Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
File: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft (raw, json)
Hash identifier: pxnX2ed2q5m5Pr/AX0WyYZ/KXCrAEnWGGiNEH4K6Hp0=
Subject key identifier: 3B:AE:01:8D:24:6E:99:A5:04:B5:30:0F:41:F9:29:29:BD:BB:9D:2B
Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
Certificate issuer: /CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Certificate serial: 019768BBA88B3E12FA2F1F84CBDB5027D640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
Manifest number: 159D
Signing time: Fri 13 Jun 2025 10:00:18 +0000
Manifest this update: Fri 13 Jun 2025 10:00:18 +0000
Manifest next update: Sat 14 Jun 2025 10:00:18 +0000
Files and hashes: 1: I5z_1hVliNBBM0FrqHpN1qPTca8.roa (hash: n/sNB3WBcM+raTHs73p1MwMj7v/dmk/wcLeQX9QTiHw=)
2: _Xj2eknSD0ggywf9BvZfFW4ND5Y.roa (hash: lqrmQ5OQaXV1qMgJ8jG3Tq4DJQ0kTl6M/TLRe7MYJpY=)
3: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl (hash: Uy0NCbjlbrNm/0TRe52QBrYlDtbjU3OFL3fB5cj5n+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:a8:8b:3e:12:fa:2f:1f:84:cb:db:50:27:d6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Validity
Not Before: Jun 13 10:00:18 2025 GMT
Not After : Jun 14 10:00:18 2025 GMT
Subject: CN=3bae018d246e99a504b5300f41f92929bdbb9d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:28:d8:24:d8:1a:58:c4:27:c6:08:b9:8f:b0:
69:ec:86:b1:96:e9:c6:73:2b:03:7a:22:bc:b7:9e:
b0:47:4c:d7:5c:ae:39:16:ac:80:61:0f:fb:f5:59:
52:7a:cd:94:f7:63:e1:a0:35:fd:9f:ef:a3:23:9d:
fa:47:91:e5:49:19:c8:a6:2d:9c:1a:be:b1:72:87:
81:c3:f8:0f:d0:32:ce:05:65:23:64:91:70:eb:26:
3f:84:ef:47:cb:f3:dc:c3:e3:be:40:d8:09:1b:05:
0c:3b:79:3a:15:8e:d8:82:95:05:1e:0d:ee:66:b5:
df:03:3d:8f:f9:4e:c5:b6:9a:49:c0:a2:07:32:6f:
33:f8:52:47:49:d2:6b:1b:99:6e:a4:af:4b:11:68:
4c:f1:57:fc:5d:37:80:f7:a3:06:ad:19:6a:c3:03:
f8:b9:2d:b9:33:6e:ac:6a:02:2b:f7:42:16:34:83:
1f:8c:69:e9:2c:5d:a7:a5:b6:7a:79:66:5d:00:f0:
88:b9:30:4a:0e:b8:57:2e:71:29:11:a4:ae:57:4d:
56:d5:9f:7d:9d:ec:13:c0:70:f7:09:9f:a6:22:d5:
61:74:06:a4:86:60:fb:3f:2b:1f:41:16:db:c2:9b:
0a:42:4e:19:97:73:d7:dc:4e:2f:c5:b1:c3:f8:03:
d0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AE:01:8D:24:6E:99:A5:04:B5:30:0F:41:F9:29:29:BD:BB:9D:2B
X509v3 Authority Key Identifier:
keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a5:5d:18:2d:19:39:b1:12:60:f0:c3:8c:4b:d8:e9:5e:04:
5e:74:7a:1e:5f:7f:c6:98:78:9f:b2:bd:60:5d:7c:f3:8d:77:
55:a7:36:59:66:a5:4a:be:84:b4:21:e3:23:79:4e:06:9d:e1:
02:a2:60:bc:ba:c0:04:da:3f:84:89:b4:12:af:a7:85:09:db:
eb:d8:dc:a4:fa:0b:f8:ac:c8:00:a3:6c:ee:a2:49:20:33:42:
b5:5b:2a:b7:00:f7:1a:04:ce:fa:f3:72:8c:2a:19:3e:d1:47:
b2:5e:b5:e0:2d:0b:1f:c0:dc:1e:18:a4:29:36:05:a1:2e:23:
20:ad:67:0a:53:2b:0f:dd:a6:73:6d:f0:49:a6:fd:a4:22:ce:
eb:60:22:eb:a0:6c:7f:cf:12:f1:ee:c8:c6:35:70:57:58:b9:
2a:a3:98:4f:fe:b7:c2:0c:9c:a8:e3:ee:eb:65:97:74:b4:db:
39:2e:01:34:60:9a:a9:60:2c:55:84:dd:18:87:33:65:bb:00:
54:92:21:db:77:86:07:2d:28:62:51:10:d4:c7:02:89:e3:79:
36:6a:07:66:41:61:cf:e5:d0:1e:38:32:af:92:64:97:ab:ff:
e4:7c:10:27:e8:9c:6f:af:bf:3c:87:d6:42:13:f2:93:a8:e9:
06:ba:10:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 13:06:34 2025 by rpki-client