Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
File: Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft (raw, json)
Hash identifier: Yi88JHWbS+ppNbjSkO5Vz6EmOF1BFau3oTaEwxMoe8s=
Subject key identifier: C0:9B:36:4B:5C:3B:50:EC:81:35:9A:C3:38:4B:57:C2:AE:DE:1A:02
Authority key identifier: 63:F1:4F:8E:14:4C:6D:50:C3:8A:B4:FA:FF:5A:C6:E5:47:FE:1D:47
Certificate issuer: /CN=63f14f8e144c6d50c38ab4faff5ac6e547fe1d47
Certificate serial: 01974E8E2A8FF008F4B0096E0FA3680F0470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
Manifest number: 1585
Signing time: Sun 08 Jun 2025 08:00:29 +0000
Manifest this update: Sun 08 Jun 2025 08:00:29 +0000
Manifest next update: Mon 09 Jun 2025 08:00:29 +0000
Files and hashes: 1: 2c5hJsdBUeeCiChk_4V2w2gh6lU.roa (hash: D53Q1f7eGpeEwEpkqzHT1XzbHYkVzvcMu+bdTa1FNsw=)
2: TEuCPuBwv_2lyF72kvKuFoWc7_M.roa (hash: PAEddVQWD0GjFhS/Z0wF1zxF3c8P9Lqj+mpgI3WA80g=)
3: Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl (hash: /gJUE3iT7f1VSPk0X9JPOsOni267xjMEiY8fnIgWwQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:2a:8f:f0:08:f4:b0:09:6e:0f:a3:68:0f:04:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f14f8e144c6d50c38ab4faff5ac6e547fe1d47
Validity
Not Before: Jun 8 08:00:29 2025 GMT
Not After : Jun 9 08:00:29 2025 GMT
Subject: CN=c09b364b5c3b50ec81359ac3384b57c2aede1a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:05:00:52:b9:2f:b2:ac:ab:14:da:2e:e0:
2b:1d:02:90:b1:c9:46:24:24:c4:8a:68:26:00:85:
f5:ca:be:e9:0d:15:c8:58:e8:ec:d7:8d:b6:78:38:
86:b8:39:d9:5b:59:7f:e7:86:82:17:a3:18:6f:d0:
46:8b:a0:b4:28:ac:64:19:90:0f:4a:d4:9c:de:15:
13:9f:06:53:7f:4f:de:7e:8e:a9:e3:d8:dd:27:7f:
79:1f:f4:ea:d4:49:82:23:c0:c2:aa:95:06:c2:0e:
ed:a0:92:26:a7:80:6e:24:3f:70:d9:d4:e3:ff:91:
f7:45:38:11:16:69:43:52:c2:df:8e:f1:8f:c6:74:
e6:7e:91:d6:63:7d:7c:51:7f:83:45:8f:5b:3b:b2:
6b:16:5c:f7:55:be:4b:5b:32:14:63:8f:59:ad:e7:
70:30:75:f1:40:47:41:74:d2:0b:b5:52:b8:d3:27:
e8:08:d9:fb:be:76:37:7b:e1:23:60:f5:00:ce:fc:
79:75:1d:ac:26:46:bd:82:2b:3f:bd:07:cd:6d:73:
3a:4f:ae:62:b3:39:b6:ba:ed:cd:1b:69:d7:c0:68:
8f:e8:26:0f:76:10:43:fa:8a:1a:5a:df:46:f5:c1:
8e:b8:88:a5:d3:a0:0d:41:cb:83:23:c7:64:13:88:
20:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9B:36:4B:5C:3B:50:EC:81:35:9A:C3:38:4B:57:C2:AE:DE:1A:02
X509v3 Authority Key Identifier:
keyid:63:F1:4F:8E:14:4C:6D:50:C3:8A:B4:FA:FF:5A:C6:E5:47:FE:1D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:37:61:0f:85:88:ea:d2:3f:bc:74:6e:23:23:49:32:fb:ff:
67:fd:fe:bf:8f:03:f1:2b:1f:07:32:90:e7:69:75:97:5f:b6:
65:77:65:cc:02:3d:67:aa:a4:2e:f0:ec:0c:dc:96:31:50:fd:
4a:08:a4:9c:5b:54:fb:a8:1b:7c:1a:94:2a:03:04:ae:fd:d2:
21:a5:0d:52:80:38:2d:73:9d:5c:92:79:8a:84:c4:35:0d:cb:
37:ed:11:10:78:c0:17:5e:34:bc:e3:79:9b:df:12:77:cb:49:
81:48:cc:6e:fe:a5:9f:59:bc:f7:26:7e:3e:ce:8d:28:6d:78:
42:cd:18:7c:57:0e:94:1b:9e:2c:c6:4c:03:20:f4:39:f8:4c:
1e:4e:94:26:a8:7b:c9:37:21:5f:6d:57:46:eb:f0:3a:f3:d3:
ca:6a:75:42:c4:39:49:44:96:e3:63:2e:3d:fb:1b:06:31:11:
d6:a4:28:12:81:06:8a:2f:0f:e9:31:3c:90:ac:21:32:27:81:
a9:22:22:37:5c:c3:4e:0f:14:23:e0:b3:6e:ff:33:09:78:f8:
c9:7e:69:ed:be:6c:2f:33:78:b1:71:48:3d:3f:7d:43:e9:db:
63:f6:a9:cb:98:76:e4:66:b9:a4:95:03:3a:5e:69:3f:fb:75:
ec:a4:c6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:15:26 2025 by rpki-client