Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
File: YpnP38Adrmf6buMXlIB3DEUrrCI.mft (raw, json)
Hash identifier: vFj3l+cfv+UKBKHLwHW0KQveZ75GPc8PAFWGMiCpBkA=
Subject key identifier: E2:1B:DA:BB:53:69:5E:D6:32:62:F2:94:34:62:83:4E:39:80:93:76
Authority key identifier: 62:99:CF:DF:C0:1D:AE:67:FA:6E:E3:17:94:80:77:0C:45:2B:AC:22
Certificate issuer: /CN=6299cfdfc01dae67fa6ee3179480770c452bac22
Certificate serial: 019747B09EB7747ED0936B8365CDDB48F8F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpnP38Adrmf6buMXlIB3DEUrrCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 00:00:46 +0000
Manifest this update: Sat 07 Jun 2025 00:00:46 +0000
Manifest next update: Sun 08 Jun 2025 00:00:46 +0000
Files and hashes: 1: Mkph3bTd1xJZVg1WlaswgHrEuSg.roa (hash: l36JgOHpzZ+Jn9f8sIbdhy0YGZNW92MlOpmEM1lS6Ko=)
2: YpnP38Adrmf6buMXlIB3DEUrrCI.crl (hash: CDaykRE0/pI7Fx6CvXbFoWWhGWr68J3d9aHnntM1CJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpnP38Adrmf6buMXlIB3DEUrrCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:9e:b7:74:7e:d0:93:6b:83:65:cd:db:48:f8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6299cfdfc01dae67fa6ee3179480770c452bac22
Validity
Not Before: Jun 7 00:00:46 2025 GMT
Not After : Jun 8 00:00:46 2025 GMT
Subject: CN=e21bdabb53695ed63262f2943462834e39809376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7d:c6:e5:da:0b:52:b5:86:5e:d7:a9:97:dc:
49:89:15:d9:8a:1d:97:0a:de:12:29:5f:20:6c:4d:
f5:c6:22:e5:ac:47:af:37:55:c9:ed:39:a1:e1:47:
3d:a2:54:91:c6:92:13:5b:8b:a3:dd:11:dd:63:47:
96:21:49:a3:30:ac:6c:e5:db:5f:f4:e6:98:c3:82:
96:f5:cb:bf:ca:b4:dc:96:9d:31:71:ee:c3:e1:69:
19:97:f8:83:e8:72:9a:dd:e7:e8:79:33:2f:6a:0a:
db:bf:b9:05:27:ac:e0:3e:ce:af:eb:39:6a:91:fd:
4b:65:07:a5:13:52:01:b8:1c:5a:c1:3a:ab:df:d9:
43:6d:f3:43:73:5b:d6:26:fe:61:2d:b0:fd:11:6c:
b5:d9:91:1c:10:1e:3f:54:bf:bf:65:39:45:10:21:
35:99:5c:11:a7:79:e7:3e:af:cd:56:33:36:66:10:
5f:2c:ec:db:db:78:b2:8f:80:95:fa:db:11:ef:28:
88:b4:8c:a3:e5:ec:da:2d:74:a1:ac:b2:5b:d8:fb:
0d:7f:ba:b6:5d:8f:5c:4c:84:c4:78:8a:10:d5:f5:
93:39:da:ac:d4:5f:32:42:03:92:7d:e3:fa:4c:65:
4b:1b:92:d2:cc:00:ad:47:d7:96:26:82:17:79:41:
f1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1B:DA:BB:53:69:5E:D6:32:62:F2:94:34:62:83:4E:39:80:93:76
X509v3 Authority Key Identifier:
keyid:62:99:CF:DF:C0:1D:AE:67:FA:6E:E3:17:94:80:77:0C:45:2B:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpnP38Adrmf6buMXlIB3DEUrrCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:16:a3:4d:51:4a:c4:83:08:28:43:68:ea:c1:04:7c:bd:ff:
09:35:7d:51:b4:ce:4a:d7:b8:83:c3:7c:dd:b1:ce:67:ff:16:
f7:e5:35:91:ff:bf:01:b2:26:28:eb:4e:e5:bd:95:3d:fe:78:
8e:92:a7:66:d6:a5:02:e9:69:c3:49:51:6f:ca:82:f1:28:82:
12:fc:74:29:fb:77:09:12:71:e3:67:36:ae:b9:4d:b1:c0:10:
d8:f8:64:60:8f:c5:b4:8f:11:46:92:f1:07:1b:2e:db:9c:65:
16:af:3c:02:35:c1:61:c3:94:dd:28:85:64:de:de:e7:52:1a:
ce:42:ec:ac:30:d8:d2:a5:7c:5b:bd:b1:18:85:36:71:44:4a:
cc:dc:f5:f3:81:74:bc:91:e1:eb:c4:fb:bc:a5:47:32:57:f3:
65:4e:f5:79:18:df:e6:b4:3a:fc:83:d0:3a:09:d0:08:4f:25:
bf:64:eb:c0:6a:bd:13:9c:0a:0f:7d:26:0e:89:2e:2e:5a:35:
0d:43:d1:e7:60:58:f0:17:b6:01:b5:f7:b2:d2:82:d0:67:4d:
ed:5b:8e:a1:a5:f7:b5:b5:f6:54:c1:fb:5c:ba:fb:0a:03:7a:
76:71:de:62:38:a4:38:1c:97:91:25:de:51:5f:5d:9f:25:74:
6a:65:69:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:12:53 2025 by rpki-client