Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
File: YAG5U8a-H5GDHWilwBFcIODNf5o.mft (raw, json)
Hash identifier: ZJ6gsf2BhMS1rZg/EXn95dQdCv0Crf9i6iFpUO3nVk4=
Subject key identifier: BB:40:C5:F1:98:5F:18:E6:47:BC:AD:1E:F9:EB:FE:FF:83:E8:52:7B
Authority key identifier: 60:01:B9:53:C6:BE:1F:91:83:1D:68:A5:C0:11:5C:20:E0:CD:7F:9A
Certificate issuer: /CN=6001b953c6be1f91831d68a5c0115c20e0cd7f9a
Certificate serial: 019747E7AD70E9D21B953DF68B6923898357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAG5U8a-H5GDHWilwBFcIODNf5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
Manifest number: 055F
Signing time: Sat 07 Jun 2025 01:00:54 +0000
Manifest this update: Sat 07 Jun 2025 01:00:54 +0000
Manifest next update: Sun 08 Jun 2025 01:00:54 +0000
Files and hashes: 1: QQlxlfhA9BwLpxAQMkShfHqNuQ8.roa (hash: J1jtN5BQZROl/8dEYO5qeCL3b90fBYd6l0TNzemkVxs=)
2: YAG5U8a-H5GDHWilwBFcIODNf5o.crl (hash: aq0zLeY5PxZjo6IFOqR8GhIR+R6YYIxxdx6njBN3VU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAG5U8a-H5GDHWilwBFcIODNf5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:ad:70:e9:d2:1b:95:3d:f6:8b:69:23:89:83:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6001b953c6be1f91831d68a5c0115c20e0cd7f9a
Validity
Not Before: Jun 7 01:00:54 2025 GMT
Not After : Jun 8 01:00:54 2025 GMT
Subject: CN=bb40c5f1985f18e647bcad1ef9ebfeff83e8527b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7f:e9:54:d1:6e:1d:80:d1:a6:ae:20:89:73:
ed:76:6d:dd:ca:3f:12:d6:0e:fb:d0:4d:f2:24:2a:
86:3c:e5:b8:8b:76:37:6d:01:24:c2:43:50:44:5e:
41:dd:7d:f7:95:e0:ca:06:02:69:46:2d:97:17:9b:
03:b7:04:cc:a6:a9:39:28:9a:85:e5:d0:e4:6a:ff:
c4:35:15:75:f3:65:42:bb:86:97:b3:4f:73:76:08:
d8:f2:87:d8:eb:d5:a6:fc:22:d8:dd:72:33:eb:6c:
b1:d1:46:dd:04:be:0b:5a:c8:5f:76:3b:ee:34:bc:
ce:4f:32:43:8d:25:50:66:8f:ca:49:25:cc:e7:93:
7e:32:a4:d0:56:f6:3f:24:ed:d5:1b:90:65:88:75:
88:5d:a7:a1:a9:b8:a8:a3:19:9c:be:a0:d0:35:0d:
f1:67:5f:ce:1e:60:15:87:39:30:88:da:3a:85:89:
57:c1:ad:52:a4:58:c4:ad:e5:7f:5c:bc:ac:d1:8d:
f0:68:77:77:a6:55:a1:ce:92:99:e3:90:fc:11:d5:
e4:6b:11:82:5b:be:e1:86:5b:9e:90:32:35:07:d2:
60:b3:25:f5:04:99:0e:5a:91:ce:41:af:80:e7:9f:
87:38:5f:88:73:bf:07:c3:70:6b:4f:17:71:c4:a2:
cb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:40:C5:F1:98:5F:18:E6:47:BC:AD:1E:F9:EB:FE:FF:83:E8:52:7B
X509v3 Authority Key Identifier:
keyid:60:01:B9:53:C6:BE:1F:91:83:1D:68:A5:C0:11:5C:20:E0:CD:7F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAG5U8a-H5GDHWilwBFcIODNf5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f1:51:b7:f1:39:4a:e0:81:42:fb:16:4a:6f:06:2b:89:40:
94:52:ad:f1:8c:96:93:dc:13:b9:9f:c0:5f:27:36:00:ed:c9:
59:c8:12:c8:be:8a:b8:0b:0a:3f:33:e0:6e:a3:54:d8:fe:bd:
96:9d:73:d2:44:c3:14:5a:a4:bc:45:c0:b4:fa:0a:7e:b9:c0:
45:0f:cf:27:2d:b1:e9:e6:b9:29:a5:ce:26:d5:5c:26:24:1e:
05:3d:05:34:f8:63:1a:d8:ee:a7:2d:4f:79:f2:f6:35:17:69:
26:6c:7d:67:04:48:27:16:52:39:87:f2:53:6d:77:7a:3c:58:
45:75:5b:56:6e:8c:94:fe:b0:67:48:9b:02:1f:97:13:d4:49:
0b:07:a6:88:f4:47:2b:c3:83:db:ac:51:8c:2a:bd:a3:21:ba:
61:e3:f3:a8:57:e0:06:71:36:cb:51:65:81:de:a9:c7:e3:76:
ed:9f:4e:74:ba:25:98:43:c7:9e:be:12:c8:43:96:b4:c4:7e:
a2:ff:9c:e0:dc:89:d8:5f:17:4b:82:85:df:f0:c4:82:55:2f:
cd:c0:e9:9d:61:38:25:3d:28:8b:2e:2f:75:68:d0:d8:d5:f4:
97:a9:16:78:42:5c:52:da:a9:13:e6:7c:38:f5:ee:00:f4:fd:
51:33:1a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:08:40 2025 by rpki-client