Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
File: _Y7_IBIYpagjy-hTNoU-PbTdFus.mft (raw, json)
Hash identifier: iyLBHxLq2Z39l9C6q35egWAfxHSzwSiLueW5ThNNhZ4=
Subject key identifier: 37:DF:86:67:02:1F:60:D8:8A:E1:92:F3:17:ED:1B:9F:2E:DD:C1:97
Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
Certificate issuer: /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Certificate serial: 01974DB2D128AF52E4D07C09B34AB3452862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
Manifest number: 1583
Signing time: Sun 08 Jun 2025 04:00:53 +0000
Manifest this update: Sun 08 Jun 2025 04:00:53 +0000
Manifest next update: Mon 09 Jun 2025 04:00:53 +0000
Files and hashes: 1: OSCfUjF3Ef7ghNU67VVpfMtgWoo.roa (hash: moftdOXORBIAXnTpLj/Op+kUYg+QJ1SFAtNNQW7Lki0=)
2: _Y7_IBIYpagjy-hTNoU-PbTdFus.crl (hash: ZSXckb4rf8t+N8d1NMlGqcfwW4Jbawo5rUijkG0bICQ=)
3: lTDGFOEHleeAgYpGLUXAmxQeWF4.roa (hash: MXBaSrVfYLxOUa1qMNqlBVqGPuFkLVafjJsmfk4Jfmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:d1:28:af:52:e4:d0:7c:09:b3:4a:b3:45:28:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Validity
Not Before: Jun 8 04:00:53 2025 GMT
Not After : Jun 9 04:00:53 2025 GMT
Subject: CN=37df8667021f60d88ae192f317ed1b9f2eddc197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:a0:3b:99:59:55:c4:82:a2:c1:6d:1d:19:
28:d0:0c:74:79:a5:11:dc:a2:09:b4:b3:8e:d4:08:
b7:df:10:b3:38:ea:ff:b2:64:81:c4:6d:0c:c1:9d:
88:32:1e:ff:1e:cf:d7:7f:f4:41:d1:c6:ed:87:de:
2c:81:85:16:31:f2:11:c1:77:5f:0a:e3:c2:5c:f3:
a1:51:5e:b1:24:d1:3f:8f:30:3d:f4:b5:e5:f9:71:
f3:b1:84:f0:ad:d2:50:8b:c9:ee:de:b7:ef:32:32:
68:b8:18:8a:2c:bf:de:64:f9:f8:c2:00:ce:02:3d:
12:e2:fd:7d:9f:72:68:ac:f3:a4:77:3c:cb:0a:86:
88:e6:36:a7:ee:b3:b8:36:10:74:aa:75:91:7f:95:
a4:72:09:a2:dc:47:c3:9a:e9:fa:a9:d2:e7:3f:10:
e9:be:9c:8a:a6:1f:f8:fd:ee:4f:ab:9b:90:cb:de:
cf:2e:b0:ef:42:b0:7f:e2:6b:da:16:4a:7a:74:7f:
a0:00:f3:fe:2d:12:46:3a:b8:d5:b8:30:1c:89:86:
c0:7d:db:e5:d7:31:ea:36:3a:e1:c8:77:1e:1f:32:
0b:5f:2e:ac:43:df:0a:4f:4f:31:13:6f:5e:98:65:
bd:b3:79:90:75:b0:ca:9a:1e:ab:e4:61:80:45:11:
a8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DF:86:67:02:1F:60:D8:8A:E1:92:F3:17:ED:1B:9F:2E:DD:C1:97
X509v3 Authority Key Identifier:
keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:84:a2:8d:24:00:7f:dd:33:75:e3:7e:5f:63:fe:fc:79:fb:
4f:d6:a2:8d:0f:af:31:0f:d4:71:a9:d3:3a:ba:fa:41:d7:d3:
17:5e:bd:48:3a:81:14:c4:c4:3d:b6:b4:40:cb:78:45:6b:69:
df:69:ea:4d:45:ef:0a:1f:68:c1:91:2c:2c:75:d3:f1:de:f0:
3b:e0:65:69:46:b8:39:b5:af:dd:21:5c:1c:26:50:7d:e2:0e:
c4:b8:41:b0:99:63:4e:b3:fd:c0:e7:3b:40:79:d6:61:55:cb:
c1:da:24:3a:0c:13:d8:a9:7d:82:fc:e5:68:df:bc:e0:0b:15:
6a:74:32:48:6b:28:ae:8e:2d:9a:2e:28:84:9a:fd:03:87:b8:
85:e6:dd:37:62:21:b4:26:a2:73:09:2d:ff:ae:cf:8f:bc:32:
0f:ea:bd:fd:c3:ae:4e:2e:5a:f9:db:4c:b2:d8:d2:b8:98:76:
f3:8c:8d:9d:62:43:72:01:88:29:b7:37:8e:2b:df:16:6b:01:
aa:f9:ce:86:52:c3:f8:86:77:82:0c:4f:09:48:19:47:c9:58:
f8:23:c7:25:28:56:10:2e:6b:d6:10:71:58:4c:e9:07:ca:70:
57:03:44:23:65:84:1a:22:da:6e:ee:8c:98:aa:a2:af:71:68:
f5:a2:44:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:05:39 2025 by rpki-client