Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
File: YWeZlkXhW2Umig2TuxTE9RckRRs.mft (raw, json)
Hash identifier: mgnuefSWYQyXHPCvED7vQXXbc7hxEZJSNeTzeXctD3s=
Subject key identifier: 84:93:9C:9B:15:10:38:93:9B:53:39:86:16:9E:5E:F5:2F:26:45:51
Authority key identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
Certificate issuer: /CN=6167999645e15b65268a0d93bb14c4f51724451b
Certificate serial: 0197518FB2C274931BBC9E8980E0F432D428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 22:01:01 +0000
Manifest this update: Sun 08 Jun 2025 22:01:01 +0000
Manifest next update: Mon 09 Jun 2025 22:01:01 +0000
Files and hashes: 1: WskaznLEMYwubtusiQFBluw68yw.roa (hash: uh2j/ttzj+A4Z4+a8ZWSmr/34qkzodFFdTgCIu7Q+QU=)
2: YWeZlkXhW2Umig2TuxTE9RckRRs.crl (hash: gzP8+PXsNSIVcA7aryU+h37smcSQwnQyfuwfDVQ2vMQ=)
3: nW9JmwgiiGAVB_K1nO2cWSvmKyY.roa (hash: TXBtN/KFQ2Gy96mdP11tBg++FsQ+5qL+BiMyEx1qPZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:8f:b2:c2:74:93:1b:bc:9e:89:80:e0:f4:32:d4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6167999645e15b65268a0d93bb14c4f51724451b
Validity
Not Before: Jun 8 22:01:01 2025 GMT
Not After : Jun 9 22:01:01 2025 GMT
Subject: CN=84939c9b151038939b533986169e5ef52f264551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1a:d2:8e:36:3a:69:33:7d:23:cf:b4:a2:6e:
78:9a:a0:0f:72:aa:60:6d:48:a4:97:53:18:29:3f:
ba:2f:79:42:f0:b9:e8:28:26:57:0a:11:18:2c:62:
51:52:a1:26:0d:c2:f0:2c:24:e5:b3:60:c3:6b:c7:
bd:73:49:d8:a7:68:c5:2a:c5:9f:25:25:3c:67:fa:
e5:a8:96:92:3b:5a:0f:a3:b3:8a:54:24:ed:ff:07:
d0:a4:f8:d8:4e:91:2c:ff:dd:3a:04:6d:61:b6:d4:
23:d2:11:17:4a:f4:5e:df:9b:8e:80:c3:38:71:57:
91:a6:74:98:73:67:73:46:40:2a:98:31:ca:2e:de:
e5:56:72:59:ff:40:2b:b5:b0:22:9a:32:f7:de:90:
08:50:ad:83:2b:f9:29:0c:71:23:85:36:55:66:c9:
c2:f7:84:f2:b3:73:9e:4e:71:06:a8:86:18:ff:ee:
9d:4d:ef:7e:1f:3d:d3:f0:c8:b7:ca:8c:71:8f:7a:
06:9b:13:a8:36:de:c0:b3:ab:f9:f5:b9:44:88:53:
de:93:de:0b:08:8f:8f:ed:e2:38:0a:8c:2e:2e:be:
0f:a8:00:73:15:37:8d:17:72:68:29:f2:26:29:f6:
93:86:5c:17:b5:2e:59:37:3f:82:73:87:4f:04:47:
3a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:93:9C:9B:15:10:38:93:9B:53:39:86:16:9E:5E:F5:2F:26:45:51
X509v3 Authority Key Identifier:
keyid:61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:04:8d:0c:3d:fa:db:55:50:1b:4f:be:08:3e:bc:1d:d7:df:
54:b6:a8:ce:3c:ea:76:d9:73:5a:c8:14:23:53:9d:3b:50:d5:
39:cb:7a:3e:12:ea:a6:77:66:67:f3:67:e1:31:d6:23:69:72:
84:1c:82:ff:0f:a8:c3:b7:5c:32:f7:fb:39:35:36:15:0a:ee:
6d:1e:6f:bf:27:b4:9a:9d:0a:34:0a:6d:8c:51:fb:1c:29:8a:
5a:bb:bf:9a:40:6a:3d:93:b1:5b:c3:ec:42:b9:68:a9:44:7a:
12:9d:a5:da:87:41:0e:b2:e3:e4:ab:bc:0e:3c:cd:0c:bc:fa:
ce:d8:74:fd:91:2e:d5:5e:3f:6d:7f:80:28:4e:af:a1:6b:26:
4f:94:a0:67:3a:5e:a3:dd:32:95:6e:91:cb:da:08:a2:a4:2b:
06:98:68:cc:21:ae:c4:8f:79:3d:9e:f8:d9:52:2f:1c:0c:7f:
d6:d1:07:1f:88:b5:14:e2:4c:a6:cb:cf:8b:8e:ca:78:73:72:
f5:7c:16:6a:c1:c7:13:45:4c:8b:f8:b0:68:5c:bc:9f:38:33:
ab:24:43:b6:6d:16:b3:cd:20:a3:0f:cb:f4:bf:02:28:20:78:
31:96:ce:24:34:6a:fd:c0:ae:6f:24:c7:ad:57:21:18:98:92:
35:62:7f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:16:08 2025 by rpki-client