Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
File: y0W24SUWoP1eur56eBEILzp0Y5c.mft (raw, json)
Hash identifier: ByO9+xTf81CQ5YrXB+ylmvvFzou1lv9x8tnXFX7edBU=
Subject key identifier: 1F:F0:69:60:47:A0:7C:7A:62:8E:DA:B5:F6:3E:40:35:23:1F:D2:22
Authority key identifier: CB:45:B6:E1:25:16:A0:FD:5E:BA:BE:7A:78:11:08:2F:3A:74:63:97
Certificate issuer: /CN=cb45b6e12516a0fd5ebabe7a7811082f3a746397
Certificate serial: 01975E01DDB2FA8CDADEFFA236068E59A8C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
Manifest number: 0AB0
Signing time: Wed 11 Jun 2025 08:01:09 +0000
Manifest this update: Wed 11 Jun 2025 08:01:09 +0000
Manifest next update: Thu 12 Jun 2025 08:01:09 +0000
Files and hashes: 1: d43Bbm-jTlxIEQu_UfTFZQFzBcE.roa (hash: UkexUnRIJprjhWor4Jilgkay/bVJfFqJkF7dBPx8pH8=)
2: y0W24SUWoP1eur56eBEILzp0Y5c.crl (hash: zqQGjzNLw8dxPukml0+6vYhtJ6lFSi2ZmsUKWlD2tNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:01:dd:b2:fa:8c:da:de:ff:a2:36:06:8e:59:a8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb45b6e12516a0fd5ebabe7a7811082f3a746397
Validity
Not Before: Jun 11 08:01:09 2025 GMT
Not After : Jun 12 08:01:09 2025 GMT
Subject: CN=1ff0696047a07c7a628edab5f63e4035231fd222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d7:d2:9c:cf:87:01:8c:16:d0:7d:a3:e3:3f:
f5:18:25:70:03:35:84:f6:a2:5d:89:d6:47:fe:10:
9f:d3:cf:20:0c:61:65:0e:32:8d:44:b3:7e:7d:d7:
11:2b:bf:94:5f:7a:b1:5b:11:a8:7a:56:eb:3c:da:
0e:c4:98:0c:96:8e:f5:94:bf:c8:2a:f3:fb:20:18:
b5:e0:b1:54:1a:98:a6:8b:ec:1a:67:29:86:dd:85:
29:41:ec:cb:4d:cf:65:5d:ed:7a:68:25:31:8a:00:
97:f2:8d:e3:d4:08:63:67:88:3d:54:b0:16:5d:d2:
2a:e7:8c:62:6b:50:4b:a6:e3:fa:6a:0d:48:f3:16:
58:06:2b:79:4f:86:82:3f:08:0f:72:4c:5c:ff:4d:
ab:fb:6c:0e:08:ca:26:33:1a:46:6a:ab:72:27:30:
10:f4:17:6d:29:04:ab:89:15:54:86:22:d6:b1:26:
4a:64:fa:de:c9:97:48:51:bc:c1:bd:f4:5d:6e:9f:
b9:83:e6:0a:de:ae:6e:1e:ee:c6:72:71:90:2d:7f:
d9:e4:97:18:6d:db:c1:7e:56:89:d0:05:ef:8b:f5:
18:71:a4:94:4d:e2:ff:37:f9:64:76:47:4c:2d:82:
66:5a:92:22:01:69:9a:da:af:48:6a:98:29:65:5c:
87:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F0:69:60:47:A0:7C:7A:62:8E:DA:B5:F6:3E:40:35:23:1F:D2:22
X509v3 Authority Key Identifier:
keyid:CB:45:B6:E1:25:16:A0:FD:5E:BA:BE:7A:78:11:08:2F:3A:74:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a3:d2:21:be:6b:10:ee:61:52:f8:61:cd:57:6a:28:aa:84:
22:01:41:74:b4:df:b5:ef:37:0f:f2:83:b3:83:f1:ed:07:73:
ba:ce:a4:90:f3:13:4b:09:67:47:df:3a:1b:5e:91:b4:c9:ed:
97:e2:4f:44:68:e7:c5:33:05:e5:5c:22:3a:97:0b:92:4c:b1:
ce:a6:4e:f4:18:e8:4b:d7:47:20:04:ef:45:86:cf:f8:21:ec:
e5:b2:bb:1d:e0:fd:e5:18:cf:5f:90:fa:17:c0:6d:c5:d1:95:
54:da:4f:9d:8a:7c:83:8f:9a:cc:ca:b7:f2:ae:f8:e0:f9:ec:
44:65:b4:45:76:68:01:70:df:ef:59:14:5e:f7:a8:5c:bb:7c:
99:cd:cb:6e:30:74:80:67:21:f1:89:1e:6f:a6:41:ef:05:59:
93:65:4b:58:bb:90:63:16:63:10:fd:06:d6:4a:73:12:41:76:
21:b8:b7:dc:8e:ba:85:cf:07:a1:f2:00:b8:ba:7e:50:ad:f7:
a5:69:de:48:66:83:b6:a5:df:ca:a9:39:59:e0:bd:c2:bd:f9:
90:42:d5:b1:f4:3c:df:61:b2:d7:05:57:a6:e4:f0:9c:72:e6:
21:14:17:52:19:9a:d1:f3:90:d3:07:2d:3e:02:c9:6e:4d:e7:
0c:7b:8f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 10:58:38 2025 by rpki-client