEc.mft (raw, json)
Hash identifier: zS1U5gybewHNe56+J3jfp6V7MFEFPzu3/hF3QVN17nU=
Subject key identifier: 23:27:F5:C1:F7:16:A4:20:9B:64:19:EB:13:A1:DD:BA:25:1F:3D:7E
Authority key identifier: FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
Certificate issuer: /CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Certificate serial: 019751FD75D6B4FBF7202054FF559316BE63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
Manifest number: 10A0
Signing time: Mon 09 Jun 2025 00:00:54 +0000
Manifest this update: Mon 09 Jun 2025 00:00:54 +0000
Manifest next update: Tue 10 Jun 2025 00:00:54 +0000
Files and hashes: 1: Vc2DYnTkl8e6VG_7qyXjn1yvUqg.roa (hash: S5Mw4KsEyV+yIM/8XssJwS1ndxLAY/uwrPjkANgxyb0=)
2: _Yk4EweuXjsbqGWM2n7iraQUFEc.crl (hash: 2fZymedEejpd+5/mp2si9K6okfAvukjHSPNf0D69avg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:fd:75:d6:b4:fb:f7:20:20:54:ff:55:93:16:be:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Validity
Not Before: Jun 9 00:00:54 2025 GMT
Not After : Jun 10 00:00:54 2025 GMT
Subject: CN=2327f5c1f716a4209b6419eb13a1ddba251f3d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c2:ba:02:f5:89:ca:75:b8:a5:6d:9e:f0:bf:
67:64:1f:1f:4c:9e:94:cb:b2:ea:60:14:cb:57:44:
2f:84:54:41:9d:bb:35:ea:1b:20:58:13:51:c6:29:
89:c7:31:cf:60:22:0b:dd:af:09:fa:c6:74:c7:ca:
ca:ca:08:50:4a:65:d3:a8:2a:51:2b:85:8b:65:db:
d4:35:a1:52:cf:29:f7:29:99:fe:b9:88:45:55:c2:
76:93:cc:f9:21:9e:7d:21:3d:e2:04:53:26:25:36:
98:55:a1:30:e0:bf:26:7d:98:cb:1f:16:d9:a3:f8:
83:17:0a:53:c1:9b:9e:1b:a3:d6:bc:49:38:ff:2c:
db:f7:64:d3:5f:4d:9e:5a:11:1a:97:04:d2:ea:a7:
0d:a4:ad:1b:22:8c:f9:95:83:53:64:9d:bb:0a:d6:
2d:4b:87:b5:60:a8:cb:9b:76:b4:4a:4d:08:97:0b:
29:6a:90:bf:d5:7d:a0:98:98:fc:25:51:f8:47:be:
27:d0:1a:5c:57:cc:58:28:03:cf:86:b1:ac:34:74:
0a:cc:27:73:4f:e2:48:f2:96:6d:99:8c:11:28:03:
ba:b5:d4:a2:94:6b:a6:43:f0:0c:26:a6:8f:2d:54:
48:28:df:c4:d5:b3:d3:1c:bd:91:f1:da:85:c1:36:
db:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:27:F5:C1:F7:16:A4:20:9B:64:19:EB:13:A1:DD:BA:25:1F:3D:7E
X509v3 Authority Key Identifier:
keyid:FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:78:e1:d7:e7:ca:09:7c:c6:ec:c6:90:d1:4b:f2:72:49:ae:
cf:24:02:16:7b:6a:25:0e:93:03:de:5a:c3:04:7d:05:00:2d:
bf:7b:4a:69:45:f6:e3:5a:07:f6:2c:3c:bb:e3:22:27:ed:41:
9e:ed:12:ec:33:aa:79:cd:6a:44:8a:4c:ec:42:0a:7d:ed:a7:
27:11:25:1c:0e:e8:92:df:15:af:d5:1f:d9:01:3d:cc:27:eb:
38:f8:fe:b6:5f:00:61:23:fa:9c:7d:34:5c:31:39:24:ad:f7:
74:91:ba:d1:fb:f4:4e:7a:08:a3:47:59:cf:21:34:9d:2e:67:
f2:3d:79:96:b9:6c:4f:fb:69:a8:f2:46:cf:e0:dc:f2:15:c3:
6c:8b:b9:4f:6d:b6:e0:06:97:2e:c7:59:81:ec:82:9f:38:aa:
21:d3:08:ba:8c:c2:98:ad:ec:a3:6a:3f:47:13:94:cc:78:4c:
ba:80:aa:de:6e:1d:ae:9e:fb:55:69:11:af:dd:d0:c8:5e:3b:
e5:c4:46:75:17:9a:9d:1d:69:f5:7d:e6:6e:e8:cb:df:30:ae:
bd:4b:ed:1f:67:87:94:51:21:29:10:2c:c3:1a:34:06:3c:14:
8b:4e:96:38:c4:ff:2f:c1:e3:5c:98:a1:04:f3:f2:42:62:78:
a9:b3:ba:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:53:01 2025 by rpki-client