Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
File: yND8glkHXNZ18xnXr0-nEwSKUVw.mft (raw, json)
Hash identifier: olbJi0ctkpW+nCyPHVk45EsPSuEdOjDceD6E0k1L+WQ=
Subject key identifier: FB:DB:B8:F1:93:9C:1E:CF:04:A8:5E:55:DD:98:85:D5:60:D6:51:B4
Authority key identifier: C8:D0:FC:82:59:07:5C:D6:75:F3:19:D7:AF:4F:A7:13:04:8A:51:5C
Certificate issuer: /CN=c8d0fc8259075cd675f319d7af4fa713048a515c
Certificate serial: 019752D911F54C29B55367547102038C602D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
Manifest number: 1580
Signing time: Mon 09 Jun 2025 04:00:46 +0000
Manifest this update: Mon 09 Jun 2025 04:00:46 +0000
Manifest next update: Tue 10 Jun 2025 04:00:46 +0000
Files and hashes: 1: Z406JsldDq5gjN_1Lio77tcegQc.roa (hash: M3kXHnMtNow14QpQkIkQl70hqTwzolvy5YYpOz5DGxs=)
2: yND8glkHXNZ18xnXr0-nEwSKUVw.crl (hash: Q4QBN3x8g9YE1sPVtTXKqubyRvbpsNcP218COu+fcac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:d9:11:f5:4c:29:b5:53:67:54:71:02:03:8c:60:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d0fc8259075cd675f319d7af4fa713048a515c
Validity
Not Before: Jun 9 04:00:46 2025 GMT
Not After : Jun 10 04:00:46 2025 GMT
Subject: CN=fbdbb8f1939c1ecf04a85e55dd9885d560d651b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:6b:9a:8f:26:2e:14:a8:7f:ca:be:4c:ad:50:
ea:37:71:47:bf:be:66:bd:85:76:87:f7:3e:36:4a:
59:9f:49:dc:14:aa:38:ae:30:62:17:3d:0d:20:ab:
10:07:eb:4b:24:73:9a:90:26:fa:a9:d8:57:12:03:
ce:f3:9a:f8:75:0c:62:60:2d:98:f7:13:90:6e:12:
90:83:5a:e5:b0:3f:79:af:f3:8a:98:ca:5b:68:cc:
85:3b:7b:0f:88:df:7f:8d:7e:ab:1d:b7:b3:17:c1:
a6:96:30:f5:ab:99:0a:30:5e:31:b3:65:0d:15:b0:
dc:5b:47:56:00:c2:29:bb:4f:9d:8d:8e:f8:18:eb:
7e:13:f8:d0:5a:e2:0a:17:24:1f:aa:8c:64:c4:2d:
e1:68:76:14:58:08:08:ba:88:c0:38:5c:e7:f7:ff:
74:46:aa:ac:02:94:6d:b1:85:c9:56:36:db:cc:18:
95:1f:11:02:b5:f5:a1:a0:9b:39:5e:e9:d8:4e:e8:
ae:d0:d7:d1:b2:6a:de:e7:cc:f6:fa:de:c4:ac:1d:
6d:72:31:90:87:48:94:dd:16:86:5d:fa:3e:d1:17:
07:30:25:1b:41:85:10:fb:85:9a:a7:66:64:d6:7b:
76:de:99:e7:76:85:7a:9b:ad:ce:fd:21:d1:40:75:
d4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DB:B8:F1:93:9C:1E:CF:04:A8:5E:55:DD:98:85:D5:60:D6:51:B4
X509v3 Authority Key Identifier:
keyid:C8:D0:FC:82:59:07:5C:D6:75:F3:19:D7:AF:4F:A7:13:04:8A:51:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:3b:85:d7:58:19:a3:c8:69:0b:fe:8d:89:a8:04:68:a5:c9:
99:77:15:91:94:ad:20:73:c5:00:c8:4a:31:9f:e1:66:6c:53:
51:48:4e:ac:a1:4c:ae:1f:f0:21:31:ac:62:18:70:fc:20:c3:
26:22:a9:dc:3c:60:60:57:60:5e:16:32:17:9e:be:f4:8d:94:
4e:e4:c7:9e:47:3b:a0:d2:e6:0d:8b:6b:4d:3e:66:9a:f2:91:
ad:71:42:2a:f4:5a:dc:79:58:48:63:ec:c8:d2:8e:35:41:40:
19:62:11:71:3e:84:c8:0d:2e:be:a6:3a:3d:ca:ef:6a:a9:f4:
32:59:40:af:c3:cc:07:ad:be:3f:b1:94:66:b3:f4:a2:90:a0:
48:a4:03:48:7c:9e:51:b6:36:7b:c4:cc:93:68:c3:88:eb:92:
a0:ea:db:ec:0d:f0:c1:fd:a3:f3:d4:fc:2b:3c:b5:ce:71:2e:
04:18:6e:b6:0a:a2:ff:91:50:6d:08:2d:67:38:84:d7:8c:7f:
1e:0c:08:39:5e:4c:1e:e2:0a:a1:8c:89:c8:31:15:2c:11:12:
12:86:f3:8f:cd:d1:65:bc:35:61:fd:b9:55:c7:dc:2a:66:1d:
be:5e:19:34:4a:33:44:56:c3:bb:8e:72:62:f7:02:1b:f3:e8:
8c:c4:6f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:11:49 2025 by rpki-client