Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
File: yzJFVZQK5Rr10fQr1axxWGT6GCk.mft (raw, json)
Hash identifier: iIuSS1pTmdHHFRW6ucicmqTrwj3wiNORLuWV/qmxEjA=
Subject key identifier: E1:1D:BC:05:DF:B6:FC:CC:FC:79:98:34:5E:EB:4E:A7:04:09:23:2A
Authority key identifier: CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
Certificate issuer: /CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Certificate serial: 01974967C5F73FFED365421E10337AC50DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
Manifest number: 05CD
Signing time: Sat 07 Jun 2025 08:00:26 +0000
Manifest this update: Sat 07 Jun 2025 08:00:26 +0000
Manifest next update: Sun 08 Jun 2025 08:00:26 +0000
Files and hashes: 1: ZOtgfqLDYdNWH5fYDhWkm9PND4Y.roa (hash: JwgLkVzCQiB/ULcLxd8PPGsr5tfW+toDKbyYKCvjGSc=)
2: by9kfZ4EbEKUVkVK0jeGqBsmfmk.roa (hash: LEv0S+P2XEMPTW4EvLdn5P/pRRYNUEDyCa7a7Tp2BTY=)
3: yzJFVZQK5Rr10fQr1axxWGT6GCk.crl (hash: mD5xpjAQIMMuMz0MVYql1+bdhX2wzjbWkzxbAAovxkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:c5:f7:3f:fe:d3:65:42:1e:10:33:7a:c5:0d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Validity
Not Before: Jun 7 08:00:26 2025 GMT
Not After : Jun 8 08:00:26 2025 GMT
Subject: CN=e11dbc05dfb6fcccfc7998345eeb4ea70409232a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4c:ef:21:a8:0a:17:c4:39:73:69:cb:ae:29:
26:81:d7:0e:e1:47:ec:d7:35:ff:8a:7b:fa:4d:dd:
69:52:e8:ad:63:2b:8d:6f:86:eb:e4:54:ec:42:10:
ed:cf:2e:21:30:e8:0f:76:2e:40:4b:3c:9d:ad:47:
b6:1d:b4:8b:dd:8d:de:55:7b:76:ca:14:5f:8c:c6:
7c:d7:75:a7:e5:ca:8a:f4:50:23:82:dc:94:74:a8:
e6:ef:8f:61:9e:32:ce:c2:bb:1d:dd:29:d8:e1:77:
f3:c9:9a:ce:63:6e:5a:ff:f9:1b:50:7f:4a:3f:4c:
b1:71:f6:c4:5e:42:e5:d7:84:f3:b8:3a:20:10:65:
ac:3c:88:25:11:18:5e:2c:a4:22:f8:28:5c:ed:c1:
ef:40:cf:fb:21:81:4f:6c:cf:a3:c0:ed:6e:c0:97:
bf:95:ec:50:03:b6:3a:36:4b:64:0c:c6:bb:8e:49:
a6:77:69:86:dc:fe:f3:0f:bc:66:a3:d2:ac:8e:e7:
4a:a9:42:8d:af:0f:dc:17:63:48:b3:a1:f8:87:6d:
86:af:d8:dd:f5:c9:47:49:27:09:9c:83:eb:90:a3:
0c:9e:54:23:79:cc:d0:c0:67:ff:c5:1f:41:4d:e5:
b0:bb:f0:f1:be:aa:bb:95:4c:cb:f0:3f:3f:1e:3f:
b8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1D:BC:05:DF:B6:FC:CC:FC:79:98:34:5E:EB:4E:A7:04:09:23:2A
X509v3 Authority Key Identifier:
keyid:CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:47:32:55:48:3e:be:25:3c:c0:81:fd:30:c3:d4:89:50:d0:
ef:19:c9:33:31:c3:bb:33:29:a9:45:81:93:a8:2b:0a:fa:55:
83:04:0e:f3:ad:d6:a4:b4:aa:e5:e9:61:06:2a:1f:69:b8:bd:
7f:fc:7a:d9:5d:b0:c3:cb:55:0d:e9:00:0a:90:bf:82:a1:cd:
09:00:36:f7:dd:dd:bc:98:8a:71:7b:88:79:00:9e:ff:1f:ab:
0f:71:c6:d3:26:89:73:87:ed:83:2d:79:2a:fd:59:0a:32:98:
82:38:d3:39:e0:5d:6c:19:0e:6a:9f:9a:cb:27:87:d1:29:81:
51:02:e8:ba:11:58:22:b9:4b:67:15:4c:58:04:ac:7b:cd:02:
d2:a4:e7:a4:d5:9f:d8:b6:9a:db:62:c1:5b:54:a1:37:ea:69:
81:25:a8:76:50:45:d3:f2:06:e6:85:36:69:ce:da:ab:c1:03:
4f:99:29:e1:c8:f8:f6:ae:67:4c:11:b6:c0:b9:2f:c7:28:22:
3c:1e:65:c9:7c:00:d9:e8:0c:b8:b3:7d:d1:72:23:07:a6:25:
14:f9:5c:88:a4:ad:ce:91:d8:a2:22:29:71:b5:4a:03:f9:9a:
fd:da:88:e4:9a:7a:d1:d2:a5:45:2f:3c:6a:71:4b:ea:c8:b3:
06:72:16:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:39:23 2025 by rpki-client