Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
File: Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft (raw, json)
Hash identifier: 61laiiSM8WnqR3xmVkmMhWknnDuIUF7Lu8tBRfkehfM=
Subject key identifier: 85:2F:A2:E3:32:A8:E1:02:79:01:22:EC:B0:01:04:E5:E7:C5:AC:0F
Authority key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
Certificate issuer: /CN=632e3d037bf0507571b2a068cb90308374ce53ed
Certificate serial: 0197470BC1504E3769AE762503FD932D8105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
Manifest number: 07A8
Signing time: Fri 06 Jun 2025 21:00:42 +0000
Manifest this update: Fri 06 Jun 2025 21:00:42 +0000
Manifest next update: Sat 07 Jun 2025 21:00:42 +0000
Files and hashes: 1: U47KHWtk8fl1zeBfptx2dxwuW-0.roa (hash: MCpZ0AwLfoDIQ9+ASI13wQUEawZmPsd+gtRUPbEtBbI=)
2: Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl (hash: ErO9iJ1TIXy7yfu5/uuzrqj375jrMjAMaH2ezGjtRps=)
3: yMbSdUOBKCqn_NswdvutijlK684.roa (hash: K0IjYQFHztO8K2x6H3KgphHn4JSijnZlB4Ox3bR44Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:c1:50:4e:37:69:ae:76:25:03:fd:93:2d:81:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632e3d037bf0507571b2a068cb90308374ce53ed
Validity
Not Before: Jun 6 21:00:42 2025 GMT
Not After : Jun 7 21:00:42 2025 GMT
Subject: CN=852fa2e332a8e102790122ecb00104e5e7c5ac0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d4:f4:fb:f4:be:26:12:21:b2:c6:d2:fc:c8:
1c:f6:3d:e2:cc:85:5d:7f:9f:03:1d:97:1f:bf:ee:
54:e9:0c:f5:70:66:1e:00:f8:2a:52:00:c9:19:91:
7c:a0:1c:17:5e:55:c5:41:36:a8:24:45:83:86:8c:
a4:c8:40:64:de:ed:d4:51:44:ce:05:9b:51:77:90:
34:01:24:4d:ca:95:b1:ce:06:7e:30:3f:51:8a:f8:
f8:c1:d1:b6:63:2d:0c:94:57:a2:95:e1:3d:e7:5d:
cb:61:a0:ee:84:93:b0:b9:9d:e9:fd:33:f9:ae:a6:
9b:b4:36:09:cd:9b:96:42:a2:bf:2d:e3:d1:a4:0c:
22:d6:f4:96:75:91:d3:1c:4e:80:cb:6a:7b:34:76:
cd:52:28:11:cf:ab:19:9a:5f:a8:aa:6d:a4:ff:bd:
b7:ca:32:5d:91:eb:4c:9b:9a:29:4a:c0:8b:84:71:
42:f0:7f:ae:94:c5:1a:7f:5e:23:7b:87:26:3d:6e:
b9:b5:1a:76:1a:24:db:f2:78:38:d9:1c:e2:79:df:
73:af:a6:04:fb:b0:38:83:d1:36:6c:df:45:fd:07:
e8:3b:2f:cc:31:d6:c1:08:01:83:9c:b0:bd:af:a5:
82:dd:2d:bc:2c:c1:45:64:bc:db:1d:37:52:51:e2:
59:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2F:A2:E3:32:A8:E1:02:79:01:22:EC:B0:01:04:E5:E7:C5:AC:0F
X509v3 Authority Key Identifier:
keyid:63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7a:39:42:a5:16:d4:f6:a1:3a:26:e6:bf:17:e4:94:4d:9d:
87:b9:0a:02:42:69:69:7e:a6:02:f0:11:67:67:b2:b3:89:5b:
08:f0:40:8b:c2:35:a4:ba:e1:19:79:b6:a8:c8:0f:82:97:28:
fc:1a:ca:a9:38:62:d0:6e:9f:f5:d2:ab:7c:32:12:b4:86:97:
34:2b:81:cd:10:53:0f:51:6b:16:a2:69:e0:8b:cb:7d:a3:d3:
4d:37:52:4d:8a:ff:db:0d:47:32:3f:d5:ab:51:58:78:ee:79:
5f:70:64:85:aa:9c:3c:8b:0c:5f:56:88:73:e4:b3:fb:2c:d4:
39:9e:24:d4:e0:47:bc:19:90:0d:f2:60:d8:ed:71:f2:a5:11:
a1:05:cc:01:d9:23:7a:87:e5:92:61:17:40:91:46:35:67:f1:
a0:91:c4:ff:88:87:e6:60:c8:b1:98:9f:3e:ab:37:85:ec:da:
89:de:3d:bd:43:db:63:a1:73:ee:3a:d4:1d:2a:c4:5a:03:7c:
a4:e5:51:c9:5a:ab:af:fe:48:c0:43:bf:0c:78:eb:ba:f2:98:
b2:97:f9:a5:0a:0f:4c:fe:e4:d6:e7:44:79:14:2a:06:9c:f7:
4c:9a:e6:ef:86:da:ba:8f:ef:39:31:56:6c:de:02:7d:28:95:
1b:82:1d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:05:43 2025 by rpki-client