Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
File: yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft (raw, json)
Hash identifier: 6q1HcHXF2CB83+9s9r/FmrnAr14pcVh+YQrJ3Li9JZ0=
Subject key identifier: 8B:89:59:A7:88:57:F3:6C:13:A4:56:08:E1:6B:82:B0:0B:4F:DB:80
Authority key identifier: CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
Certificate issuer: /CN=ca37843f0752224459e6034569a217c8b611564b
Certificate serial: 01976EF4FF8F1205C2B7083BA25EC347436E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
Manifest number: 1594
Signing time: Sat 14 Jun 2025 15:00:39 +0000
Manifest this update: Sat 14 Jun 2025 15:00:39 +0000
Manifest next update: Sun 15 Jun 2025 15:00:39 +0000
Files and hashes: 1: VUGB_aCyOLA1Q6JSyAIK8Xkmymc.roa (hash: IOfuqkQd8JjyCobA5qA+5uEdvI2UFX4aZo+Aq0Rs/7c=)
2: Wp47mYbGIM1Wn1TH4UytNLnpCRE.roa (hash: s3jKeR589toj6Nv3VDplJDroNH801WsVAu93zGQYjRo=)
3: yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl (hash: FiM1o8lZ4cydhnlwsywK1l8q7OVsANmfoj77h3h13xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:ff:8f:12:05:c2:b7:08:3b:a2:5e:c3:47:43:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca37843f0752224459e6034569a217c8b611564b
Validity
Not Before: Jun 14 15:00:39 2025 GMT
Not After : Jun 15 15:00:39 2025 GMT
Subject: CN=8b8959a78857f36c13a45608e16b82b00b4fdb80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b4:99:05:ec:33:46:85:d4:69:e4:f9:b0:b2:
1e:28:b0:f8:2c:e3:cd:a3:13:66:2a:4e:77:62:10:
82:83:f9:ba:cc:2a:91:25:94:f7:fc:e3:81:3f:2a:
98:0c:39:5d:d5:c7:9c:f3:b2:a8:3c:0a:ef:5e:99:
2b:9e:ef:48:4a:44:84:b8:c4:c6:da:6e:22:d0:d8:
8a:9c:13:4b:1d:58:f5:02:c3:72:85:97:ac:bf:ed:
9d:d1:1d:56:c8:8b:e0:e4:3a:25:4d:38:53:d1:cc:
c8:42:6b:ff:c9:1d:0e:19:ca:c4:b3:0c:14:7d:a6:
45:b3:38:36:6a:5e:42:dd:e9:72:19:1c:b0:61:09:
ae:f1:30:1e:61:dd:5b:b2:d1:06:de:09:b0:d5:42:
7c:02:b2:73:88:5a:81:f0:de:c1:19:59:b5:e4:3d:
b9:fe:f6:cf:5f:7f:31:58:00:5d:71:74:da:c1:c0:
ec:5c:f6:38:50:27:f2:c5:3e:04:ce:f4:ec:19:e3:
f6:98:49:02:74:88:2f:1d:2a:b0:9e:f3:b8:9b:82:
da:bb:45:9a:59:bd:f3:b0:e4:b1:f4:a3:be:d1:90:
21:85:45:1e:37:b6:72:8c:5c:a1:96:ad:28:9e:34:
d4:fd:f6:8e:83:36:e4:01:f1:43:c1:17:fb:df:90:
ac:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:89:59:A7:88:57:F3:6C:13:A4:56:08:E1:6B:82:B0:0B:4F:DB:80
X509v3 Authority Key Identifier:
keyid:CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:7a:67:4b:a8:80:60:7b:06:be:4f:b2:ff:d4:30:fc:9d:41:
ea:62:6a:09:89:27:08:ef:9c:07:97:4f:21:90:ed:be:a5:5f:
df:4d:fb:22:98:d2:45:49:32:a7:06:5b:75:7d:97:f3:af:39:
49:15:dc:a4:96:9b:f4:08:c3:33:64:93:96:e1:8f:2a:51:61:
7a:5d:25:57:a5:a0:ca:18:d2:d0:29:2a:ec:01:c3:9b:fd:ee:
1f:29:4e:47:1e:5b:34:a0:d5:52:37:a8:4f:bc:3c:11:8b:e1:
aa:f4:82:21:d6:dc:cc:c7:50:b5:41:85:5b:61:a8:f6:87:36:
7b:c4:c1:3d:8f:5c:2e:7a:40:82:d1:e2:77:f6:ef:07:7a:ca:
5d:fe:fd:0d:95:3f:33:8f:bb:ae:eb:88:27:9b:a5:9d:fd:d9:
03:af:56:c0:a7:5a:6f:ff:ac:81:ae:2e:70:59:72:75:b4:71:
3e:0f:0b:37:a0:0e:4b:e8:2f:0d:67:5d:aa:96:5c:33:f6:c7:
e2:b1:69:0f:87:60:d3:ee:ba:f7:77:94:b3:cc:bd:f4:fe:91:
4e:5e:e5:bf:25:2a:a8:bd:58:7a:8e:e2:41:74:31:65:d3:88:
c8:f5:88:56:45:c7:4f:eb:94:ef:26:c5:5f:e6:75:a2:a9:a1:
32:26:4f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:09:35 2025 by rpki-client