Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
File: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft (raw, json)
Hash identifier: PrWAr0G+8wJFLRY+UOh5MNAt7b2cQ9ijX/SP5xAxRYw=
Subject key identifier: 24:69:40:81:9F:E7:1B:0E:A6:88:D4:75:E8:3C:34:9A:33:9A:2C:24
Authority key identifier: D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
Certificate issuer: /CN=d588db17666fa9515af31dba095d0f250f84bdf7
Certificate serial: 0197481E72FF6A3FE879B292F25C8C2B3A29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 02:00:44 +0000
Manifest this update: Sat 07 Jun 2025 02:00:44 +0000
Manifest next update: Sun 08 Jun 2025 02:00:44 +0000
Files and hashes: 1: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl (hash: NaXGEEpfx2g8gPowTQpXu9f19zzgyjoQoXBwRGWe3k0=)
2: bGf4cCRG9dkpmbXoKNR-wNn-qNk.roa (hash: Cp+HX5WugU73QzyqqCmrt27DN2j3Lyp2sZVezzd5Obc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:72:ff:6a:3f:e8:79:b2:92:f2:5c:8c:2b:3a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d588db17666fa9515af31dba095d0f250f84bdf7
Validity
Not Before: Jun 7 02:00:44 2025 GMT
Not After : Jun 8 02:00:44 2025 GMT
Subject: CN=246940819fe71b0ea688d475e83c349a339a2c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dd:fe:a0:ba:07:79:07:97:bc:99:c3:6e:77:
51:6f:6d:69:79:1a:d8:8b:ef:72:f5:72:f2:b1:8a:
f2:71:1a:1f:83:97:8f:6a:fc:16:c8:08:42:a1:9c:
ea:e2:99:3b:c5:09:63:57:93:6c:09:03:27:68:d1:
e4:21:0c:76:39:ae:45:e4:96:0d:69:61:90:1f:4e:
fb:9c:48:8d:98:91:ae:61:b3:3b:e1:93:33:81:fe:
cd:f8:07:41:cd:f5:aa:68:3e:b7:d7:1d:2d:d0:8e:
a4:2c:03:cb:0f:ec:20:b3:7c:df:dc:72:d4:46:b9:
44:57:9a:0e:81:d8:54:f8:41:a6:97:09:6a:9b:a8:
10:6a:86:de:ab:36:41:8b:fd:d4:44:ff:e6:6e:25:
22:34:ff:f3:19:4d:16:ce:86:f9:20:e5:4d:b3:30:
9f:00:8a:5f:19:b8:be:6e:df:d7:fc:4d:a5:a8:b9:
36:da:0e:f7:71:67:75:19:f5:91:ab:f2:e6:cc:7e:
85:ce:b4:0b:49:2f:60:44:ed:b6:50:c2:6d:6b:2b:
d7:b9:84:11:3e:ba:ff:d8:ea:2c:34:69:31:61:58:
19:5b:07:f4:24:83:a0:4e:f1:c8:69:fb:42:e9:a2:
dd:14:2c:7d:31:84:78:bb:93:f9:db:9c:00:90:35:
bb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:69:40:81:9F:E7:1B:0E:A6:88:D4:75:E8:3C:34:9A:33:9A:2C:24
X509v3 Authority Key Identifier:
keyid:D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:0a:69:ce:d4:19:ec:04:02:23:76:cf:ec:1a:de:1b:94:fb:
2c:5f:91:18:ad:30:3f:5c:7b:c2:08:f5:cc:1e:d2:66:86:b4:
64:9a:4a:c7:39:bf:31:6f:28:8f:b1:b5:8c:2a:4a:96:a9:85:
a8:8b:25:b3:ff:8a:e1:fd:e5:d0:63:12:62:e9:9d:42:a5:7d:
ef:39:25:86:36:c7:03:1e:69:e3:ce:d4:be:6d:7e:71:ec:1f:
fc:df:90:96:90:e1:e8:af:bf:95:bf:77:5c:a2:44:3d:95:46:
b8:ba:19:34:e5:4d:88:19:f9:55:a9:e9:da:89:c0:0f:8f:d0:
bd:6e:a3:47:2c:b7:71:2f:df:02:8d:0a:f5:e4:87:71:a1:44:
b6:fd:28:ae:8a:13:75:ce:aa:eb:4b:a3:4f:96:d4:b9:9d:c1:
cf:4b:b5:d5:af:c0:fd:ef:07:7b:9c:03:5c:b0:55:a3:b9:98:
45:a5:e8:7b:e6:e5:d4:ec:3d:38:ce:a4:24:d9:03:20:a4:fe:
0b:c8:8b:c9:1c:44:d5:25:40:f5:90:6c:99:f8:01:10:8b:69:
15:be:d9:65:91:ff:75:91:86:ab:26:2a:04:23:d5:ff:49:d1:
07:70:88:ba:80:7c:f8:f8:79:d5:0a:57:cf:22:f9:06:95:4c:
c4:83:41:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:46:53 2025 by rpki-client