Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
File: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft (raw, json)
Hash identifier: 2EiZAlqfiiegL8cpmZbNJ4G9qce2d5Jui1SWXK7ehdc=
Subject key identifier: A7:AF:BF:00:B7:D6:FE:65:60:4C:29:A7:6D:F2:7A:50:B4:FC:32:41
Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
Certificate issuer: /CN=637104d927e7e1ef8febbffddf28145495011094
Certificate serial: 01974F32D3814C578CB7B5C1796033144BBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
Manifest number: 14AB
Signing time: Sun 08 Jun 2025 11:00:20 +0000
Manifest this update: Sun 08 Jun 2025 11:00:20 +0000
Manifest next update: Mon 09 Jun 2025 11:00:20 +0000
Files and hashes: 1: MluEItNzhsZo0KlEkHW2gGjFsZA.roa (hash: hoWRhUtEL622AwT/94vc4oZQjrwHDprmF8UFYzmZ0qI=)
2: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl (hash: Y1h46JJF1pzg81br0sXrVRuZC6WXFSl2+y2SsvImvTM=)
3: qdzMsGh5S6wiS7QQa-GGYlBb1qM.roa (hash: 6/bZRBO2jbasIfkz3gmkcsaKY6ttqzhNRaTLSgH7xuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:32:d3:81:4c:57:8c:b7:b5:c1:79:60:33:14:4b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637104d927e7e1ef8febbffddf28145495011094
Validity
Not Before: Jun 8 11:00:20 2025 GMT
Not After : Jun 9 11:00:20 2025 GMT
Subject: CN=a7afbf00b7d6fe65604c29a76df27a50b4fc3241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ea:52:c0:9b:64:b8:9f:24:05:31:4f:d0:ab:
27:9a:ba:34:a8:f6:97:a9:e3:8a:3e:28:84:7b:11:
8a:fa:6b:9f:fe:f4:ed:d3:96:91:cb:09:35:22:a3:
fe:9a:81:e3:d8:5d:57:0d:07:ac:6c:95:3f:9a:0f:
57:d7:32:0a:57:48:83:87:ef:e3:35:59:ba:6e:2a:
94:b0:85:ff:7a:74:96:3b:6b:e1:43:4c:f9:25:48:
8f:85:b5:66:11:72:02:5e:a6:0b:42:a5:2b:29:da:
5c:36:3f:7b:1d:ac:d4:7a:c6:dc:e2:05:74:a7:4a:
8e:c9:f8:5b:1a:fc:b9:ea:40:92:14:fa:88:f8:23:
91:61:78:e5:37:0c:fc:86:b5:b1:df:ac:56:e0:62:
72:05:6e:92:50:11:6d:4a:f5:38:00:bf:81:bb:11:
f3:89:d6:95:82:8f:98:82:41:20:ca:78:28:da:65:
cb:65:94:b2:0d:80:6d:51:54:f9:02:bc:c4:44:aa:
88:39:0f:63:78:db:c2:88:a2:48:c9:ff:90:89:6c:
8e:d8:08:45:8f:68:45:03:e7:22:a6:c4:b0:3c:cb:
d9:c0:95:c9:e4:6b:cc:f9:3c:6a:31:00:33:02:a9:
29:63:23:ce:ae:1d:b3:a0:c8:fe:56:65:40:63:87:
80:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AF:BF:00:B7:D6:FE:65:60:4C:29:A7:6D:F2:7A:50:B4:FC:32:41
X509v3 Authority Key Identifier:
keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:84:b3:8b:bd:53:37:69:93:07:01:1b:8d:3e:11:f9:c7:d9:
05:45:8a:0e:f3:2c:18:bc:e8:2a:00:4e:9b:eb:0d:54:33:a3:
c6:20:c9:09:7d:87:19:b8:a5:d0:56:29:b7:c1:88:35:a7:60:
83:ff:91:c0:b2:65:d7:ee:2d:f5:76:c3:00:18:02:cc:33:9d:
26:5e:63:b7:1e:87:04:86:ea:e3:96:56:23:d3:31:60:6f:e0:
4a:e6:38:90:4c:28:a0:78:ac:70:0c:4c:14:15:33:d6:a8:cf:
1d:46:4c:6e:aa:05:62:f8:f4:85:d5:0d:96:c0:c4:6d:31:d4:
48:00:bc:9f:4c:d7:dc:ae:e8:47:31:f5:ca:35:47:e2:5e:e9:
51:77:ec:b4:e6:2d:e0:91:5f:6c:b8:dd:61:96:05:6f:eb:e9:
72:2e:00:b6:af:f2:1a:31:e0:83:ff:c5:71:c2:9d:a7:c6:14:
e7:3d:cd:61:fa:54:98:21:a1:5f:5c:ab:bc:83:45:cb:04:ff:
a8:3c:53:5d:18:24:ee:59:6d:b9:3f:96:9f:7c:16:2a:c6:0b:
84:ab:10:28:81:7f:fc:18:5f:39:0a:b8:71:62:ed:1f:76:ed:
44:a1:fa:92:8a:c8:6b:55:18:69:b4:d3:69:17:83:ff:a1:3f:
3d:02:a9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:43:44 2025 by rpki-client