Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
File: YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft (raw, json)
Hash identifier: QwTDYwhC6grTo/Xqb7gJrEbMbCyzyRqf5dkNos9lWwE=
Subject key identifier: BE:C9:C2:6A:3B:EC:CC:0F:33:70:10:56:DA:6A:91:4F:2E:9B:62:4E
Authority key identifier: 60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
Certificate issuer: /CN=602be661e57c14659a608e9f6be605d6250047fc
Certificate serial: 019750B4354F7AFDA6350FC34AD9553339C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
Manifest number: 1010
Signing time: Sun 08 Jun 2025 18:01:16 +0000
Manifest this update: Sun 08 Jun 2025 18:01:16 +0000
Manifest next update: Mon 09 Jun 2025 18:01:16 +0000
Files and hashes: 1: QQ6vjhCR2yyTREcRxQKVvyzivi8.roa (hash: 7L16FIPuAoIWTe7eg7gWhNFlOXbBacL341K5d1WI9xc=)
2: SeVyC3Up3eapGFgVMyNwVWT064M.roa (hash: WlXh9oaUv4z0gJQkT7t6JIoyywN2OloN8qKW62HKTds=)
3: YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl (hash: TqZ+0WqRT7GYa6H8UAR9dE+MlRq7newmuMHOOxX21Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b4:35:4f:7a:fd:a6:35:0f:c3:4a:d9:55:33:39:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602be661e57c14659a608e9f6be605d6250047fc
Validity
Not Before: Jun 8 18:01:16 2025 GMT
Not After : Jun 9 18:01:16 2025 GMT
Subject: CN=bec9c26a3beccc0f33701056da6a914f2e9b624e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3f:45:46:1a:96:d6:59:5a:80:99:6d:92:b4:
2b:60:22:4b:ed:a8:f5:77:2e:15:d5:79:6a:4e:54:
47:15:ee:a0:d6:22:98:82:4c:d5:83:45:1b:a0:12:
d8:79:5d:ca:1a:b6:a9:0d:7b:11:bb:76:05:67:c0:
0e:bb:bf:31:1d:9d:5f:19:6e:7e:f5:9d:4b:43:2e:
14:e4:86:bc:e7:78:91:71:33:c1:e3:6e:b7:85:b5:
72:1b:bb:8c:77:b1:06:49:5e:62:a4:33:e1:1c:7b:
3b:c0:eb:d4:9b:b5:c8:cb:df:8d:28:7e:00:2d:41:
1d:8f:93:41:18:4e:d2:d7:fc:f7:c7:1d:8a:83:82:
81:61:a5:15:00:69:ad:38:fa:74:f4:47:7d:e2:cd:
24:5f:28:4f:72:a9:ef:1c:1c:bc:95:33:7a:30:ea:
d6:70:db:55:c5:5a:bd:01:19:9c:c7:a9:b8:5c:9d:
16:9c:8a:f8:71:a4:59:46:82:91:ae:92:d1:25:12:
c1:a1:26:30:a6:47:de:a6:7d:bf:35:38:7a:71:45:
f3:f6:79:3f:65:69:fa:94:fb:57:3e:d4:06:7e:8f:
51:ec:30:6a:e3:d6:d6:c4:49:20:f3:b1:c7:55:58:
8d:15:ec:9e:6c:fe:d1:79:84:28:ff:d4:f8:cb:c6:
84:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C9:C2:6A:3B:EC:CC:0F:33:70:10:56:DA:6A:91:4F:2E:9B:62:4E
X509v3 Authority Key Identifier:
keyid:60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:28:f3:41:b2:08:18:4a:f2:b9:e9:2e:d5:b7:93:c0:d9:88:
0c:21:37:d4:bf:64:54:18:81:8b:b5:12:cd:92:6c:7e:59:0d:
75:e0:46:88:d5:34:97:ed:85:de:a7:eb:0a:39:53:31:23:fb:
d5:68:dc:a8:8e:5c:dc:78:34:2c:92:a3:8a:83:b0:98:1d:79:
3a:e4:15:c9:b6:aa:86:aa:0d:9b:06:4c:aa:71:ec:08:90:32:
2a:2a:60:af:68:32:8d:dd:6e:ca:fc:65:79:66:a0:7d:56:a8:
51:6e:e1:07:9f:ec:73:a1:af:86:3c:f1:24:85:98:d9:c9:5a:
d3:bf:bc:04:18:96:58:57:e6:fa:66:b7:56:c8:43:bc:fc:8d:
dc:83:28:53:ab:f9:56:66:10:9c:dc:9c:2b:f5:6b:ad:a3:3e:
04:2e:a0:26:33:af:b9:a8:0c:aa:fc:83:f7:2e:23:86:37:bd:
36:82:5c:39:89:f8:a3:1b:e0:da:44:ab:d6:bd:30:e9:df:27:
26:ea:e3:f0:e6:7e:c5:20:2d:03:28:8f:33:7b:9b:50:34:91:
c0:52:f3:e1:95:57:60:22:16:85:26:de:84:a0:53:bb:19:73:
e2:6b:e0:c2:a1:8d:57:9e:e5:29:c6:cc:cf:6c:98:55:1c:c8:
1d:74:4b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:59:50 2025 by rpki-client