Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
File: yHX3bo-JQkeSPA4nYjTZikw-xcI.mft (raw, json)
Hash identifier: Fvn8QTh67VSPQasHEJIDG9McVyv9bQIfi5Yend5eziU=
Subject key identifier: F1:9E:A4:E1:0D:BA:69:D8:C7:A3:E0:02:E3:DA:42:28:3F:A7:D5:7C
Authority key identifier: C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2
Certificate issuer: /CN=c875f76e8f894247923c0e276234d98a4c3ec5c2
Certificate serial: 0197597FCDBB30CD49B45145C34C46CDDA22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
Manifest number: 1584
Signing time: Tue 10 Jun 2025 11:00:37 +0000
Manifest this update: Tue 10 Jun 2025 11:00:37 +0000
Manifest next update: Wed 11 Jun 2025 11:00:37 +0000
Files and hashes: 1: FGsyv-avFXn_iimzPOzOCwcPyYs.roa (hash: x+nbArqL7XpMEWFfS8pufHXCc23im3EMURx/7GPfFLI=)
2: I709bbaWjjvBjycgl5Y9TKJLvE0.roa (hash: XtOSTkSn/jS5PlGEkzSWe5jgilvzImx3IY3GpNZBgXs=)
3: yHX3bo-JQkeSPA4nYjTZikw-xcI.crl (hash: RWHu/qA3jw/phDffjVG5gWAn2LvFW4MhS6/ZibgILUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:7f:cd:bb:30:cd:49:b4:51:45:c3:4c:46:cd:da:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c875f76e8f894247923c0e276234d98a4c3ec5c2
Validity
Not Before: Jun 10 11:00:37 2025 GMT
Not After : Jun 11 11:00:37 2025 GMT
Subject: CN=f19ea4e10dba69d8c7a3e002e3da42283fa7d57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:21:27:7a:68:9d:e4:c8:24:bf:c8:65:b5:31:
d7:d6:30:52:50:0d:bf:42:c0:96:97:20:07:30:6b:
f7:8e:a9:81:33:5f:ea:e4:5f:dc:bf:20:e8:0d:fc:
80:d2:a0:6d:04:7a:f8:aa:d1:23:61:3a:a8:99:fd:
6a:e9:dd:52:fe:e3:4b:fa:a2:0e:a9:02:38:e7:c0:
f0:ad:72:70:72:f9:7d:35:a4:74:fa:49:39:e2:c5:
f4:97:b5:1f:4a:4f:19:d8:f0:1b:55:d1:1b:1f:b7:
be:63:a1:a4:e4:bf:6d:40:f1:d2:fe:0a:67:3f:2a:
ea:93:48:5a:85:ef:29:47:85:ad:3c:9f:5f:d5:b3:
0c:95:52:79:b1:40:ac:26:aa:1b:7a:8d:3c:ee:69:
f3:c6:46:36:74:a6:c6:71:16:5d:88:7c:fd:52:40:
a7:14:47:17:ae:0a:91:72:a5:36:5f:54:7a:4d:75:
1a:8f:4c:51:6e:b0:f4:16:6d:7d:4f:c4:86:41:94:
04:d7:b9:0c:1b:f3:c1:a9:c8:ea:62:53:0f:2e:e0:
50:2c:46:eb:56:00:35:47:82:14:66:8b:b1:d5:da:
de:52:e4:86:c7:c3:23:21:2c:a0:3e:b4:ab:91:9b:
01:75:57:44:fa:55:30:dd:5c:9b:a2:1f:34:c0:e8:
cc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9E:A4:E1:0D:BA:69:D8:C7:A3:E0:02:E3:DA:42:28:3F:A7:D5:7C
X509v3 Authority Key Identifier:
keyid:C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:db:e6:8d:05:61:da:01:00:60:44:61:f8:9a:c0:5a:e8:5d:
9e:2f:1c:85:2c:6e:9e:ff:92:35:cf:1f:a4:9a:43:41:da:8d:
74:df:05:8c:23:f3:69:99:26:95:b6:48:0c:5c:ed:a0:bb:76:
1f:55:60:19:9f:a3:c3:8c:83:05:a8:14:dd:8b:ee:4c:f8:5d:
24:c4:50:2d:94:69:ae:92:28:9e:70:e5:50:eb:ec:27:e6:d7:
fb:51:bd:83:6a:c2:da:72:2c:7d:1d:02:a1:23:25:df:53:40:
59:67:e7:b4:3e:b6:45:72:05:f2:9a:d5:21:92:a9:7d:59:cd:
b0:e7:91:96:3a:9d:4d:62:b1:ab:31:97:4b:b9:f0:36:b5:05:
36:e2:ac:bb:16:cd:10:34:5b:48:cc:1f:75:b9:c4:ad:bd:13:
d2:5c:35:f4:15:85:ef:ee:6a:b9:33:d9:a1:e9:76:35:5e:da:
3c:13:5f:27:3c:97:55:38:c1:3b:01:a4:55:3b:b6:da:0e:da:
c8:8d:6f:63:53:94:b1:95:13:0e:ee:83:ae:99:c2:66:aa:71:
49:7c:bb:c9:50:a8:74:ff:85:0f:a0:b9:72:cb:7d:51:9f:e7:
a4:9b:21:f0:16:df:17:7f:4f:5d:fb:a7:6c:0d:ca:6d:a8:20:
07:67:e1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:16:59 2025 by rpki-client