Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
File: Y4H3IILjEgadg9mvTzGc8K-ANkc.mft (raw, json)
Hash identifier: QA+7lW6YthmK2k8NSNQKuSGHIkvNDTikZhFyKLszitc=
Subject key identifier: 00:5E:D4:FA:58:E2:13:C9:62:C3:F7:C3:DF:71:F1:DE:97:B3:3E:FF
Authority key identifier: 63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47
Certificate issuer: /CN=6381f72082e312069d83d9af4f319cf0af803647
Certificate serial: 01974FA11D1C1F4CFE4D9F7404E502DF786E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 13:00:48 +0000
Manifest this update: Sun 08 Jun 2025 13:00:48 +0000
Manifest next update: Mon 09 Jun 2025 13:00:48 +0000
Files and hashes: 1: Y4H3IILjEgadg9mvTzGc8K-ANkc.crl (hash: f4k8M4EftLMRCg8bZo3FXv7aU0OxIcDFdFTOYx7YOAY=)
2: dOaeIHruifCT3_Y-NZ9ouvbnhuc.roa (hash: PG+NsqO34TjeMURDoubqwQXu9F/XY0vJGA8jsdkgloo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a1:1d:1c:1f:4c:fe:4d:9f:74:04:e5:02:df:78:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6381f72082e312069d83d9af4f319cf0af803647
Validity
Not Before: Jun 8 13:00:48 2025 GMT
Not After : Jun 9 13:00:48 2025 GMT
Subject: CN=005ed4fa58e213c962c3f7c3df71f1de97b33eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f6:66:c8:b0:55:03:a0:a6:55:1a:4e:c3:d7:
7d:fe:5b:38:c8:52:c1:a4:b1:18:5b:44:81:1e:0a:
c2:19:c9:68:0a:9e:4b:83:e3:34:38:f3:fd:86:d1:
c2:19:71:e6:6d:2c:f6:83:7a:32:c2:9a:f5:e2:13:
1c:75:cd:6d:b4:6c:28:1c:5c:7e:3a:2f:8b:76:76:
67:fe:a8:93:12:a2:c0:a7:9f:22:d4:f2:09:ca:3e:
4f:81:29:be:4a:71:71:d5:94:56:6c:38:fc:bf:20:
bb:7d:5e:0f:98:fb:38:97:59:b5:ef:03:7f:73:45:
f4:42:8e:e3:11:73:0b:a2:22:86:06:82:eb:4b:49:
69:40:6f:bd:24:a4:93:cc:74:ee:3e:28:6f:1a:f5:
f3:d4:f8:51:7c:7b:99:2a:06:c2:b0:a8:89:d8:75:
46:35:11:43:ca:73:63:8e:e6:cb:61:b7:b7:b7:1f:
13:85:69:4d:5a:e5:aa:ad:96:bb:8a:27:6a:77:36:
dc:a4:50:ca:b3:e3:d8:03:87:e0:52:a2:34:bb:67:
22:fe:ae:03:16:65:f5:f2:54:32:47:c2:ed:f9:5b:
47:12:23:f2:f3:e4:00:39:ab:ee:05:fe:14:ff:83:
7e:2f:18:d1:f7:21:8a:42:15:0a:8a:be:27:be:96:
0c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5E:D4:FA:58:E2:13:C9:62:C3:F7:C3:DF:71:F1:DE:97:B3:3E:FF
X509v3 Authority Key Identifier:
keyid:63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:1e:9a:c7:77:a9:19:75:a3:8e:2e:ea:f6:95:b6:35:8e:87:
80:bb:d0:b0:00:8c:14:16:8c:cf:9b:63:eb:fe:8b:31:20:bf:
ce:df:d2:bc:8b:42:44:df:f8:8f:d3:a1:6c:43:ef:22:22:a0:
44:f0:34:7a:11:f3:c4:fe:f2:9c:63:82:80:14:06:08:8f:f1:
5a:70:fd:fd:9c:da:8c:7b:07:9f:00:2d:47:82:9f:a0:65:ab:
72:38:ab:db:69:fb:4a:41:49:bf:82:33:34:83:fb:e9:ef:3a:
f1:2a:96:aa:96:9c:7e:17:bf:f5:1e:6f:ac:e4:5d:0e:18:cb:
a2:47:ed:a1:a0:94:dd:8b:61:a6:c7:49:79:fe:82:f0:93:e4:
07:8a:57:ee:93:61:05:97:23:97:07:07:49:a1:e8:09:be:15:
8b:0b:a3:05:e8:5f:c9:a4:a0:fb:9c:ce:54:e1:1e:59:c4:11:
f6:95:e0:99:42:9e:1c:d0:0e:9c:38:f4:5c:32:90:b2:b6:0b:
e6:24:1f:48:0f:42:0b:75:44:38:1e:ef:02:30:00:26:61:15:
6e:55:f7:95:cf:e7:fb:46:64:4f:1e:eb:dc:38:77:7e:cc:36:
1a:42:63:53:c4:81:65:d7:6c:94:a2:8c:53:2f:44:21:e3:92:
1e:db:30:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:10:25 2025 by rpki-client