Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
File: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft (raw, json)
Hash identifier: hXPRcs6jtYnYoedRGCwr4zjFuzEN6fJrz3nAAI1TKjY=
Subject key identifier: D6:97:8F:9A:9C:5D:2B:EA:31:E5:CB:81:DF:93:AF:7F:DD:1B:44:86
Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
Certificate issuer: /CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Certificate serial: 0197537DBA4666F82F0EC2732C34CA599790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
Manifest number: 1592
Signing time: Mon 09 Jun 2025 07:00:38 +0000
Manifest this update: Mon 09 Jun 2025 07:00:38 +0000
Manifest next update: Tue 10 Jun 2025 07:00:38 +0000
Files and hashes: 1: I5z_1hVliNBBM0FrqHpN1qPTca8.roa (hash: n/sNB3WBcM+raTHs73p1MwMj7v/dmk/wcLeQX9QTiHw=)
2: _Xj2eknSD0ggywf9BvZfFW4ND5Y.roa (hash: lqrmQ5OQaXV1qMgJ8jG3Tq4DJQ0kTl6M/TLRe7MYJpY=)
3: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl (hash: RxuOA6lKk6IcXEqf0IxETgnN5xozD87nxxd4wPu78Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:7d:ba:46:66:f8:2f:0e:c2:73:2c:34:ca:59:97:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Validity
Not Before: Jun 9 07:00:38 2025 GMT
Not After : Jun 10 07:00:38 2025 GMT
Subject: CN=d6978f9a9c5d2bea31e5cb81df93af7fdd1b4486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:00:66:85:2b:76:08:f2:d9:ac:37:cf:48:
3e:bb:44:0c:93:a6:46:df:9e:31:6f:dc:54:0b:70:
ef:45:86:d5:36:79:ce:b6:c9:1b:9a:e3:79:e9:61:
24:8d:8e:62:81:b0:1a:88:2d:93:3d:a9:11:a1:85:
6d:55:e5:fb:15:12:d6:86:da:cb:57:ee:b9:4e:fe:
8a:40:32:ad:e9:fd:b0:96:56:6a:87:2f:c7:bc:6e:
28:d8:53:5f:64:26:25:5c:c9:62:47:51:2d:3d:bd:
19:e0:af:c9:58:c1:f8:6b:68:a7:a7:4e:97:fe:1d:
bd:4d:d1:46:63:c2:b3:d8:6e:7e:ee:17:02:91:7c:
48:17:17:4e:2f:5f:17:01:4b:ce:64:85:d6:0f:eb:
4f:8c:a1:38:c8:59:71:fd:ff:15:8a:8f:61:84:02:
e1:1b:78:f5:07:33:d2:f8:31:43:5b:8a:f4:26:21:
54:37:0a:6a:87:3f:13:5d:c4:a7:8f:c0:cd:63:d5:
73:4c:ae:9c:91:6c:79:b5:d3:6f:6c:8d:48:2e:de:
88:58:c4:87:02:fe:c6:3b:5d:89:ed:b7:e2:a8:0c:
bd:cf:a0:02:9d:ac:91:2a:98:bf:ad:18:66:10:2a:
c7:a1:d7:3c:bc:11:0a:e7:53:04:03:ab:de:91:95:
26:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:97:8F:9A:9C:5D:2B:EA:31:E5:CB:81:DF:93:AF:7F:DD:1B:44:86
X509v3 Authority Key Identifier:
keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8c:79:5a:2f:52:9c:59:c2:7d:03:51:c9:b6:a3:81:1d:1a:
26:ab:a6:32:3f:49:21:f4:65:a4:d2:37:d6:65:0a:06:0b:6b:
59:df:8a:2a:e3:30:2a:ad:36:c2:98:fb:f8:8b:18:08:81:79:
1e:52:11:ef:59:30:bb:3b:fa:7f:d5:2e:da:00:aa:8e:93:bb:
22:a6:29:0b:07:92:4a:ae:a0:1f:5d:40:a4:d2:52:a4:5d:42:
44:a6:74:1c:39:7e:de:22:8f:bd:3b:93:a3:c5:4c:b1:eb:ee:
5f:3e:2b:bc:90:52:48:d4:56:40:e5:01:50:2a:14:d7:57:f3:
9a:8b:2d:49:dc:2f:5c:fa:8d:0d:aa:70:89:e7:cf:4c:44:92:
79:c1:eb:8f:da:70:99:f5:36:85:35:92:fb:74:3f:6c:19:65:
ed:e6:01:ea:7f:48:37:b3:4f:9f:a6:b0:02:d1:40:30:fe:3f:
c2:e1:86:be:79:fe:32:e8:1d:fe:9f:cd:35:e8:10:06:c6:b1:
9a:c2:f0:ae:34:30:98:cf:d5:09:d8:94:5d:60:36:cd:bf:14:
fc:32:0c:e0:47:b9:61:2f:3a:18:c6:39:f0:ac:43:7d:1c:05:
3a:12:99:50:cc:d7:b3:df:39:09:d0:7a:53:b0:32:94:55:fb:
9e:51:9a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:19:59 2025 by rpki-client