Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
File: YT0j8hITJ9kX1wjY_hUzgkVZWag.mft (raw, json)
Hash identifier: PJhnKXJvhTodqGHr6IeDd3LM+Yp+ICJRkerIi9+vSJ4=
Subject key identifier: D5:BA:9C:CC:D4:F9:F6:D2:8C:42:AB:B6:45:5B:A8:00:AF:59:56:E6
Authority key identifier: 61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
Certificate issuer: /CN=613d23f2121327d917d708d8fe153382455959a8
Certificate serial: 019738E212EDFCCE74C280BD5804EF403E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
Manifest number: 1168
Signing time: Wed 04 Jun 2025 03:00:29 +0000
Manifest this update: Wed 04 Jun 2025 03:00:29 +0000
Manifest next update: Thu 05 Jun 2025 03:00:29 +0000
Files and hashes: 1: DWd1OJAlcB2kSAEMao72mBJOdXY.roa (hash: AUWrMkI+mL2Ml+jd7sUK/SrRZUJ6V8L3ibna7HmKGhM=)
2: TCWMAcVIf1XmxOwoevTUCYxUQM0.roa (hash: /HDY0JXfbE0ZuzLTJcC22r4Z292oLlEe3+9pLUhfZL0=)
3: YT0j8hITJ9kX1wjY_hUzgkVZWag.crl (hash: diYBGhEvJ83ZWNAUpIRjk61cSr3d4DFBBoYshHZ7324=)
4: iBynxkBNgbzstPi8YjTQg23GPp8.roa (hash: 1ul4Px7X5BB0Iif+/FHz4HFwB9Mu3DthKPuzgZoc0E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:38:e2:12:ed:fc:ce:74:c2:80:bd:58:04:ef:40:3e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613d23f2121327d917d708d8fe153382455959a8
Validity
Not Before: Jun 4 03:00:29 2025 GMT
Not After : Jun 5 03:00:29 2025 GMT
Subject: CN=d5ba9cccd4f9f6d28c42abb6455ba800af5956e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:00:9f:ab:31:b2:61:2b:1d:4a:82:12:81:e6:
50:ae:63:2d:70:90:f5:36:c8:dd:56:68:ca:91:e5:
38:5f:9d:1b:21:04:cb:99:39:23:33:5e:f9:83:4a:
fa:48:bb:28:b3:bc:1c:81:44:78:fb:ee:39:da:04:
a8:6f:41:f1:e7:2f:76:07:0d:c0:c8:17:b3:b4:b9:
80:7a:86:39:d1:ba:12:8e:af:d1:04:4f:ac:6f:d0:
7a:62:65:c1:c3:2a:ca:e0:b6:4b:ee:73:29:63:97:
8f:92:da:ae:61:28:68:2c:c3:f1:e7:f9:17:5b:16:
c7:dc:5a:ad:60:bb:57:b7:59:8b:5b:71:03:4a:4c:
a9:66:c7:44:94:6a:8d:ce:0d:92:7a:59:37:5e:3e:
e4:5a:3b:53:d6:0f:ca:10:5b:39:88:bf:c3:5f:3e:
57:0b:71:a2:cd:ce:0d:ad:ab:07:d5:6f:6a:56:71:
7b:43:be:5a:dd:78:af:a2:ad:54:ba:99:e6:3a:13:
4b:4f:b9:d3:9e:1f:42:2e:b5:29:dd:05:e7:ec:8c:
36:04:f9:b9:92:48:19:3f:57:1d:86:78:fb:5a:1a:
03:e7:95:7e:4e:f0:3a:80:d8:9a:b3:99:3a:d3:44:
6c:a8:1c:83:c0:fe:7e:a7:f8:f0:ad:b7:de:39:79:
51:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BA:9C:CC:D4:F9:F6:D2:8C:42:AB:B6:45:5B:A8:00:AF:59:56:E6
X509v3 Authority Key Identifier:
keyid:61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:7e:36:f1:a9:f8:8a:28:e0:fc:7a:8a:37:5b:c0:20:5a:a6:
03:a6:1b:c3:97:94:25:70:e0:2b:9e:84:8a:8e:12:0b:80:25:
36:42:c8:89:2f:9d:bc:23:c9:96:c9:ac:e4:42:ef:52:3f:2c:
3e:0b:7a:cc:eb:64:5b:b3:76:2b:ae:4a:e6:6d:b1:1b:4e:2a:
a9:72:f8:ae:fb:77:0b:ba:4c:fb:60:d6:dd:36:e2:c7:43:dc:
11:e1:36:ef:ee:1e:a0:35:de:91:20:f9:2b:18:8e:dc:6f:e3:
88:7e:25:f6:1a:64:c8:c8:84:82:f5:85:6d:57:48:56:9a:59:
06:e8:6b:6f:a4:c6:1e:87:5b:04:97:a1:2c:1c:42:91:4a:ce:
35:e1:4d:8a:e6:5f:d6:53:bd:f9:7e:65:51:ee:bb:48:ed:c7:
15:ce:23:22:43:66:6a:3c:c2:72:89:ed:42:30:bd:9b:d8:fc:
56:b8:2c:13:8a:83:28:23:88:be:a7:ef:d5:17:ff:5c:ee:a1:
02:f3:68:61:80:74:44:aa:69:11:7e:f3:2e:74:97:01:d8:d7:
c6:c7:58:2c:d5:c1:b4:33:1e:01:af:1a:a5:10:13:1b:2a:5d:
16:be:fe:b0:b2:59:19:68:58:92:c0:4f:6d:64:e1:13:cc:19:
59:d4:3c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:03:56 2025 by rpki-client