Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
File: Y4g6eXidn2WBUpLxjUmAupxe0iE.mft (raw, json)
Hash identifier: wfKwo96FUclnYQ9/QPh9aScaSXJgVC2ZNnZECgH/X7s=
Subject key identifier: A5:06:A2:31:9C:9C:F6:BD:8E:CF:97:27:4E:2A:1A:FE:0D:1A:6C:3B
Authority key identifier: 63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
Certificate issuer: /CN=63883a79789d9f65815292f18d4980ba9c5ed221
Certificate serial: 0197394FFF831370432D84A68CFC733E6E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
Manifest number: 1574
Signing time: Wed 04 Jun 2025 05:00:33 +0000
Manifest this update: Wed 04 Jun 2025 05:00:33 +0000
Manifest next update: Thu 05 Jun 2025 05:00:33 +0000
Files and hashes: 1: AYWfSZfm3-m6tTmXQ7ScTVje9jw.roa (hash: jozIBgSrKgoY+kja8mOk3zf+5OHOQyudAHt7Y1IjLfc=)
2: Y4g6eXidn2WBUpLxjUmAupxe0iE.crl (hash: L1JlhicgwGfZkiJaZceodFlWkxRhYQztz3FqnYTi2BI=)
3: biZ-PgxYb414M_0ExkvqodzdxpA.roa (hash: gdhB0S0OkmMjabrUiIcvLE6RonkDcPiASoyoHfZiC4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:4f:ff:83:13:70:43:2d:84:a6:8c:fc:73:3e:6e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63883a79789d9f65815292f18d4980ba9c5ed221
Validity
Not Before: Jun 4 05:00:33 2025 GMT
Not After : Jun 5 05:00:33 2025 GMT
Subject: CN=a506a2319c9cf6bd8ecf97274e2a1afe0d1a6c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:89:74:79:2b:2c:60:7c:4a:71:d2:86:1c:d8:
31:f2:09:69:c3:e7:ff:47:a1:45:6e:5b:3f:7c:4f:
07:0a:8c:8f:0c:8a:0c:6c:d4:c5:c7:cb:68:e0:8b:
9f:e1:fc:33:4c:db:16:86:79:06:0f:2f:2b:a7:e3:
41:32:b3:d6:23:30:de:e7:03:16:45:73:95:67:ff:
59:ce:1b:09:18:73:5a:91:2d:3d:be:a7:ad:fe:45:
c0:c5:84:43:e1:24:8d:a2:0d:c5:6e:6e:88:3f:83:
92:cb:b4:b7:7d:d3:fd:0c:3d:f8:bb:bb:6d:a8:0a:
bd:0a:1b:1e:18:2c:4d:95:91:d3:9a:cd:ec:91:96:
5d:db:0e:18:c3:d5:70:6a:67:dd:3f:0b:65:2b:8f:
5e:cc:3a:fd:18:6f:7c:e5:ba:8a:c6:dc:39:7c:d7:
ee:69:24:73:69:eb:63:ff:93:dd:ea:c1:67:c2:3d:
8d:65:5d:f4:7e:cf:de:5c:d9:15:b5:9b:6a:f0:45:
00:29:36:1a:a8:fa:ef:a5:2d:52:07:43:03:48:c5:
bc:55:31:a8:59:80:82:97:c9:48:2f:59:ea:86:8f:
f1:d7:2f:7e:24:93:cd:31:f5:cf:90:6b:cc:0a:b5:
82:e2:5f:dc:06:a8:0c:f8:e7:0b:59:82:42:45:7e:
43:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:06:A2:31:9C:9C:F6:BD:8E:CF:97:27:4E:2A:1A:FE:0D:1A:6C:3B
X509v3 Authority Key Identifier:
keyid:63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:6f:ac:c7:3a:25:54:3b:e0:f6:a3:16:de:18:6d:ed:24:23:
08:0d:c0:1b:c9:02:36:03:b9:62:ed:0a:b9:11:6d:75:ea:23:
8c:56:e2:2c:91:3e:bb:f5:05:f7:50:c5:bb:a8:66:c5:65:a1:
c3:08:1c:4c:55:dc:79:6d:e4:b1:6b:0e:7b:54:ff:ce:6b:ac:
11:6b:37:6b:5c:cc:ff:6c:10:9a:8e:8b:d2:8c:c8:5a:e8:c1:
a9:bd:d8:3f:8d:9d:69:df:11:31:38:59:1c:b2:8b:29:42:4e:
d0:2b:59:d7:69:3e:fd:1c:65:ad:8d:ce:8f:72:d3:f1:85:23:
48:4e:3a:90:85:16:8b:de:1d:f7:55:7c:74:93:fc:52:e4:5d:
74:07:6f:9c:8f:d2:b5:2f:20:a7:f4:02:3d:77:4f:1c:38:0c:
c6:8f:da:2d:8d:f7:4c:07:d3:30:d8:50:30:cc:d4:a4:ed:33:
48:95:8e:e4:33:ff:20:81:9c:65:74:01:2f:72:62:be:f0:27:
d4:c6:9a:03:b9:b5:ef:d1:11:60:85:7e:5b:e6:1b:14:9f:b6:
ca:68:b7:35:e5:b9:61:d0:82:ad:0e:e7:54:18:db:4b:20:70:
ee:fe:5a:d7:14:d5:c5:20:c7:34:b1:97:ad:82:a3:38:4f:e4:
cc:c0:fb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:22:15 2025 by rpki-client