Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
File: Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft (raw, json)
Hash identifier: xLxaLYVrX+ci2sgjZNaW2QvcHu7KfiW0SEw2VKVeJf4=
Subject key identifier: A9:3E:78:FE:5B:E5:71:EF:3F:E0:AF:2C:7A:86:FC:C4:0C:56:A4:00
Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
Certificate issuer: /CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Certificate serial: 01974A7AF252FB76BD9354B4B467864FC988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
Manifest number: 1585
Signing time: Sat 07 Jun 2025 13:01:00 +0000
Manifest this update: Sat 07 Jun 2025 13:01:00 +0000
Manifest next update: Sun 08 Jun 2025 13:01:00 +0000
Files and hashes: 1: XVpCVjKP_Ci3PBb-SDD9rEF23jc.roa (hash: fb/E1ZjjaeELkfBCLdUXpvrP74l6BqHMfdZ9UTlkuWc=)
2: Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl (hash: cMVqsgFt2XBQHbVT/D+gOu4mH5Oku1L/qsUyd/9O+wg=)
3: Ygr-d1fsjv6D-0-qsUYAE5I_CT4.roa (hash: jcx2vm/E34fLSi/zBhEY8LVOd5D4GVaLPMNLqe0cuM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:f2:52:fb:76:bd:93:54:b4:b4:67:86:4f:c9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Validity
Not Before: Jun 7 13:01:00 2025 GMT
Not After : Jun 8 13:01:00 2025 GMT
Subject: CN=a93e78fe5be571ef3fe0af2c7a86fcc40c56a400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bd:48:49:5f:87:e6:ab:2d:bf:e8:e8:e5:0f:
bb:58:7e:71:24:3d:cc:79:fd:60:10:02:01:55:82:
88:55:f7:14:c2:19:77:66:81:b9:82:92:56:95:ce:
35:fc:d5:7c:3b:e0:b1:6c:25:9f:ad:aa:e4:20:97:
4c:c1:49:e8:c3:ff:a2:65:59:db:71:b6:ea:ac:7d:
8e:c3:c2:d1:e1:10:c2:10:0b:aa:aa:be:0b:09:bb:
2e:0c:e5:4c:19:f1:07:63:df:18:4e:6b:8f:55:5a:
16:b3:f8:ac:2b:37:5c:d7:4d:9a:44:45:3a:6f:6a:
a7:d2:23:70:e8:c0:80:84:06:70:ab:80:e3:9d:ea:
fa:85:2e:73:2f:00:fa:76:a6:b8:cf:4c:3b:1e:eb:
f5:2f:db:57:a7:57:eb:37:cc:ae:07:9a:d8:b0:33:
70:4b:00:67:e9:b3:d1:84:6b:8d:97:56:96:b1:7e:
ee:12:05:74:1a:2c:e7:ea:18:eb:21:be:fb:99:0c:
de:fe:1b:10:ea:77:0e:5c:d5:fe:cd:46:0c:ad:37:
50:03:95:39:90:44:6b:27:64:e3:b7:c1:0a:d6:9c:
8d:95:24:5e:2e:f4:84:79:1e:35:b2:c6:d4:1d:5e:
64:05:67:2c:84:77:5c:9b:6d:1a:7e:0f:63:19:50:
0b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3E:78:FE:5B:E5:71:EF:3F:E0:AF:2C:7A:86:FC:C4:0C:56:A4:00
X509v3 Authority Key Identifier:
keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0d:34:88:d4:d7:9b:df:5e:d7:ca:dd:3e:9e:bf:f8:a9:a9:
71:fd:94:74:0c:ce:ac:5d:2d:88:2b:15:17:d9:32:3b:7d:85:
b2:ab:da:ac:ce:5d:ef:fc:f2:eb:1e:fe:a7:fb:31:f0:e2:7a:
26:1e:26:00:d4:08:a4:b7:35:12:c5:39:40:3e:ab:c3:eb:4f:
70:32:e2:c6:55:0b:ff:a1:6c:51:47:bf:fa:cd:31:8b:b4:27:
1a:ac:38:b1:e0:9a:91:e8:a1:50:8e:53:d6:ec:07:97:20:1c:
4d:7f:83:8f:49:53:26:9e:1e:ff:2e:16:f4:b3:be:88:ef:a2:
76:fa:00:8f:12:16:c3:cc:1e:cd:01:5e:2c:8d:4c:2f:9e:a0:
2f:d9:cd:4a:05:a9:fa:8a:12:b8:19:05:c6:9f:2d:ff:dd:ea:
64:e0:ba:f5:1f:31:c4:7a:34:97:7e:d6:95:ee:c6:77:37:e2:
a6:86:a0:98:05:16:c1:ca:11:c1:b8:eb:9b:67:b5:28:e5:79:
9b:66:80:44:ff:c6:23:f3:44:75:d6:78:8d:d7:74:00:bf:2c:
c7:32:3c:ae:f6:36:81:c8:29:f5:be:37:33:73:90:74:fb:8f:
54:1b:20:d0:79:32:13:6b:a6:e9:56:93:f7:d0:f9:69:72:24:
dd:89:25:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:33:13 2025 by rpki-client