Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
File: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft (raw, json)
Hash identifier: sAiwNdaVkg7iBBrd0tuIoI+TMUBbC0BPQYBQ0AiIwbA=
Subject key identifier: D2:84:11:60:E1:2B:81:5E:49:6E:9B:F7:45:31:AE:EF:A8:01:B2:85
Authority key identifier: 63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
Certificate issuer: /CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Certificate serial: 01975791661F7F015A2D4058B491675D9D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
Manifest number: 1586
Signing time: Tue 10 Jun 2025 02:00:36 +0000
Manifest this update: Tue 10 Jun 2025 02:00:36 +0000
Manifest next update: Wed 11 Jun 2025 02:00:36 +0000
Files and hashes: 1: 0BwZhdU4Lc_MGtRgtacxMwCAmgo.roa (hash: YpXynUUs/IPOe7m4GtxSxjQNSHfpLk0MgTtZ8VR9x/E=)
2: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl (hash: MKbnLWT79rdX7tD9VIeJjWAw4ScENNVrXIXDaZFjA94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:91:66:1f:7f:01:5a:2d:40:58:b4:91:67:5d:9d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Validity
Not Before: Jun 10 02:00:36 2025 GMT
Not After : Jun 11 02:00:36 2025 GMT
Subject: CN=d2841160e12b815e496e9bf74531aeefa801b285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:bc:77:01:47:28:76:c6:1f:35:8a:d7:0f:ec:
cb:dd:fe:20:a9:f0:58:85:32:cc:2f:6d:99:b4:28:
0f:94:f3:56:1c:5c:97:ac:cf:b6:a2:5f:05:0e:c3:
08:2b:82:df:fd:52:64:ab:71:7f:e5:f8:bf:a3:3e:
a4:45:4b:34:22:45:50:1c:68:16:b5:bb:54:5d:89:
70:1e:92:85:40:5b:50:37:3a:62:b5:a4:28:76:06:
65:3c:c4:25:37:54:67:76:d1:6e:ed:84:72:57:ec:
ea:bf:db:44:a4:5b:da:d2:f8:86:a4:3e:45:2c:be:
62:c2:86:f0:22:d0:4e:fd:3e:f6:3a:a1:f2:5b:19:
23:21:f4:d3:8c:0f:89:88:62:20:1f:52:32:5d:95:
82:cb:ee:14:67:42:36:d5:56:e8:6e:48:0f:74:86:
38:b3:dc:fa:e5:5d:90:b1:3b:cf:ba:98:a4:eb:1a:
52:de:c3:7d:c0:35:8a:cc:0f:08:06:69:d3:cb:c7:
02:81:2a:30:00:eb:b0:2e:7c:19:22:20:f4:87:e1:
2d:e6:54:30:8e:3f:35:16:c1:7f:48:58:f4:df:68:
18:24:aa:b1:21:8e:d4:bd:1c:3f:da:5a:a0:38:5e:
04:f4:eb:e1:84:3c:66:5d:65:b9:22:a6:35:b2:bd:
af:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:84:11:60:E1:2B:81:5E:49:6E:9B:F7:45:31:AE:EF:A8:01:B2:85
X509v3 Authority Key Identifier:
keyid:63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a4:6d:87:7d:1e:2c:5a:db:6e:38:d1:5c:95:6a:f8:6e:81:
50:8c:f8:6b:f0:50:6c:bb:32:08:bb:66:2a:27:5f:27:ff:63:
09:33:a3:75:15:8c:98:ec:72:2d:ff:3b:bb:b1:69:37:eb:cd:
a2:18:07:7f:62:1a:fa:7d:ac:14:de:32:8e:c2:d2:28:2a:be:
13:45:14:c9:84:88:11:51:4f:f3:0e:de:df:02:57:33:18:75:
b3:80:ac:84:4c:a4:0b:7d:92:aa:20:8a:97:28:d9:1d:e9:d2:
56:78:3e:34:e9:52:d5:0f:38:7b:1d:2e:a2:90:d7:19:80:26:
15:ab:17:9a:e4:87:24:5d:ed:d5:35:11:89:b2:f9:92:f1:fe:
fd:2c:cb:ef:40:75:a3:ed:dd:06:25:2e:71:ad:e7:a1:38:dd:
94:ad:75:7f:77:d2:6b:69:a9:62:e2:85:d9:ed:53:3b:66:d9:
70:c7:91:2b:b3:11:25:93:13:2c:71:2e:69:58:bb:9e:23:64:
0b:90:95:d5:9b:6f:f5:5f:b8:84:8d:0d:51:b5:c4:9b:54:79:
c3:6a:6b:df:69:05:2a:3a:69:9b:22:9c:ed:3b:82:0c:00:7c:
62:fd:6b:54:44:92:03:a7:df:9a:37:5a:a4:c7:35:c6:76:93:
dc:fe:d1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:23:14 2025 by rpki-client