Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
File: YUyVhYifmODHf5ts2ANhqgK91o4.mft (raw, json)
Hash identifier: hBj4xJxEulhelIny2RS/KGeVReklRfYNQx9zZjSnDNA=
Subject key identifier: 8A:B3:F5:68:62:F0:5C:46:23:4A:D8:B7:4F:DA:9F:84:1E:EB:3F:49
Authority key identifier: 61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E
Certificate issuer: /CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e
Certificate serial: 01974D0E0716C74B21560B4C03C009543B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
Manifest number: 1584
Signing time: Sun 08 Jun 2025 01:00:54 +0000
Manifest this update: Sun 08 Jun 2025 01:00:54 +0000
Manifest next update: Mon 09 Jun 2025 01:00:54 +0000
Files and hashes: 1: 1hMpXEk-3MWaN_1A5D8V9EPMUFk.roa (hash: CWNT05GFaywUZSs5xqqgNA+kl89pNKE3DHnIiDI2iJE=)
2: YUyVhYifmODHf5ts2ANhqgK91o4.crl (hash: WydpILnIkR6ss0C6vvXt3qg1urFg03ZU6yUJeur8Uco=)
3: rWHh4mQ0uaKggoKTpG34xhoULNA.roa (hash: E9+8lA/ClMI1O0rcr+QMuqVLJyMAlgl6OS/N6XXdTOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0e:07:16:c7:4b:21:56:0b:4c:03:c0:09:54:3b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e
Validity
Not Before: Jun 8 01:00:54 2025 GMT
Not After : Jun 9 01:00:54 2025 GMT
Subject: CN=8ab3f56862f05c46234ad8b74fda9f841eeb3f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:dc:33:ac:31:8f:53:39:18:78:e4:91:3b:49:
d0:e7:72:dc:ec:5d:62:c1:02:a4:67:8b:cc:5f:8a:
e0:44:52:96:e6:89:5e:4b:7c:98:3f:82:cd:c6:01:
5d:cf:95:67:02:8c:b1:aa:d3:40:df:3d:08:f6:11:
28:e3:46:7b:82:79:06:0e:7b:e2:d8:5a:87:d3:e9:
01:a5:01:c9:d9:9a:c1:a2:06:40:4c:61:f7:d4:da:
9c:a8:09:e5:67:20:ee:77:71:2a:dd:84:61:da:66:
d3:ab:6e:61:f5:4e:f2:bf:29:a7:aa:92:d3:6f:76:
93:fd:f8:fe:a3:a6:e6:e7:d1:44:7b:32:dc:82:a8:
3a:16:49:d5:85:41:6f:ba:86:a0:51:55:2d:cc:93:
90:34:4d:b3:e7:5c:a4:f8:6a:31:4e:6a:e3:b2:14:
c2:61:ae:73:62:97:e5:bd:90:a2:bd:bf:c2:39:76:
7a:a0:dd:65:58:83:1a:e3:87:43:43:26:c7:d2:9a:
3d:9a:42:dd:9b:a3:2a:70:9b:65:94:48:f4:24:aa:
3c:44:39:ee:10:83:b7:0a:84:31:13:f0:2e:33:04:
08:57:00:14:72:5e:6d:1c:7f:ea:a1:fe:c1:67:3c:
e1:4d:50:71:6a:f8:30:7f:0c:53:5e:d3:dd:a4:91:
bc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B3:F5:68:62:F0:5C:46:23:4A:D8:B7:4F:DA:9F:84:1E:EB:3F:49
X509v3 Authority Key Identifier:
keyid:61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:00:27:e3:90:44:60:1e:da:92:bc:af:fc:f0:a9:41:b4:63:
90:b2:a8:a8:1a:8d:e5:d6:76:d9:86:51:50:46:4b:01:8c:9f:
aa:44:55:ab:af:9f:e9:e0:46:ba:26:ee:a4:45:89:4b:88:86:
0c:6e:68:c8:5d:09:6f:64:2d:69:7e:ce:c8:eb:91:59:88:86:
50:d5:6f:33:ba:85:83:e1:8d:aa:d4:80:09:30:c9:06:1d:10:
b9:50:0f:9b:94:7d:5c:75:8c:22:5b:59:13:46:de:20:c5:8f:
cb:6e:0d:11:42:5d:da:35:7d:3d:fe:01:dd:b4:e3:41:d3:45:
8f:e7:1b:c0:1d:d6:91:33:3d:ed:49:d1:ab:36:5c:2e:16:71:
5e:f2:a4:cc:9a:2d:57:4a:4d:82:4c:7f:3c:28:65:d3:46:26:
02:cc:f0:89:89:50:3e:d2:ee:2a:0a:28:af:e0:83:c4:30:8b:
0b:e3:20:18:4b:48:60:f9:68:e8:02:6c:ab:42:a8:cf:ec:43:
d1:0d:7b:5c:79:f7:52:76:af:5a:50:56:31:26:d9:ad:7a:bb:
9a:95:10:14:61:ea:2f:26:08:f9:0b:f3:e7:40:20:08:81:5e:
20:ec:50:4c:25:e0:54:a6:cb:bd:4c:62:c2:59:0b:f6:86:5f:
c2:b6:30:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:37:28 2025 by rpki-client