Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
File: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft (raw, json)
Hash identifier: 9eoEQE8O28yERE+rMjaHlOemVdAFGggJxjUeGmjQARs=
Subject key identifier: 1C:9F:13:7F:05:98:DC:3D:C7:B2:DA:18:96:0A:C3:32:3F:28:44:2F
Authority key identifier: CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
Certificate issuer: /CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Certificate serial: 01974EC5D08611E9E1B3138E66501C9B93E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 09:01:16 +0000
Manifest this update: Sun 08 Jun 2025 09:01:16 +0000
Manifest next update: Mon 09 Jun 2025 09:01:16 +0000
Files and hashes: 1: TBpy-9qiejUQQ-tchw6_vEGR2TA.roa (hash: Hj0WEeohah6IsMKUEfhTDBVFLO4BtqyUcqc4Aw6MbK8=)
2: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl (hash: 6HW6gxEzk5LZlaV0DzCKhsZCmNoMUvJU4ptY8DyqexM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:d0:86:11:e9:e1:b3:13:8e:66:50:1c:9b:93:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Validity
Not Before: Jun 8 09:01:16 2025 GMT
Not After : Jun 9 09:01:16 2025 GMT
Subject: CN=1c9f137f0598dc3dc7b2da18960ac3323f28442f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:71:39:34:c8:33:de:39:91:ff:b1:42:d1:ed:
41:e9:c3:d0:d6:c9:5a:8b:8f:6f:ff:8e:aa:0b:39:
22:80:8a:e4:c0:f2:e3:71:c8:89:c9:46:ad:f3:83:
66:bc:02:80:c0:ed:72:02:6a:72:54:20:30:09:ae:
d6:1b:34:ad:1e:3d:33:0c:fe:1b:2a:49:2c:60:ea:
f6:0f:3e:6a:a6:de:98:92:b1:02:de:a8:3c:f8:6d:
e1:44:38:3f:52:98:38:bb:d9:38:ab:7c:9f:a4:6c:
5e:f6:f4:d8:ae:dd:2c:b2:a1:f6:b8:cd:7a:f7:09:
5b:cc:9f:d0:6f:88:cd:0e:59:7f:ae:25:2e:ff:47:
92:cf:4e:1e:5d:e2:d2:c7:7c:bf:b8:e8:61:c2:13:
35:1b:7d:e0:54:a6:90:35:e8:4a:95:a7:92:03:5d:
ce:16:24:64:8b:82:82:2f:45:7c:67:db:47:05:4e:
67:3c:bb:3d:08:71:19:2e:0b:6f:16:a3:4f:b0:3c:
8d:6d:1f:3e:5a:ea:3a:55:b9:61:b1:a1:a6:8a:bf:
72:61:7f:18:62:eb:ad:e3:db:1d:be:50:50:9b:ee:
5a:71:bb:3e:60:1c:9f:0e:4a:7f:fb:52:68:ca:4a:
3a:8a:d5:22:57:0a:27:ad:98:b3:c7:60:9e:0e:9c:
7e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9F:13:7F:05:98:DC:3D:C7:B2:DA:18:96:0A:C3:32:3F:28:44:2F
X509v3 Authority Key Identifier:
keyid:CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:bf:08:d0:fa:78:8f:48:d3:f6:5e:08:13:47:16:80:9a:c8:
25:dd:35:c1:4d:f0:ef:ab:35:d6:37:42:d6:0b:74:bc:82:86:
14:3f:27:6c:8e:d4:f4:72:a8:69:c9:1a:7b:a5:2c:d1:8f:5d:
4d:d9:aa:48:1e:1a:14:fb:24:06:0b:2b:5c:e8:0b:a7:62:84:
78:0c:69:88:59:78:1e:d9:5c:08:f2:24:38:da:93:a0:13:14:
b3:ba:d8:ad:7e:c0:a4:d0:29:5a:a9:79:66:af:6f:85:0d:08:
df:08:cc:fc:d9:7c:42:5b:78:11:63:6d:44:fd:78:18:d1:d1:
39:66:3b:84:31:31:4f:1d:89:d2:70:99:88:9d:15:52:cc:b8:
a2:36:25:ab:b3:57:41:da:fa:7d:47:d5:06:48:d9:45:55:ac:
b7:8f:b3:9e:ba:81:e9:a2:3d:e5:62:c3:91:9f:c2:0e:b1:0f:
c9:06:b6:42:a7:99:52:84:bb:97:05:be:03:b9:d3:6a:a4:e0:
3d:05:28:2c:ef:8b:03:67:af:74:0b:63:df:09:26:68:d6:5a:
bc:a2:86:27:a4:27:68:dd:ff:ae:73:65:69:e0:71:f1:00:d8:
88:00:9d:8b:dd:2f:17:59:f2:21:cc:08:a7:3b:25:7f:c2:28:
d0:da:0e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:57:55 2025 by rpki-client