Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
File: yIxTtHfDv6cLYfQntHmUwtF4NFg.mft (raw, json)
Hash identifier: 6+AFpNbzBx7b/Og95e82vBxbvF7y2fBbkuB98aUomuk=
Subject key identifier: 31:A1:CA:C5:1E:80:A0:1A:A5:03:D5:09:AE:90:4D:2D:61:26:7C:97
Authority key identifier: C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
Certificate issuer: /CN=c88c53b477c3bfa70b61f427b47994c2d1783458
Certificate serial: 019749319A4296040A4BC47D145F803E774C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
Manifest number: 1565
Signing time: Sat 07 Jun 2025 07:01:16 +0000
Manifest this update: Sat 07 Jun 2025 07:01:16 +0000
Manifest next update: Sun 08 Jun 2025 07:01:16 +0000
Files and hashes: 1: m58bu936joBld4DytknROe5jx80.roa (hash: NrLcVOqSqVsHWkNiV+l2TPI8nTmNKxpp0ie7MxAwGUE=)
2: yIxTtHfDv6cLYfQntHmUwtF4NFg.crl (hash: ZOLzGg2QF7Ma60dibWOQ7NFwOj+7bb/SzHsnRsi9geY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:9a:42:96:04:0a:4b:c4:7d:14:5f:80:3e:77:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c88c53b477c3bfa70b61f427b47994c2d1783458
Validity
Not Before: Jun 7 07:01:16 2025 GMT
Not After : Jun 8 07:01:16 2025 GMT
Subject: CN=31a1cac51e80a01aa503d509ae904d2d61267c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3d:93:e2:e2:83:53:67:45:8e:81:7d:2b:e7:
f0:87:85:b5:80:ba:9a:3b:73:84:b0:ba:59:fb:6e:
a8:1b:76:7e:9f:9f:46:a9:77:ad:bf:7b:1e:d9:e2:
df:33:d0:66:6c:82:eb:5c:3b:d3:49:52:66:49:ad:
cb:6b:c7:95:e2:df:43:20:52:2e:c6:9d:b2:74:34:
93:f1:36:b4:c1:06:b9:3a:48:64:23:67:05:e0:ad:
07:54:57:23:86:2b:0e:d7:2a:6f:0b:ee:4b:a9:9d:
62:0a:93:51:fa:5c:18:c4:49:9e:92:39:76:6e:9e:
c7:2a:7a:69:4b:c4:43:0b:33:48:68:7a:ad:83:7e:
41:bc:86:df:84:3d:41:18:d6:4b:f6:23:a8:23:0b:
a5:de:a0:c9:24:0d:65:86:21:53:98:13:9d:43:c6:
19:bb:c0:14:ec:53:bf:cf:aa:99:a6:88:69:4f:6c:
ff:c0:8d:00:bd:df:da:80:ae:72:d2:e2:40:6a:4d:
fa:67:fe:77:ca:83:7d:fb:ec:7a:6d:46:26:f0:50:
fb:c6:a3:58:42:a5:34:15:aa:52:c2:3a:8b:4d:90:
e4:b4:5b:f4:43:e4:a5:ad:d0:b5:4f:91:56:21:6e:
e3:90:4b:e0:84:77:08:7f:90:1f:5c:44:c4:a2:c5:
70:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A1:CA:C5:1E:80:A0:1A:A5:03:D5:09:AE:90:4D:2D:61:26:7C:97
X509v3 Authority Key Identifier:
keyid:C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d1:d0:ba:d9:8e:2a:2e:11:36:bc:74:27:08:c1:c9:2f:02:
45:81:36:32:4c:76:6b:ea:84:1c:2b:44:a4:a4:5f:26:65:a8:
94:a7:4e:44:1e:b2:5c:8a:68:88:91:25:55:94:29:86:e9:b7:
a1:09:ce:fb:24:6d:f7:94:f1:ba:9b:05:45:b1:49:5f:27:43:
4a:68:96:24:19:22:e2:4f:7c:c0:27:ae:a1:51:e7:74:93:90:
f5:6c:fb:92:80:9b:f1:1b:6a:73:a5:d4:ce:db:9f:1c:d1:ab:
45:4c:b6:8a:6b:9a:5f:23:4e:92:db:91:f8:fd:c1:bf:34:aa:
71:b2:4d:10:8a:f2:70:4e:50:df:2b:44:19:28:07:5b:78:a0:
3f:cb:e0:6f:d0:2a:aa:6c:d4:3b:44:d7:10:18:fa:19:39:88:
97:ea:76:77:93:4c:53:7b:6c:5f:00:77:c9:3d:d1:58:9a:ec:
66:82:9e:ce:05:37:23:24:11:cd:86:57:db:22:3a:4c:21:ad:
17:6e:f5:09:a6:ce:70:07:ee:b7:90:0b:9e:26:4f:0c:ad:a3:
d9:ef:5a:78:04:0c:d4:a1:65:60:17:52:4e:80:03:b1:6b:33:
3c:c5:f2:4d:41:d0:50:b2:74:01:58:2d:0e:6e:6d:40:e1:d9:
c1:ee:34:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:45:46 2025 by rpki-client