Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
File: YvYD86VaKeZhfwlrOmm_8KOSqSg.mft (raw, json)
Hash identifier: 1z3caUhGJs/oOvy4RjxmiCnbRJ0FzOanGiFr49Ovtuk=
Subject key identifier: E3:4F:5E:E4:33:40:EB:96:9D:73:41:E1:13:C8:16:AE:0E:BC:45:95
Authority key identifier: 62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28
Certificate issuer: /CN=62f603f3a55a29e6617f096b3a69bff0a392a928
Certificate serial: 01974C324A945A6AA59D711688651DC94AE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 21:00:53 +0000
Manifest this update: Sat 07 Jun 2025 21:00:53 +0000
Manifest next update: Sun 08 Jun 2025 21:00:53 +0000
Files and hashes: 1: CdAs9uXPdWzwOsn5f3_VQNLvlMY.roa (hash: z23dSOm4EWMwCPY/rIYDaKhlW5ucCmgZPFZkayJaxA8=)
2: YvYD86VaKeZhfwlrOmm_8KOSqSg.crl (hash: nxjQUcQALpAWL7Os+SohfbK5TRyelTf4kS+hIIBgdFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:4a:94:5a:6a:a5:9d:71:16:88:65:1d:c9:4a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62f603f3a55a29e6617f096b3a69bff0a392a928
Validity
Not Before: Jun 7 21:00:53 2025 GMT
Not After : Jun 8 21:00:53 2025 GMT
Subject: CN=e34f5ee43340eb969d7341e113c816ae0ebc4595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fd:b7:28:8e:92:1b:03:0e:0a:8a:77:47:af:
c1:2c:69:50:fb:74:18:95:8a:0b:32:65:73:a4:49:
e9:0c:70:9d:e5:79:4f:34:99:e1:87:41:58:75:02:
15:7a:7c:dc:a6:54:8a:0b:95:71:98:59:9b:69:25:
de:67:9b:fa:e6:19:0d:c2:13:fa:40:05:e3:a1:3c:
1a:f5:d6:c8:40:56:de:e9:e7:dc:76:6a:7e:53:b7:
38:d6:45:03:11:cd:9e:0e:e5:bd:8c:54:33:89:c8:
a1:53:9f:50:43:7a:75:e0:97:e4:55:85:61:68:e2:
12:e1:20:0f:c6:ca:16:2e:8d:1d:6a:8d:ab:3a:f3:
8c:e4:6d:50:21:92:c6:e4:46:98:7f:8f:07:21:5d:
41:a3:18:33:a0:bf:86:f3:f0:3c:c9:50:92:ab:50:
fc:2b:ca:b8:48:fb:91:31:4e:0b:b1:16:35:af:d0:
5c:73:fc:9b:be:06:fe:b0:41:34:7a:6d:7e:5f:60:
b5:d2:6c:7f:b7:a8:a8:19:97:da:2d:7d:13:01:56:
1b:cd:91:da:aa:67:b5:a4:bf:6f:b8:e4:17:88:c0:
c7:0e:6c:fc:54:31:bf:cc:eb:4c:ff:40:ad:2f:be:
53:a7:a7:4c:78:9d:5e:fd:f3:ce:3e:97:69:f5:46:
91:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4F:5E:E4:33:40:EB:96:9D:73:41:E1:13:C8:16:AE:0E:BC:45:95
X509v3 Authority Key Identifier:
keyid:62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a4:e0:59:e9:99:d7:23:ca:6a:81:37:79:a2:41:56:2b:ca:
cc:fc:fc:fd:ad:fa:dd:6a:f1:4d:2a:e2:a9:ee:4d:bf:5a:22:
86:e2:b3:73:c7:c9:d3:ae:ee:89:ca:bd:95:b2:d2:3c:1b:6d:
11:b4:48:38:e1:4b:c4:91:cf:c1:d5:e5:62:bf:5a:04:d9:de:
08:7b:67:28:2b:b7:a5:3a:e0:18:b5:c1:27:09:a7:f0:ad:41:
e8:7d:62:3d:e5:2a:1f:98:0d:6e:c5:0a:f3:ec:06:b9:88:83:
ad:46:b2:8e:59:cf:53:ad:23:2f:05:ad:d3:c8:8c:b9:8d:df:
28:f2:a0:4d:13:be:a0:66:95:45:c3:4e:4c:a5:2d:77:a3:b3:
e7:5a:3e:4e:03:66:10:5e:7b:1f:fb:e7:7a:9a:d0:61:42:33:
68:ef:d8:7c:73:f3:a3:c6:6a:c8:a3:e4:92:90:85:8f:ae:ab:
60:a1:32:7a:b6:c2:8f:ea:c7:bc:9f:ca:e2:3e:dd:54:de:ab:
d3:57:2b:56:0d:c1:f3:ef:01:af:5f:3f:db:fa:9c:76:63:09:
44:53:db:cd:bb:ff:65:9a:fb:ec:d9:80:f7:c6:6f:82:f6:bc:
96:04:6a:26:7d:92:2f:98:50:34:fd:e8:ec:be:2f:73:ce:a8:
f9:5e:ce:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:23:47 2025 by rpki-client