Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
File: yxTTDzseETdCPEsjWVfzMDBk2v8.mft (raw, json)
Hash identifier: nlrYQuSVB2m0gcStCnBx9fNN0YOKEz6XZPHeM0cr18o=
Subject key identifier: 4F:91:24:79:D3:9B:ED:C0:35:79:FA:1E:25:7B:B0:84:06:9C:C7:4A
Authority key identifier: CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF
Certificate issuer: /CN=cb14d30f3b1e1137423c4b235957f3303064daff
Certificate serial: 01975235586EF25DCF1BD84F0D6DB9CDD698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
Manifest number: 1583
Signing time: Mon 09 Jun 2025 01:01:57 +0000
Manifest this update: Mon 09 Jun 2025 01:01:57 +0000
Manifest next update: Tue 10 Jun 2025 01:01:57 +0000
Files and hashes: 1: eLZf6bXb8xEZurUf42JvubCYQLQ.roa (hash: CQdXKjlldjU5ONxgLx9uzQIu5vM63ThRAoUDUMH3Bko=)
2: yxTTDzseETdCPEsjWVfzMDBk2v8.crl (hash: H8IPXufqCQWNNAGCQyyTRjcfSx0mlGqkqP5wbvQFDm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:35:58:6e:f2:5d:cf:1b:d8:4f:0d:6d:b9:cd:d6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb14d30f3b1e1137423c4b235957f3303064daff
Validity
Not Before: Jun 9 01:01:57 2025 GMT
Not After : Jun 10 01:01:57 2025 GMT
Subject: CN=4f912479d39bedc03579fa1e257bb084069cc74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:39:3f:05:8a:72:13:6d:9b:ac:c9:3d:6a:ec:
af:ea:fa:c4:c2:24:c2:ed:5d:6f:6d:b6:08:6a:6b:
55:90:b7:05:57:b4:6d:76:97:48:ad:ba:0b:1c:19:
c5:eb:98:ec:5a:13:bf:b0:4e:ad:96:9c:c7:19:58:
5a:be:33:02:66:67:d5:8d:02:93:bc:5b:68:8f:a8:
62:3b:80:a4:0a:bc:bb:ff:1a:30:5c:a7:2b:10:4a:
cc:30:02:34:af:18:46:12:6b:6c:4b:75:0d:55:39:
2f:af:aa:e2:8e:1e:bb:3e:9f:d5:bf:20:71:9e:15:
79:69:e5:7d:e1:87:06:36:16:d6:0c:e7:f4:0a:7e:
ca:c5:4e:e9:55:65:2b:44:d0:ab:c9:bc:fd:03:c1:
e1:3f:a1:77:1f:a9:ea:f7:c0:92:38:8a:48:99:f7:
87:40:b8:16:ed:10:6b:ba:44:ac:36:af:7f:0c:27:
a5:48:34:4c:92:b1:e2:d8:8d:c7:16:97:27:67:03:
e8:66:cc:d6:b4:30:87:23:5f:7b:9c:3d:77:6f:f5:
0d:97:f8:cc:53:d3:72:1f:f8:85:32:e8:41:3f:fb:
9d:d7:0a:67:c0:dc:1b:e1:2b:95:02:bf:c2:10:7b:
50:06:b2:a9:86:8b:88:43:fd:05:5b:e9:f1:09:44:
1e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:91:24:79:D3:9B:ED:C0:35:79:FA:1E:25:7B:B0:84:06:9C:C7:4A
X509v3 Authority Key Identifier:
keyid:CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e5:52:bb:95:70:52:d0:df:d0:1a:58:8f:a3:8e:6f:f2:5b:
e9:99:86:ca:0d:d5:b5:77:7e:96:a4:75:be:29:e3:dd:48:8b:
62:6a:28:b8:52:29:4c:41:12:7b:6e:41:85:4d:9e:07:3a:b0:
10:96:9f:cd:e3:37:0c:de:c2:2d:15:fe:6e:28:4e:ed:14:86:
98:7b:ad:6d:8f:d6:cc:34:a4:47:21:63:5c:bb:ad:67:79:8f:
fd:34:23:ca:5d:e5:9f:1e:08:31:8f:44:81:e8:12:dc:f2:90:
ba:12:c0:e0:b6:90:c7:6c:a9:9c:ec:c8:6e:5d:1b:e2:95:30:
3e:3c:b1:4f:b7:39:3f:8a:20:58:54:98:8a:75:5b:a4:21:f4:
4f:47:37:e0:7b:8d:0f:d6:4c:f8:06:10:97:0a:0f:22:a1:16:
1b:b8:a6:3f:84:e7:af:39:07:d7:4a:bc:b2:0e:34:7f:c6:ca:
89:56:62:1c:dc:43:36:76:3d:0a:24:f1:ed:d6:19:c5:ea:2d:
0e:91:54:3c:d5:3d:de:47:ba:a2:9c:f6:0a:49:cd:a7:5c:fe:
be:af:0d:0c:33:02:29:c2:e9:46:5a:76:de:72:24:72:4d:74:
14:0d:04:e1:64:ee:01:6e:ed:47:42:f9:db:ba:8d:50:24:09:
cb:7c:8d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:17:37 2025 by rpki-client