Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
File: y02MQeEiyIHZNtkdWwLb2GoucKU.mft (raw, json)
Hash identifier: mFBGL/Gz71wgDhHbgrSp74QvlWayEMXfsLD9ySEQbFs=
Subject key identifier: FE:FA:6B:97:74:FC:DD:E6:1B:42:53:07:28:A1:A4:1F:0D:02:9E:F0
Authority key identifier: CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
Certificate issuer: /CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Certificate serial: 01974DE9C21977732A59E8125D351BEF1854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 05:00:54 +0000
Manifest this update: Sun 08 Jun 2025 05:00:54 +0000
Manifest next update: Mon 09 Jun 2025 05:00:54 +0000
Files and hashes: 1: x9dC2s7poumOX7Fyb1pJRfvWUck.roa (hash: 4hkKgFGTZlThYX8UktL5gydXSJoUP0UEdhwE5OUeAGQ=)
2: y02MQeEiyIHZNtkdWwLb2GoucKU.crl (hash: DbhjFDsHdhIccm28a7MsJzRcYMPjCmQ5hdTHZ4N6Xic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:c2:19:77:73:2a:59:e8:12:5d:35:1b:ef:18:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Validity
Not Before: Jun 8 05:00:54 2025 GMT
Not After : Jun 9 05:00:54 2025 GMT
Subject: CN=fefa6b9774fcdde61b42530728a1a41f0d029ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:64:e9:47:ba:e5:7c:5d:b1:3c:12:62:63:ca:
fc:cc:72:d0:8f:ff:55:16:d4:ee:24:60:a4:fb:37:
3d:bb:85:4d:48:a5:08:78:f7:02:d5:a4:01:39:ac:
69:48:28:c2:89:15:6c:6a:76:d8:5a:70:8a:64:81:
c1:fc:e0:73:c2:37:cb:73:fd:2a:fa:ae:94:dd:e9:
cf:74:f0:49:91:18:7f:87:f4:0b:31:7f:4f:3e:49:
43:75:e9:08:dc:99:8d:fa:e2:78:37:9a:5c:a6:69:
e7:a1:1d:e1:98:30:98:28:c1:fb:87:a1:b2:22:ff:
ca:da:49:07:74:3f:df:dc:38:0d:34:08:8f:28:51:
af:7b:12:ef:45:40:e8:47:c5:df:08:1d:7d:e8:9b:
94:8c:db:0e:8f:de:8c:cf:11:ab:76:cd:2d:b5:96:
93:43:7a:8e:a9:d4:73:b2:73:93:83:23:55:ff:6c:
64:dc:c7:7f:45:ce:30:c9:09:fc:f0:3d:12:e9:f4:
8e:f9:51:55:87:8b:46:b8:59:22:a5:fb:a5:3f:30:
1d:6e:8d:03:06:d1:73:fb:5f:90:67:02:e7:57:ef:
7e:4c:38:c0:71:00:66:28:c4:4c:e1:a5:a7:f8:03:
80:6d:b6:90:68:78:7a:3e:41:a9:4e:1d:b6:a8:2f:
cc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FA:6B:97:74:FC:DD:E6:1B:42:53:07:28:A1:A4:1F:0D:02:9E:F0
X509v3 Authority Key Identifier:
keyid:CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:71:ec:39:ab:a9:1b:a6:e4:e6:f0:2b:f5:3c:52:7e:0b:14:
ba:96:f9:21:3d:7f:c9:07:88:7b:b5:de:dc:cc:a4:24:28:dc:
c1:d9:ba:79:c6:9e:65:7a:71:ba:2e:0d:6a:92:46:d2:d1:fd:
5e:1c:93:84:09:f7:5a:01:bb:7d:e8:5a:d6:88:b7:81:2d:b6:
88:ba:b1:52:86:c4:80:5e:65:51:4f:42:40:61:96:f9:96:1f:
16:f1:9a:a8:6e:84:14:63:c2:43:f4:5a:57:ee:a3:b5:e3:f7:
bb:56:2f:46:f8:d4:5f:60:17:19:5b:78:df:f5:32:28:df:5e:
17:ab:b0:20:08:e9:55:9a:94:25:78:ba:62:d9:48:cd:aa:42:
fc:76:dd:dc:2c:60:d7:16:64:61:fa:a0:92:d6:76:40:59:6b:
19:cd:56:e7:71:2d:0f:9d:48:36:db:7c:09:67:46:5f:90:4b:
30:ee:93:d0:88:e1:ac:7d:9f:3e:bc:9f:35:83:b7:bc:c0:55:
e0:a9:50:aa:45:3a:cb:f4:7e:c7:9e:0f:16:0a:62:ea:75:78:
79:eb:55:04:44:d0:5c:3f:ca:d6:5d:05:f2:15:3c:69:44:2e:
31:ea:9e:1b:7d:77:a8:64:b5:9e:79:9f:23:2f:f6:ba:3e:06:
1b:bf:a7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:58:17 2025 by rpki-client