Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
File: ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft (raw, json)
Hash identifier: XgW6moCNotqP3V0wvEu+q8Yh2AvXIKqZtAG6gvksv4A=
Subject key identifier: 4F:6E:99:28:9B:DC:58:C9:61:F5:5B:9C:D0:5F:CC:92:9C:FF:6F:95
Authority key identifier: C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
Certificate issuer: /CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Certificate serial: 0197469DE80D9BDC388587714FA59EE897EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
Manifest number: 157A
Signing time: Fri 06 Jun 2025 19:00:43 +0000
Manifest this update: Fri 06 Jun 2025 19:00:43 +0000
Manifest next update: Sat 07 Jun 2025 19:00:43 +0000
Files and hashes: 1: K21ypNssIjRXFOw0fmL843PpW-s.roa (hash: YKKmVgu8U+pfVl80ZWCnY8eOTJS6TtTJ/J+lDMSN7aE=)
2: ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl (hash: 8Ki7o833cMOh1e3xtdEsRFpFiEMNvCIa0/Ex1BgrSMA=)
3: z_DYGAISByZ4EYZLcYZm9xxTsPA.roa (hash: wyWaYpWMqLeJKfHtKjObHg0XG1oN2Hh8M5UrpYDjJyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:e8:0d:9b:dc:38:85:87:71:4f:a5:9e:e8:97:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Validity
Not Before: Jun 6 19:00:43 2025 GMT
Not After : Jun 7 19:00:43 2025 GMT
Subject: CN=4f6e99289bdc58c961f55b9cd05fcc929cff6f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7a:ca:84:03:ba:de:03:d1:f1:a6:5c:b8:b3:
59:a5:e8:69:bc:dc:7b:61:40:67:7d:ee:6f:ab:8b:
e6:2f:b9:13:98:6c:c8:b8:b4:7b:36:27:ea:47:1e:
a1:be:52:4d:27:3f:44:ab:02:c1:f0:32:72:26:5c:
b9:ea:f0:dd:eb:95:11:74:c8:70:9f:75:3a:f4:3b:
b5:5b:8d:b4:73:45:a9:a7:b1:1d:84:b5:2d:9b:7b:
03:fd:8f:00:35:80:6c:fd:72:65:d1:91:0d:ea:d7:
0f:89:97:35:b2:45:77:d6:b5:31:1e:0f:5e:48:36:
64:d5:83:c8:7f:3b:b3:2e:f5:cb:52:4d:c4:04:40:
97:6b:e7:3c:99:11:1f:8b:d4:eb:5e:5c:bf:7a:45:
67:df:e0:dc:30:7d:08:7e:d0:7c:d8:38:70:08:65:
69:19:36:22:19:16:44:22:5e:ab:17:55:e4:d8:eb:
30:e9:91:e6:e8:bb:1a:43:00:68:83:35:95:e0:f4:
d0:74:39:c5:a7:3c:84:1f:41:8e:8d:e1:6f:88:33:
dc:20:d7:67:05:b8:e8:43:a1:32:f7:41:16:6d:62:
79:fc:8b:63:5d:63:83:f3:84:ac:80:0a:2d:be:03:
6c:fe:3e:f1:0b:80:65:92:77:a1:d6:cf:7c:d9:68:
79:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6E:99:28:9B:DC:58:C9:61:F5:5B:9C:D0:5F:CC:92:9C:FF:6F:95
X509v3 Authority Key Identifier:
keyid:C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:7a:d6:1f:04:13:91:3c:04:7c:2e:93:cb:ef:3f:17:fb:04:
74:b5:b5:3e:83:94:66:eb:10:60:96:12:e4:9a:5c:42:e0:bb:
07:d6:a6:d1:45:a1:e1:41:09:8b:eb:c8:08:2b:69:1b:91:38:
92:ec:7e:dc:12:c9:b0:dd:61:6b:34:08:05:c4:10:7c:a6:46:
0b:65:b6:a6:a0:51:33:47:d1:02:d6:5f:7b:40:42:e9:23:cb:
e4:37:d0:3a:d4:32:47:5c:ef:34:1e:fd:fa:20:45:87:cc:33:
4d:3e:44:e1:7a:7d:37:7a:b9:d6:3e:47:e1:01:49:30:5e:3b:
e9:d9:60:d8:9a:a4:af:e4:67:40:1d:d0:9e:92:a8:1f:c0:01:
72:73:f7:89:9d:18:4d:1f:a8:85:2f:f8:3c:08:26:df:7c:8e:
16:48:bd:70:2f:57:8b:37:bb:61:59:5c:c2:ad:62:09:fd:6a:
90:a4:4b:52:b6:fb:9a:fe:6c:40:18:f9:fb:64:48:8d:5c:74:
e3:f3:2f:d0:c3:b2:db:5f:1c:fd:23:a3:8b:77:c9:60:be:fe:
e1:63:9b:90:6f:11:ce:50:c6:e5:28:e1:41:c4:de:b4:8e:17:
1d:76:31:a5:d6:81:c7:00:17:35:2c:5d:7b:48:d2:3e:dd:13:
b1:f1:27:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:52 2025 by rpki-client