Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
File: ysIWQb28-sJMVLakhZSDxeQWQLY.mft (raw, json)
Hash identifier: VTnRchixc2GQ5cUURDG1weEijCCzrhjqLUTTYMNA/M4=
Subject key identifier: 5D:3A:C7:AC:81:FB:4B:D6:FF:28:FD:FE:7D:B6:B3:6A:51:8E:8D:08
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Certificate issuer: /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial: 0197481E230AE79BEE9093C28F776B0DF003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 02:00:23 +0000
Manifest this update: Sat 07 Jun 2025 02:00:23 +0000
Manifest next update: Sun 08 Jun 2025 02:00:23 +0000
Files and hashes: 1: 2Oc3FqLDZOIsZ3-ChpBNgzAI1qA.roa (hash: ngieeqkZH2PetACTisY+FlZAWILVipXJYp8vJQiZ9t4=)
2: 8h-VrH2OLGuzooixz2EHGOzGj7c.roa (hash: j9xYGg1A7OFK4mnjxkQLlnHkLT4I6Te+j3atszApNdQ=)
3: x3vXcqd4rOe3aN_H50pQssbociA.roa (hash: KHAoiYRVl8v/BdqhdcKxO0EIBKUpuD3RXPz3naD0K1c=)
4: ysIWQb28-sJMVLakhZSDxeQWQLY.crl (hash: uPEvJecRufYSXrRqJTzWSgG7GYQ8XvT9qkuFytdNkwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:23:0a:e7:9b:ee:90:93:c2:8f:77:6b:0d:f0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Validity
Not Before: Jun 7 02:00:23 2025 GMT
Not After : Jun 8 02:00:23 2025 GMT
Subject: CN=5d3ac7ac81fb4bd6ff28fdfe7db6b36a518e8d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:17:b9:76:5c:08:42:0d:9f:d1:39:4c:8b:d4:
ab:95:73:a8:44:dc:99:50:84:69:41:fc:33:ca:6e:
f0:8c:99:d6:86:4a:f4:73:90:70:4e:79:d3:46:18:
a2:b5:fe:32:15:b2:cf:75:31:47:63:91:9a:2a:06:
dc:f8:6c:af:0e:cb:47:30:ed:63:27:82:ea:e2:e3:
77:e6:3d:c0:cf:6e:25:54:96:8f:a4:17:ca:ab:77:
d4:7f:ac:c6:b6:51:71:21:5c:2a:d7:09:88:80:5f:
74:97:e9:ed:9b:63:11:95:2c:17:8c:5c:a5:b5:d9:
9e:5d:2f:26:9e:d9:b2:9c:b2:f8:3b:87:29:75:ca:
f7:8b:51:89:27:f0:bf:9b:7d:3f:f3:f2:eb:6c:44:
3a:6e:93:c1:f0:cb:5f:97:c9:ae:e5:60:59:cb:20:
a8:e6:b1:18:d1:2c:6a:4f:0f:8e:45:01:89:16:de:
ce:e2:be:a3:21:0c:32:5b:a7:4d:55:0e:1a:f3:97:
f5:57:74:a4:b7:d7:5e:f9:a5:cb:6c:2e:d8:7e:db:
de:86:73:88:4d:87:07:53:4c:80:8d:7b:0c:4c:80:
07:2b:0b:8a:4f:f5:b0:53:97:43:14:39:65:76:21:
81:85:0f:b3:54:ce:60:57:9e:21:55:66:d2:52:54:
e4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3A:C7:AC:81:FB:4B:D6:FF:28:FD:FE:7D:B6:B3:6A:51:8E:8D:08
X509v3 Authority Key Identifier:
keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:43:c1:6e:e5:2c:16:16:11:fa:b0:55:e2:3a:77:e5:e0:c3:
23:91:cb:a7:83:10:ec:68:a5:5b:e4:df:40:21:75:6d:0b:97:
68:c6:e1:b9:c3:e9:98:a2:c2:c3:24:5e:40:c5:72:88:9b:a9:
54:1e:f1:15:1f:2e:95:09:5d:6e:26:30:e4:df:4b:f1:fe:4a:
6c:ba:aa:0a:e2:81:98:85:f0:0a:a5:07:0d:57:a9:b4:22:7a:
89:8f:54:cb:95:e2:c9:07:00:7a:33:77:3f:91:5a:9e:0d:fc:
4f:a3:4e:76:c0:18:50:1a:b8:41:39:d9:8d:63:7d:0f:50:e0:
15:69:37:33:bc:0a:e2:70:fc:53:24:53:fa:16:77:9a:1d:ba:
3a:4a:3c:35:9a:5a:aa:5f:2e:97:3d:e1:67:07:3c:53:4a:1f:
4e:d1:fd:2e:c0:ea:a7:5d:f8:1c:ac:16:0b:33:63:b5:6b:17:
36:33:44:cf:45:c0:e2:56:f3:05:16:08:ad:65:d9:11:1e:25:
e6:d7:0e:92:99:d1:9e:07:3e:c0:5f:59:c8:29:27:39:2b:7c:
f3:50:f2:65:ac:47:49:47:e7:79:10:9b:63:8a:ad:4c:76:3d:
39:00:98:bf:aa:34:83:73:b0:f0:90:15:c8:c9:b3:ca:59:3e:
0e:15:14:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:38:46 2025 by rpki-client