Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
File: YI5qalQBfdO5sszjX9Wpp_KkVJg.mft (raw, json)
Hash identifier: qcTAAqfQuxEyaGQT3BiCx2n+m7pXVHpm3LaX5/8O+7w=
Subject key identifier: FC:B1:49:28:B3:E4:E1:69:8B:F0:BD:DD:9A:B2:BB:02:10:06:49:0B
Authority key identifier: 60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
Certificate issuer: /CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Certificate serial: 01975CB7B3BF69C8C4618838FEC78F4BF4DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
Manifest number: 1589
Signing time: Wed 11 Jun 2025 02:00:32 +0000
Manifest this update: Wed 11 Jun 2025 02:00:32 +0000
Manifest next update: Thu 12 Jun 2025 02:00:32 +0000
Files and hashes: 1: 4Rs6VOUb7Jz1WEbUI4mx4euf-jo.roa (hash: 0ue5rKQ04dXvEPaM/2a7F1E05+6Su6iR1FzvjJIwmzg=)
2: X_5mJIe23lTGFoHxQS-RDQrkxZY.roa (hash: RzER0AmjnLXODOGy8fUMFdlmPYkcB4bwanmhBdhdXVQ=)
3: YI5qalQBfdO5sszjX9Wpp_KkVJg.crl (hash: h/t7So1GUFKT1Jkx2TW/IMGHljdsivs2DpLbfKBJoOQ=)
4: mRXbSMwMplFS-oxDDBYp3cRPJvY.roa (hash: 2gbj64POpXtv1Gc7Tqp5twOdYYGVI2nr7NuHBiH4Qgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:b7:b3:bf:69:c8:c4:61:88:38:fe:c7:8f:4b:f4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Validity
Not Before: Jun 11 02:00:32 2025 GMT
Not After : Jun 12 02:00:32 2025 GMT
Subject: CN=fcb14928b3e4e1698bf0bddd9ab2bb021006490b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f9:25:d1:6f:18:e8:84:61:fe:56:27:80:19:
39:2c:4f:e8:ea:2a:d9:f5:69:c5:b7:7f:d5:46:e9:
bb:41:a8:03:12:1a:55:14:9b:53:97:40:7d:33:72:
c9:fd:2b:31:8c:46:ae:44:6c:e2:83:61:b5:25:af:
d4:d2:a6:43:48:d2:74:87:ff:28:78:7a:cb:ed:05:
f5:39:e2:90:5a:6c:45:88:10:4c:74:1e:d4:9d:b8:
f0:50:a1:d3:ee:2f:57:37:35:44:39:c6:f0:75:40:
de:7f:2e:4f:02:a1:18:07:16:2d:d5:d6:43:0b:19:
a2:e9:fb:0c:7f:ae:d0:c4:12:b0:d9:47:10:6f:e1:
fe:8d:e8:a4:01:e1:ca:ec:7c:5f:74:ab:6c:bd:bd:
0d:81:15:14:d5:87:a1:d4:20:85:87:66:33:be:95:
0c:dc:7d:d7:11:30:0c:4a:c0:8a:02:57:d7:6c:36:
56:9d:d5:7f:ce:16:08:64:fd:99:24:a2:8d:80:db:
64:ca:0a:f0:b7:ff:3f:84:3f:94:b9:25:44:3e:ca:
14:6f:f0:a1:56:60:38:f1:eb:c5:a6:e8:74:8b:b5:
b7:fd:fe:0b:75:3e:a3:18:60:8b:7a:6e:dc:d0:2e:
bf:0a:4a:be:b9:1c:b9:95:22:24:7a:ff:13:33:4a:
6b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B1:49:28:B3:E4:E1:69:8B:F0:BD:DD:9A:B2:BB:02:10:06:49:0B
X509v3 Authority Key Identifier:
keyid:60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:9c:ac:45:cf:3d:50:66:c2:b9:c4:29:38:73:c4:27:08:02:
29:de:56:cc:03:55:01:18:4e:6d:13:0c:18:61:93:b8:39:ff:
fb:0a:93:74:0e:9d:52:90:c5:cb:33:d4:8e:97:04:2e:d0:d9:
ba:59:5d:1c:62:f9:7b:66:37:43:ae:ee:22:80:98:dc:75:92:
a8:08:c5:2e:15:2a:89:49:0e:bf:12:9f:41:24:9b:fb:9c:8d:
a4:1e:23:15:a6:37:f8:e8:9e:5d:d3:11:04:8e:37:df:c6:b6:
12:84:c5:e2:06:76:94:9e:26:74:2d:32:d2:f7:c2:7d:d0:6c:
a2:91:c4:05:30:05:8f:77:ab:22:63:6b:4a:bd:7c:55:55:d6:
c6:94:99:7a:f6:f1:a7:65:21:0a:01:87:5f:cc:7f:bd:03:97:
5f:d8:77:6d:2d:89:ca:e7:f7:fc:47:39:77:d3:30:7b:2d:19:
c6:53:c0:38:76:32:15:77:e2:b0:ed:2d:2a:98:79:30:11:ef:
b3:9b:2d:0a:34:00:25:74:0f:04:bf:60:52:62:e7:54:8f:39:
95:2d:34:34:b4:d2:ed:f5:80:1f:01:70:73:0f:67:d0:14:7b:
29:16:d0:65:90:a8:c5:9a:93:7e:cc:49:72:ef:b4:af:36:38:
c0:21:73:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 10:58:20 2025 by rpki-client