Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
File: YeENrB93PFWiRHUzRnGeiZ9NRDI.mft (raw, json)
Hash identifier: 554ZkWaXs6TeQ+gpp1Ik6QvpGAE2WH2yYi+IcyOuvCE=
Subject key identifier: 28:C8:94:57:B4:AF:D6:13:F5:D2:1D:C4:8E:3E:69:BA:BB:0C:4C:A4
Authority key identifier: 61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
Certificate issuer: /CN=61e10dac1f773c55a244753346719e899f4d4432
Certificate serial: 01975D258C397B8C54A351E9E7108172373E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
Manifest number: 1586
Signing time: Wed 11 Jun 2025 04:00:30 +0000
Manifest this update: Wed 11 Jun 2025 04:00:30 +0000
Manifest next update: Thu 12 Jun 2025 04:00:30 +0000
Files and hashes: 1: 2Pb_1CM0MkPudBUY3Q0_pYkoPc0.roa (hash: xADulynKw7d5uIvUb/iOH4gEDrZezt1Odl3vumrVJCo=)
2: YeENrB93PFWiRHUzRnGeiZ9NRDI.crl (hash: RbtUh82Kx2ec8n4+dK6wFzI3bhWYj7A0PNNcnEOIolw=)
3: mWcMZUbVESCreyIMM1F2DvYaJHs.roa (hash: DDyp9xxUdtbm3SG6nGLtJGXjnrbdaA8Ifcbc14VxZ9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:25:8c:39:7b:8c:54:a3:51:e9:e7:10:81:72:37:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e10dac1f773c55a244753346719e899f4d4432
Validity
Not Before: Jun 11 04:00:30 2025 GMT
Not After : Jun 12 04:00:30 2025 GMT
Subject: CN=28c89457b4afd613f5d21dc48e3e69babb0c4ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bf:fb:55:a7:a6:54:a2:f8:a3:7b:58:f9:74:
dd:18:3a:22:e8:4f:8d:92:8f:26:fb:27:d3:61:73:
34:dc:c8:8a:38:e1:ed:c3:26:3e:12:b3:ee:fc:2b:
c6:7c:56:0a:b7:89:97:13:cc:a5:a4:35:f8:fc:e7:
96:f6:01:e7:77:8d:4e:9f:0f:77:c6:cd:7c:84:f2:
2f:64:ef:0a:77:56:a0:b5:0d:02:ec:04:1d:05:f3:
d3:00:7d:ac:62:25:e6:89:d7:1c:42:30:38:40:87:
aa:69:c0:eb:15:b2:a3:2d:75:49:a0:2c:5f:b0:89:
c6:81:ce:1c:7e:a3:1f:ac:f7:7b:f6:79:4e:f3:c2:
e4:43:02:12:70:3e:93:ac:b3:30:1f:0f:9e:54:46:
b0:4a:7e:5b:c0:6f:26:b7:8e:94:b6:30:b1:9b:25:
90:d8:f9:f2:eb:17:83:7c:6a:9d:47:37:db:d0:cc:
41:1a:c1:61:c6:48:41:57:c2:56:ee:3c:06:0e:bc:
cf:04:4f:e5:35:ad:73:c8:44:37:b8:1f:f7:b6:a0:
80:eb:59:9d:7f:a3:1f:34:00:65:14:a7:a2:d9:39:
a5:19:a6:b7:9e:0b:73:43:e6:b8:c0:2e:07:41:ec:
0c:67:37:88:6e:4c:cb:cb:3a:d6:7a:53:ce:d9:0c:
ac:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C8:94:57:B4:AF:D6:13:F5:D2:1D:C4:8E:3E:69:BA:BB:0C:4C:A4
X509v3 Authority Key Identifier:
keyid:61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:75:16:04:f5:fd:78:56:22:43:27:1d:d0:06:81:52:eb:a5:
92:2e:ae:35:5f:61:e5:15:73:e6:aa:01:88:5d:29:06:c4:f7:
cb:d5:ac:a1:c1:4d:b6:bc:e9:20:a3:82:2a:36:30:41:2a:a8:
5e:b9:e7:36:c6:f6:52:ec:2f:96:1f:1f:56:a7:99:f6:71:b0:
61:88:fd:11:34:23:0c:e8:63:78:f6:77:a2:04:35:ab:4d:75:
79:8e:a6:58:2a:09:ba:25:8d:4a:41:d8:52:ad:d0:49:a7:b3:
95:ed:65:63:98:0a:87:5a:eb:01:1f:47:b3:38:f1:9a:1a:58:
91:a0:77:60:57:16:82:5a:fe:57:12:aa:b6:87:56:a4:7d:23:
98:f4:8e:20:c9:be:a6:81:9c:ab:98:95:4e:d1:26:fa:58:6e:
8d:53:09:ff:77:0f:84:b5:4b:49:a3:38:b0:ef:7a:cb:1f:f0:
a6:b0:1f:be:e3:40:84:9b:67:93:a8:cb:f0:1c:c7:1c:c5:51:
91:e1:34:6c:1d:ad:94:ad:9b:d4:bc:6e:f6:1e:3d:c5:4f:2a:
63:70:74:9f:35:21:d8:a0:40:78:6c:ba:a4:b3:34:10:b5:e0:
63:04:d3:16:8a:d0:5e:59:c2:50:ac:26:4a:3c:8b:50:6c:a7:
bd:1f:bb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:12:32 2025 by rpki-client