Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
File: Y0laTOy-r7Pq327QNJuwuW2kZO4.mft (raw, json)
Hash identifier: ibSviz6UEJOW0gyipfNK5rCuXi4QGw82okRt9ppAcQw=
Subject key identifier: 49:EC:00:64:8F:84:16:62:9E:F8:1F:37:B1:B7:8D:FD:F2:B6:2D:BB
Authority key identifier: 63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
Certificate issuer: /CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Certificate serial: 01974A43D49379A47FECDCB61050006D4899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
Manifest number: 0C0F
Signing time: Sat 07 Jun 2025 12:00:48 +0000
Manifest this update: Sat 07 Jun 2025 12:00:48 +0000
Manifest next update: Sun 08 Jun 2025 12:00:48 +0000
Files and hashes: 1: GHhiTWJIrRnBFMlK6xuYQ1nDUn8.roa (hash: MsTf0syszxTszc8q1axFwJFUrUTMc1YgfxQY+NXxD28=)
2: Y0laTOy-r7Pq327QNJuwuW2kZO4.crl (hash: /0oMTVZ9g7ghO1WejxF51ot3a3BHzaPfFHHsuBwvBcI=)
3: r8SyFv2fzba2rsaAZpaSWzcngkw.roa (hash: nKMxn+pRmGytAQ++Vu6+D6lCb2MTuAqsH86iDcF9gs0=)
4: yLm-AHf2Wu1baGR2558SeGJ9vpc.roa (hash: /Bd5Eq0QqwLJoY4wAtUd+ZWldK7GG5PZ0zCSIxN6jTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:d4:93:79:a4:7f:ec:dc:b6:10:50:00:6d:48:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Validity
Not Before: Jun 7 12:00:48 2025 GMT
Not After : Jun 8 12:00:48 2025 GMT
Subject: CN=49ec00648f8416629ef81f37b1b78dfdf2b62dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5c:13:bc:a0:d3:5d:e2:33:fd:bb:16:e8:a7:
3e:7a:a6:18:00:02:aa:b0:df:a9:54:88:61:c5:38:
42:b0:36:73:8f:1e:36:a7:6d:4d:ba:8c:3e:60:b6:
9c:06:c4:3c:1a:15:a7:89:70:1c:2b:5c:2b:ba:47:
2e:bc:7e:54:37:38:72:ef:dc:53:bd:b1:f6:21:63:
74:4a:04:50:9e:13:d6:14:e1:b4:53:bd:be:8a:8d:
3d:fe:3c:8f:c3:90:21:75:84:5d:b6:f2:67:aa:b7:
37:b6:21:82:18:1e:6b:2d:fd:98:2b:7c:bb:d4:5d:
11:2a:5c:28:39:fd:2d:74:64:54:56:95:e8:ab:5c:
9f:e7:7c:b4:88:7b:c7:9d:7b:b4:bc:64:30:69:24:
e8:4d:d8:7a:93:c0:99:3d:1f:3b:74:c9:c1:8f:e4:
3e:70:fb:3c:e7:f0:91:75:0d:d5:be:f4:6b:c6:31:
e6:b4:87:71:3c:e6:63:b9:79:54:56:00:7a:85:e1:
04:a3:6d:e4:16:00:4b:32:0e:e4:b3:51:a3:0d:7d:
e8:dc:b8:67:79:03:9a:c7:fc:dc:c5:c8:0d:d4:b0:
61:78:10:79:d4:4f:3c:c7:cf:b0:24:cf:56:55:19:
da:d3:c9:6f:6e:82:40:52:7d:d6:cf:3c:e2:88:f5:
e3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EC:00:64:8F:84:16:62:9E:F8:1F:37:B1:B7:8D:FD:F2:B6:2D:BB
X509v3 Authority Key Identifier:
keyid:63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:04:d6:4b:ce:0f:52:07:1c:8f:94:d4:df:f3:16:21:7d:79:
e9:d5:50:bb:4c:13:ce:5e:b0:2a:cd:2f:b0:5b:58:0f:2c:f0:
db:8e:eb:30:e2:89:37:23:6e:03:79:64:a4:13:c9:8f:28:5d:
ca:8d:d5:9c:5c:01:a8:7e:7c:11:6d:eb:02:ec:52:6b:d7:36:
90:a8:7b:59:75:9e:76:9e:d2:35:d4:1f:62:a8:27:36:73:b8:
4d:8d:f7:31:fb:24:ae:14:e1:7a:c3:22:cf:bb:2b:da:86:8c:
d0:0c:cf:a0:65:18:52:00:4c:36:bd:4e:bc:67:6e:aa:49:8e:
3d:5f:6a:2d:8a:51:a8:ea:ab:5c:e0:e7:28:a4:7d:5f:50:80:
71:f4:b1:bc:71:78:92:36:72:6f:ef:9b:ae:11:4b:a2:f3:d9:
6f:2b:2b:33:8c:8b:40:e8:a6:07:a7:76:f5:96:0c:7c:10:79:
9b:5f:4a:b7:73:a0:e7:9c:08:aa:b5:7e:d8:16:69:04:b7:cf:
9c:58:cd:b3:68:33:ce:02:09:93:9c:b5:db:4d:fa:70:1f:7e:
92:84:99:f0:cd:b7:1d:66:a2:2e:b2:96:77:42:a0:97:f4:da:
e4:b8:ba:9e:b5:7f:6b:39:d1:e2:5a:c2:a7:62:eb:60:af:fa:
be:73:18:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:49:06 2025 by rpki-client