Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
File: YUtw_5wi_-C3f0P0HAgHTebzbhs.mft (raw, json)
Hash identifier: iXMNgMcuOVIrAMXR+NpFhPuighOQ4slJbSW4ppeCe+o=
Subject key identifier: 3F:7B:8A:53:E4:40:DF:43:84:A8:F5:A0:8D:88:0F:E1:6E:EA:99:34
Authority key identifier: 61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B
Certificate issuer: /CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b
Certificate serial: 01974BC4882B00496C8BBAD279666F10C028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 19:01:00 +0000
Manifest this update: Sat 07 Jun 2025 19:01:00 +0000
Manifest next update: Sun 08 Jun 2025 19:01:00 +0000
Files and hashes: 1: 28tlQOScTYbuODS8bt-3134oQ2Y.roa (hash: ApQAF8/smS+nlVeOZQ4fBnuRp2Hs4aD0ZCJCSWvoUVo=)
2: YUtw_5wi_-C3f0P0HAgHTebzbhs.crl (hash: ANYK5pfqEFPEkdAQ7EO2HY/tpXhIAZC7pFGXdYx1DB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:88:2b:00:49:6c:8b:ba:d2:79:66:6f:10:c0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b
Validity
Not Before: Jun 7 19:01:00 2025 GMT
Not After : Jun 8 19:01:00 2025 GMT
Subject: CN=3f7b8a53e440df4384a8f5a08d880fe16eea9934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6b:97:e2:48:c8:75:50:cf:8b:32:a0:c0:c3:
47:94:37:b4:c7:fe:b8:f7:c8:19:b7:ab:2a:94:c8:
66:22:0f:5a:4d:4e:74:b9:87:f5:c2:fb:1c:1e:99:
a1:3c:04:a8:be:e6:5b:90:83:bc:42:0f:bb:93:80:
99:a7:eb:d8:1f:86:e2:8b:55:a7:b9:df:41:79:93:
70:c6:a4:de:73:01:fb:23:8f:86:8e:c2:03:a0:6a:
34:48:47:b6:53:a1:3c:71:da:1d:b4:7d:f6:26:7a:
aa:f1:44:db:f4:6f:92:4a:78:27:dd:53:25:29:1b:
ba:76:ed:87:a9:9e:a0:25:ef:6c:03:ed:d9:c7:fd:
bc:19:ba:fc:8d:25:09:8d:0c:1a:03:79:01:34:dd:
80:80:89:07:38:1a:64:06:0d:02:a6:f3:c6:c6:19:
d6:b7:3c:b1:51:e6:e5:9e:48:03:f0:ee:ef:4d:c0:
f7:78:e9:8b:2e:6e:90:bc:60:af:94:b0:ac:45:4e:
91:42:a5:b9:de:00:f7:8e:9a:03:04:21:aa:5a:8a:
96:6c:b1:67:7b:83:d3:1c:3d:6e:e5:07:64:97:75:
3a:30:24:bc:09:43:cb:a3:ee:2f:33:64:20:57:05:
8a:41:ea:39:ac:9f:60:9c:37:1a:19:37:eb:16:56:
20:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7B:8A:53:E4:40:DF:43:84:A8:F5:A0:8D:88:0F:E1:6E:EA:99:34
X509v3 Authority Key Identifier:
keyid:61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:5d:cb:29:94:cf:0a:be:00:11:a3:9b:73:85:aa:26:93:f1:
f7:58:8e:1e:13:5e:e7:5f:1e:05:1f:b9:b1:f2:db:9a:b3:19:
7b:80:8b:d6:04:4d:67:39:04:77:f4:a1:c7:8e:58:47:6a:ae:
3a:d1:92:88:7c:d0:c2:bc:fa:8d:38:dc:5d:88:82:8e:a6:4f:
65:2f:15:3e:3f:18:a5:44:32:23:fc:06:98:9a:02:47:6b:8c:
04:fe:d0:96:bc:95:be:d4:c9:32:40:ff:d9:51:c2:b8:fa:cd:
92:26:3e:6c:a3:1d:36:1c:fd:c9:95:6a:4d:b6:74:e8:36:32:
cd:f0:6f:bb:c1:c4:57:64:c0:34:70:bd:59:f4:35:ec:cd:82:
3a:31:f4:04:ea:08:f2:b0:a0:bf:f4:37:42:5d:f9:f2:d8:7b:
3f:1c:1a:27:80:5b:cf:c6:2c:a4:f8:b2:46:15:0b:d9:8c:f3:
06:3d:42:97:50:81:20:d2:97:0b:4e:59:67:c3:20:92:60:be:
38:5a:20:2d:e1:0e:c6:48:bf:a6:da:66:ce:0d:24:50:8e:21:
10:ac:08:87:5c:a1:cf:17:d7:46:e1:d2:64:33:be:30:dd:e9:
06:93:da:42:ad:c4:85:6f:a9:da:a5:53:65:eb:44:15:ea:a4:
3e:55:9a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:31:08 2025 by rpki-client