Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
File: yxvWK-7KsOkDspgRJB2yRLv1LDk.mft (raw, json)
Hash identifier: ctlBa/WOF59+vjwgHicB0ObT7dayRM/Cz2LD5ACHQoo=
Subject key identifier: F5:CE:48:D8:FE:A9:22:5B:1A:93:A9:4B:D8:3E:04:74:F2:0F:BB:1F
Authority key identifier: CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
Certificate issuer: /CN=cb1bd62beecab0e903b29811241db244bbf52c39
Certificate serial: 0197499F0B9F7E5A029031FB2A39EF3785DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
Manifest number: 0F1C
Signing time: Sat 07 Jun 2025 09:00:49 +0000
Manifest this update: Sat 07 Jun 2025 09:00:49 +0000
Manifest next update: Sun 08 Jun 2025 09:00:49 +0000
Files and hashes: 1: 5aYNWnqt5MGeMuyfI5maKIJbJY4.roa (hash: 8Iaoh9OG5OjpMjtvt8V5oYDLknZ3K/iUcc80PeVe4YY=)
2: LlheXbpgUpnd6LfIavs5m7046X8.roa (hash: m29XywNUw2LYO1n9FuR/vWvutq9J3qKuKN5li9RC9G4=)
3: yxvWK-7KsOkDspgRJB2yRLv1LDk.crl (hash: 6WpQl3YDKdbXpNmQQe7qieGw6SW4p3KzAV7oAREO/nU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:0b:9f:7e:5a:02:90:31:fb:2a:39:ef:37:85:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1bd62beecab0e903b29811241db244bbf52c39
Validity
Not Before: Jun 7 09:00:49 2025 GMT
Not After : Jun 8 09:00:49 2025 GMT
Subject: CN=f5ce48d8fea9225b1a93a94bd83e0474f20fbb1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5f:97:d6:73:9a:3c:d1:56:e9:bd:f3:e2:90:
4f:00:ed:4c:23:8c:0f:b7:a7:8c:8b:b7:64:05:c8:
19:ed:06:9a:b2:68:80:7e:ef:e2:1e:b2:a1:41:6d:
8a:7a:59:44:bb:25:f2:09:58:c0:10:2c:3b:b0:2d:
58:70:f1:f3:71:09:e2:db:22:a9:0b:e2:d2:1b:bd:
7f:54:de:b2:b2:5e:52:56:be:79:ba:87:e0:6c:6d:
9e:ff:c9:51:44:a8:c7:c2:b8:67:9e:f5:78:c8:6c:
a0:0a:44:f6:6b:d2:f6:a9:f2:84:9f:db:34:d5:c9:
05:34:3a:b8:84:7e:db:4d:c9:d5:c7:b0:28:c9:e0:
38:b8:11:d7:33:ff:05:16:d1:94:ce:7b:41:53:f3:
c4:7c:6f:73:14:4a:3e:36:21:d6:fb:e1:0b:c3:f3:
21:f7:5c:f6:b0:b7:13:c3:d9:52:70:3c:f7:ef:20:
06:3a:b0:81:52:7a:c3:9d:2d:88:85:c5:bf:3b:a7:
e0:2e:2d:7e:30:49:f3:bd:e6:13:23:70:91:75:6a:
d5:99:02:07:90:4c:44:4c:58:e5:77:cf:39:b1:8d:
d4:61:54:32:4c:dc:ca:89:5c:81:90:9d:c4:ad:8b:
9a:54:0b:a5:37:a9:e6:49:17:f3:b5:96:65:12:25:
4e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CE:48:D8:FE:A9:22:5B:1A:93:A9:4B:D8:3E:04:74:F2:0F:BB:1F
X509v3 Authority Key Identifier:
keyid:CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:4e:42:d9:d0:60:ec:ec:72:0c:c1:97:f3:80:97:6d:ea:86:
05:13:bb:2d:39:a7:ae:af:36:b5:ee:34:5f:0f:a5:a6:88:c0:
57:1d:60:57:6a:c9:0a:01:ee:6e:4e:56:5c:d7:ac:68:ab:af:
f1:f7:54:07:84:7b:0d:c7:bd:ce:50:d9:b9:b2:3f:13:38:1c:
f2:a1:c0:ac:41:45:9a:d9:6b:18:66:5a:88:df:94:d6:a4:72:
eb:d3:e2:68:3a:1d:05:e8:30:55:c7:19:e7:04:c0:0b:9c:5a:
68:5a:08:fb:d6:69:f6:c9:b4:c8:0d:ed:f6:10:0e:75:5e:3a:
d0:9c:ba:47:b9:53:79:39:0d:d6:d6:ea:ee:c5:b9:4f:b1:cf:
0f:a0:c2:17:05:7d:38:2e:55:17:49:21:89:2e:5a:3a:f1:07:
5b:07:48:cd:fd:03:df:22:7c:f1:86:03:ef:10:43:6c:56:67:
a7:fe:c3:dd:27:73:33:72:41:5e:ad:bb:54:24:ea:78:9d:17:
5b:75:f4:e3:29:07:0f:3a:57:4d:91:24:fe:04:54:3a:8a:9a:
d3:de:ed:44:1b:6a:c5:11:42:86:04:88:90:eb:9b:70:61:ec:
d9:fa:e0:e2:46:98:13:5d:1a:aa:f6:37:9f:aa:66:05:e5:ba:
6e:c9:c9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:58:29 2025 by rpki-client