Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
File: __N-YUS-f13ZOtubq9g9SNUYlP0.mft (raw, json)
Hash identifier: Vx067EaZNIbdQqRY3Izhu6rl2R8CSqiAp9ynPtbDahg=
Subject key identifier: 86:E9:1C:7C:AD:D2:E5:79:DD:75:45:AB:6A:DF:88:2E:8E:42:0C:60
Authority key identifier: FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
Certificate issuer: /CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Certificate serial: 01974E57AADAD605F0D878882BC8F4E2B212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 07:00:57 +0000
Manifest this update: Sun 08 Jun 2025 07:00:57 +0000
Manifest next update: Mon 09 Jun 2025 07:00:57 +0000
Files and hashes: 1: T4JSoFrEVlA3_2SnHmgBXY12CKk.roa (hash: vzGu6j83ipDUTJQRTh0Y6Da8WT9NSHL+4Dey6CzoU8U=)
2: __N-YUS-f13ZOtubq9g9SNUYlP0.crl (hash: WQtAgTD2eu2fHJttUKf3HgzCYGni7qgkUPc6PjKjsrU=)
3: dUNsJzgqtJkMy1l0L21Y0Zsy2ts.roa (hash: 1X+g9lFYFIJoJGwfwGANKciE/PMScLctb1+/RsHdL0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:aa:da:d6:05:f0:d8:78:88:2b:c8:f4:e2:b2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Validity
Not Before: Jun 8 07:00:57 2025 GMT
Not After : Jun 9 07:00:57 2025 GMT
Subject: CN=86e91c7cadd2e579dd7545ab6adf882e8e420c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b0:4e:d7:77:67:4f:a9:f0:db:24:54:70:57:
56:2d:76:49:e3:24:8e:df:0f:90:a1:de:e7:1e:02:
02:ad:1d:82:ef:f8:61:ec:a3:99:44:e8:82:62:80:
fd:43:32:8a:6b:cf:c5:bc:ce:e9:82:12:e3:21:30:
a4:fc:85:48:81:01:cd:76:ff:26:ec:a3:c6:97:0e:
11:95:cb:e6:fb:5f:44:75:93:64:a7:d2:f2:e7:45:
77:21:63:66:9c:52:6b:8b:0f:b5:40:99:56:73:c9:
d1:91:6b:c2:b4:0c:8d:ae:1c:ba:e3:6f:9b:5a:75:
a3:75:a4:aa:fb:9c:f8:aa:83:08:d4:f5:0c:5d:b2:
b4:d9:8a:b9:04:10:9b:fe:f1:1c:0d:8e:22:b2:89:
10:53:05:ab:47:e7:0c:1b:62:29:05:58:82:d0:15:
9c:95:59:88:bf:6c:f8:5d:3f:6c:81:51:1c:83:9b:
55:1d:bd:61:03:f9:55:d7:10:7f:9d:3a:2a:3c:d5:
16:5b:a4:ca:bb:2b:3c:56:1c:f0:a4:6d:6f:69:bb:
05:ec:0d:70:6b:6e:cb:3b:22:3f:39:3e:a7:bc:51:
20:8b:12:b3:b9:50:b6:ac:3c:67:8e:42:a1:13:75:
ed:2b:41:06:c5:f9:6e:63:3b:61:c0:dc:a1:54:a5:
8f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E9:1C:7C:AD:D2:E5:79:DD:75:45:AB:6A:DF:88:2E:8E:42:0C:60
X509v3 Authority Key Identifier:
keyid:FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:45:54:3b:15:cb:49:96:91:03:6e:08:14:17:1f:a1:54:59:
f9:de:8c:4c:40:b6:f6:e3:c2:d2:ef:45:ed:c0:43:bf:4a:1c:
60:1e:04:98:c4:65:54:0a:43:07:dc:76:5d:b7:1d:09:e3:a7:
4a:df:77:93:36:09:c4:d4:ba:94:1f:4d:07:90:3e:2c:46:39:
ef:3e:79:04:3b:99:a6:57:54:34:9d:1d:f3:f1:aa:af:5c:f5:
c9:5d:8a:29:99:93:4e:b6:7c:c3:2f:0c:99:f5:72:28:95:71:
ed:f6:e4:ee:ae:49:13:ad:94:71:28:f7:3b:a2:db:d0:ba:9f:
d6:ce:b1:6f:88:11:f8:a2:11:2e:f7:e8:4e:55:5e:b8:7a:89:
76:88:ce:9a:27:4a:e4:89:27:e0:8a:68:6a:ce:22:75:43:66:
d5:f8:b0:ba:4b:07:4d:96:2e:af:7f:ba:d2:ee:02:11:78:00:
92:e5:fa:50:2e:1b:b6:6f:ac:dc:a7:ba:21:9e:4a:b7:c9:00:
3d:66:bf:84:61:a9:e2:da:46:78:85:20:3a:09:31:fd:56:13:
bc:f9:01:a0:36:9f:c3:d9:f7:4b:d3:f5:ad:35:90:69:97:09:
bd:f0:d6:73:17:0b:de:be:52:b9:5a:b7:c9:e9:4f:39:2b:2d:
e6:c4:e4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:48:04 2025 by rpki-client