Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
File: yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft (raw, json)
Hash identifier: oSKEfeKJTUP0wYAYJSAyAaWMfBL4Xv+/FN6X8ZGR5Vo=
Subject key identifier: 4B:29:A0:47:01:89:B4:2C:E2:D5:38:05:44:DD:2F:0B:35:64:8F:C1
Authority key identifier: C9:1D:7E:44:9C:FE:C3:12:0A:98:51:16:3C:77:9A:60:26:98:61:72
Certificate issuer: /CN=c91d7e449cfec3120a9851163c779a6026986172
Certificate serial: 01974BFB5221A7EE548830828447676648DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
Manifest number: 02B4
Signing time: Sat 07 Jun 2025 20:00:51 +0000
Manifest this update: Sat 07 Jun 2025 20:00:51 +0000
Manifest next update: Sun 08 Jun 2025 20:00:51 +0000
Files and hashes: 1: yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl (hash: utvNCjTbylZJUg+Vie//IyCCjNApO+398UI/3me+C9U=)
2: z4GL3R9iwn241BwmecTavitjvmk.roa (hash: gozzqy0wMPz097Vp/T+QSgyQzissUGlOoz2lP5A4OOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:52:21:a7:ee:54:88:30:82:84:47:67:66:48:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91d7e449cfec3120a9851163c779a6026986172
Validity
Not Before: Jun 7 20:00:51 2025 GMT
Not After : Jun 8 20:00:51 2025 GMT
Subject: CN=4b29a0470189b42ce2d5380544dd2f0b35648fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9c:7d:22:ab:83:0f:3b:30:6a:81:f3:f8:e6:
34:f5:d1:c5:f1:62:91:56:06:9a:57:af:c5:3f:52:
4f:dd:16:1b:4a:82:57:4b:6f:01:0a:09:ba:ea:38:
94:75:fc:5b:05:56:d3:82:f0:77:50:e4:23:01:0d:
2c:90:57:ee:c2:2a:85:56:ea:d2:7e:4a:ec:09:91:
84:e8:06:8b:8a:75:94:24:c0:37:5d:47:2e:43:5a:
4c:da:9c:3d:19:82:2b:d4:dd:3f:45:e1:d5:1f:55:
48:1b:40:48:f7:3d:2e:d7:fa:09:fc:18:2c:41:3c:
1f:c3:23:58:63:3d:b8:36:eb:55:70:79:02:60:2c:
c9:0e:92:4c:73:81:a5:33:14:9d:a9:cb:62:42:88:
ae:78:5c:7e:54:34:59:da:b4:3a:0d:a7:2a:b6:48:
8a:01:ff:7e:f6:36:69:ec:57:9c:52:a8:37:cd:c2:
4a:33:77:e4:4d:12:88:f8:af:c0:fa:26:08:5e:70:
d2:b3:c0:76:4c:56:30:5e:35:69:51:5a:54:02:bd:
5a:49:73:14:73:b4:79:95:5e:db:0c:7b:2a:63:75:
5d:1c:73:25:de:d7:24:82:40:a3:49:fa:50:a6:50:
89:bc:6e:da:07:1e:0f:ef:6e:9a:56:ca:0e:3d:3e:
73:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:29:A0:47:01:89:B4:2C:E2:D5:38:05:44:DD:2F:0B:35:64:8F:C1
X509v3 Authority Key Identifier:
keyid:C9:1D:7E:44:9C:FE:C3:12:0A:98:51:16:3C:77:9A:60:26:98:61:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:96:c5:1f:f3:6a:45:73:07:f7:a8:bf:ac:90:53:b8:b9:1a:
0e:9c:ea:4a:89:3f:89:29:10:44:e0:00:6c:f2:46:2a:fa:09:
0d:86:16:95:2f:01:28:33:d7:8c:e0:d4:6e:9a:f2:1c:d8:08:
a1:f7:70:51:d4:f5:6b:33:a8:fa:26:fb:10:31:46:07:f6:da:
99:bc:58:b6:c9:a6:75:84:56:3c:e8:a3:c8:98:b9:f3:38:4b:
05:28:5c:de:8b:2e:e9:d9:c4:d8:f4:2a:b0:3e:cb:0e:e4:cd:
f0:73:60:91:b6:4c:d5:16:eb:3d:6c:89:13:9a:7a:d2:6a:b3:
94:dc:94:db:0f:99:02:61:d0:8b:fb:76:58:dc:49:17:f5:f3:
ee:98:74:55:fe:99:18:5a:8f:40:99:62:ee:46:d3:35:3b:92:
ea:a1:84:4e:3a:54:c7:d1:38:40:ec:3b:bd:5a:3f:de:61:ec:
14:3e:9a:bc:38:f9:55:ec:01:fe:15:7a:33:ab:aa:8a:46:58:
61:f7:8a:3d:77:fe:11:fb:0e:55:6c:a4:4e:2d:09:b6:92:98:
c7:5e:ff:c8:20:88:73:c0:b4:2c:69:85:f9:6c:53:58:c0:b3:
5c:d5:1a:26:bf:b3:4d:74:a6:a1:88:b5:a3:eb:65:5a:94:6d:
87:cb:0a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:36:28 2025 by rpki-client