Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft
File: Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft (raw, json)
Hash identifier: iZF5GXoZe94OkKnlWSvrFdaO34CeJROzcvODE7cfusQ=
Subject key identifier: F3:9B:64:BA:F4:34:E9:17:54:44:F5:D6:46:47:75:04:8D:CF:C1:AC
Authority key identifier: 63:78:14:0D:BD:4E:6E:F1:70:20:D8:9B:0D:42:50:DF:FB:04:81:1C
Certificate issuer: /CN=6378140dbd4e6ef17020d89b0d4250dffb04811c
Certificate serial: 01974BC4550ABD1FDC51ABC656B0257528ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3gUDb1ObvFwINibDUJQ3_sEgRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 19:00:47 +0000
Manifest this update: Sat 07 Jun 2025 19:00:47 +0000
Manifest next update: Sun 08 Jun 2025 19:00:47 +0000
Files and hashes: 1: VLWbnm4HFdzuXT54nAW-KLk6RNc.roa (hash: P5V8CUnu9bD0Jv0MPakwPFOEnZtARng4CsZzmamsq/o=)
2: Y3gUDb1ObvFwINibDUJQ3_sEgRw.crl (hash: 6LUqUOm0z4iSC8Wd0VcOwUdR7b6zDtpIdjyylAaD5zM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3gUDb1ObvFwINibDUJQ3_sEgRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:55:0a:bd:1f:dc:51:ab:c6:56:b0:25:75:28:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6378140dbd4e6ef17020d89b0d4250dffb04811c
Validity
Not Before: Jun 7 19:00:47 2025 GMT
Not After : Jun 8 19:00:47 2025 GMT
Subject: CN=f39b64baf434e9175444f5d6464775048dcfc1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:17:04:38:a5:a4:44:fd:7a:10:72:d6:17:14:
91:da:ce:aa:c1:63:64:89:84:04:79:3d:aa:41:2f:
ed:d7:05:0b:6c:89:26:15:78:a9:87:7c:0d:b7:87:
e9:4f:ce:10:cd:4b:72:7d:32:3f:bf:99:a7:93:0a:
bd:42:3f:6d:ef:ab:b6:ff:e8:fc:53:d7:e4:d9:d5:
e7:bc:b7:c1:cf:70:a4:35:86:7d:88:55:3b:8d:f6:
81:10:ad:fe:d8:16:34:12:8c:4e:4b:9e:6b:46:c6:
1c:c8:db:4f:19:f0:fe:e7:b1:ac:a2:bd:44:6b:54:
db:81:55:2e:33:7e:cc:d0:42:39:0c:7b:e1:de:06:
bc:ee:de:51:c7:02:82:e4:5e:2c:d4:83:49:4c:cc:
d5:a4:41:7f:ca:6f:a2:80:1a:1b:ed:9a:3a:11:fb:
a1:e6:ee:7a:45:ad:df:a4:5a:b7:84:46:e8:db:d8:
7f:47:70:5b:97:6f:d2:a7:ad:e7:f5:41:dc:2d:89:
74:98:f9:8f:4c:3f:e1:c4:00:ca:5d:97:16:60:57:
ec:81:9a:38:55:ef:c4:4d:f7:af:29:05:dc:44:4f:
ba:7b:9f:cf:40:75:25:d2:fb:4e:e5:d5:ba:d4:2f:
07:21:02:ca:04:f0:f8:9d:ab:53:29:65:57:a3:90:
81:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9B:64:BA:F4:34:E9:17:54:44:F5:D6:46:47:75:04:8D:CF:C1:AC
X509v3 Authority Key Identifier:
keyid:63:78:14:0D:BD:4E:6E:F1:70:20:D8:9B:0D:42:50:DF:FB:04:81:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3gUDb1ObvFwINibDUJQ3_sEgRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ea:4a:6c:a5:d0:aa:70:30:77:49:03:46:7e:28:11:68:b1:
15:16:d7:bc:38:74:a8:e6:40:28:fa:df:92:41:0a:d0:1c:5e:
be:3a:9d:4b:3e:b2:37:6b:0f:93:63:83:8e:97:ec:20:57:bc:
a6:5b:32:54:2d:53:40:a3:0c:a2:32:39:1a:79:ca:a8:3c:1b:
1b:ad:9e:61:a3:c9:7a:a5:dd:b7:95:e5:9c:21:49:6d:89:14:
22:5b:af:98:07:fa:0d:99:95:76:93:b1:8b:d0:59:98:d2:73:
8e:73:16:cc:59:69:f7:c7:8d:78:2c:bd:46:f4:3c:26:68:b4:
28:c8:45:49:8c:dd:62:d7:44:f0:17:73:b5:f9:98:c6:8a:b5:
58:2f:f7:c8:40:e1:dd:6d:c6:f7:ae:ae:80:be:26:4c:e3:af:
63:a8:91:8f:18:da:6c:85:20:e8:da:d1:bb:a1:d2:a9:9e:8e:
2a:77:bf:57:22:26:95:ea:59:8d:0d:6d:46:47:8b:04:a4:03:
1d:bd:df:b8:3e:0e:6b:57:7e:40:41:4d:82:87:76:7d:08:04:
89:9d:aa:41:8a:f5:26:f4:0b:1e:98:b4:23:49:e3:ed:ea:0c:
98:94:0a:13:fe:7e:9e:1c:1f:20:79:98:22:50:c3:52:2b:07:
c3:9e:a3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:00:10 2025 by rpki-client