Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
File: Ymd-4I9LshmAS2czR8OgtqMy1yI.mft (raw, json)
Hash identifier: mn7mnwzwunCwp9wbNJCoXsJc2waMByIdKsIpbK43W5o=
Subject key identifier: 1A:36:19:03:2B:2E:1A:62:1B:F6:D0:22:B3:75:04:D9:6B:02:4F:D9
Authority key identifier: 62:67:7E:E0:8F:4B:B2:19:80:4B:67:33:47:C3:A0:B6:A3:32:D7:22
Certificate issuer: /CN=62677ee08f4bb219804b673347c3a0b6a332d722
Certificate serial: 019749681D2D680D2CDDCED8EC78163E4634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
Manifest number: 053A
Signing time: Sat 07 Jun 2025 08:00:49 +0000
Manifest this update: Sat 07 Jun 2025 08:00:49 +0000
Manifest next update: Sun 08 Jun 2025 08:00:49 +0000
Files and hashes: 1: Ymd-4I9LshmAS2czR8OgtqMy1yI.crl (hash: nd/ybsJydLf354DG3IDNFztLHgAm7jb5XwE3rjnzcjI=)
2: gQ1Mk4Ko4bazOy7pZDxAv9B_6qk.roa (hash: FoB5dUGf24mZ9gRXtihHS6AK0Gj+K7gCvGHMZywvDao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:1d:2d:68:0d:2c:dd:ce:d8:ec:78:16:3e:46:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62677ee08f4bb219804b673347c3a0b6a332d722
Validity
Not Before: Jun 7 08:00:49 2025 GMT
Not After : Jun 8 08:00:49 2025 GMT
Subject: CN=1a3619032b2e1a621bf6d022b37504d96b024fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:de:8c:95:08:fb:18:13:b9:53:07:c1:b4:
95:c9:31:3e:15:9c:45:b5:57:69:0a:a0:23:34:41:
d6:95:e8:64:b4:f3:77:6d:73:5a:e4:b0:11:03:3a:
ce:fd:a5:7e:9f:f4:10:e3:db:ad:a9:5d:85:4c:f4:
7b:ec:42:6b:b9:11:58:1d:d5:b3:03:7d:39:73:03:
ca:fb:1e:99:bb:7a:fa:fc:71:fd:28:58:11:3a:af:
2e:b5:f5:52:75:a1:d6:13:63:a7:6c:9c:f5:26:e2:
1a:24:f8:b9:68:c9:88:d8:1f:54:a2:82:0f:59:ec:
07:21:7c:da:64:63:3b:a1:fe:a4:11:1d:c8:ca:92:
e0:64:53:8b:16:88:b0:9d:44:a9:52:5f:8a:59:b7:
f6:1a:9a:b5:ce:b9:40:31:40:c2:85:b2:4a:2f:23:
d1:80:1a:12:ea:d5:81:bd:cb:05:70:05:e6:12:cb:
2d:f9:63:ca:ce:56:9f:cf:75:86:da:43:31:0b:cd:
ba:34:84:9e:58:65:36:38:e2:e0:5a:bc:7f:f5:81:
f7:b4:83:3d:a3:c9:84:bc:b5:8e:10:73:24:7c:68:
33:29:ed:3f:5c:57:ed:b3:db:d7:2b:99:53:30:5d:
d6:68:5a:7a:14:62:56:fe:16:ee:16:1f:76:25:3b:
48:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:36:19:03:2B:2E:1A:62:1B:F6:D0:22:B3:75:04:D9:6B:02:4F:D9
X509v3 Authority Key Identifier:
keyid:62:67:7E:E0:8F:4B:B2:19:80:4B:67:33:47:C3:A0:B6:A3:32:D7:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:63:6e:c6:f5:2e:3b:c7:9c:e7:a1:33:bc:57:62:91:e9:80:
96:51:57:3d:47:00:a3:0e:bb:75:af:89:61:96:e6:65:eb:56:
1c:27:c4:61:ad:3f:7a:ee:94:75:1d:67:4d:8a:34:c9:34:7a:
ac:bc:51:5f:df:b6:66:4d:53:28:49:6a:99:00:c0:d2:39:7a:
40:28:fe:0c:c3:15:ba:db:1f:19:99:06:ae:3c:b5:82:ae:9e:
fa:15:e4:01:ae:39:45:9f:c0:6d:99:4c:7e:b6:bc:bd:1f:de:
84:14:52:d8:c2:87:c6:60:1b:f2:10:e0:5a:bf:72:30:47:05:
78:79:0e:ac:29:d8:ea:49:0f:42:09:39:e7:17:07:aa:47:d6:
12:2d:9f:c9:3a:27:c1:13:78:9b:10:be:cf:b5:73:4e:0d:bf:
c6:03:ce:7a:3f:dc:67:3b:71:04:fc:ed:a0:ba:d2:f1:12:2a:
06:6a:94:6a:31:f7:b4:27:de:9a:cc:e4:ef:11:19:7e:94:26:
e3:ff:66:70:d6:18:24:06:ab:34:d8:4b:3b:ac:ba:e5:bd:85:
c5:e8:3c:4a:1e:b8:71:19:59:32:a8:56:94:fa:7d:73:b2:0f:
02:f2:b7:cd:1f:9e:1f:57:82:69:0b:d6:b1:39:2a:82:89:99:
a3:64:d8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:51:09 2025 by rpki-client