Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
File: YZz5qeC2RhrYM4dawRaPiSP9VQs.mft (raw, json)
Hash identifier: h4mHLTwJWI1Lk6tWJZmJ+PbiuAqpCbdzkoG+agzWXMw=
Subject key identifier: 15:7C:C9:AA:DE:67:27:62:FC:6A:85:CD:5B:18:DA:B7:DA:3A:1D:EC
Authority key identifier: 61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B
Certificate issuer: /CN=619cf9a9e0b6461ad833875ac1168f8923fd550b
Certificate serial: 01974D4500FAFE4EDD2F6524B8EF489ACD08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
Manifest number: 01FF
Signing time: Sun 08 Jun 2025 02:00:57 +0000
Manifest this update: Sun 08 Jun 2025 02:00:57 +0000
Manifest next update: Mon 09 Jun 2025 02:00:57 +0000
Files and hashes: 1: YZz5qeC2RhrYM4dawRaPiSP9VQs.crl (hash: 4DeaWiDUAPmTR/K+8/QXlop/SQdRifrlVdx4w12MULM=)
2: huRseKKMZ6MrEbEtnTidADNp1Qk.roa (hash: 2Cpw72DhJ+0Co4QK9K/ptsbGLArKbkMx0RKaT4rzilY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:45:00:fa:fe:4e:dd:2f:65:24:b8:ef:48:9a:cd:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=619cf9a9e0b6461ad833875ac1168f8923fd550b
Validity
Not Before: Jun 8 02:00:57 2025 GMT
Not After : Jun 9 02:00:57 2025 GMT
Subject: CN=157cc9aade672762fc6a85cd5b18dab7da3a1dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:76:04:b6:38:91:26:7d:b3:74:57:10:b9:3c:
5c:e5:c2:15:63:fd:2f:c3:86:ca:3d:8c:19:42:bc:
be:24:c6:80:5f:a1:ad:6f:0b:0a:d8:4c:49:53:ee:
48:44:f8:6a:39:63:bc:fb:57:e2:3f:73:34:bc:a5:
55:b4:83:15:6f:ac:41:ed:03:d7:cb:e2:c1:83:c0:
83:47:74:6a:01:c1:98:29:eb:d2:30:fc:33:db:08:
07:55:ed:25:d6:42:34:4f:8e:db:03:2a:aa:07:d7:
a8:af:55:5a:59:af:15:e7:4b:6c:c7:50:c6:9e:29:
9c:d7:5d:b3:04:d3:83:e5:13:f5:b4:34:41:8c:31:
7b:af:58:aa:42:9d:b6:21:1b:5d:12:e6:d8:e9:64:
d5:bc:ec:7a:8a:bc:d2:0b:3b:19:3f:29:02:e7:4c:
3b:45:b2:fa:76:91:ba:4c:45:48:2a:69:bf:ff:e4:
38:ee:f6:29:92:e9:52:3b:7d:ba:d8:8c:54:9a:54:
df:2b:1e:f1:32:0e:b8:d0:7a:a1:3b:20:90:16:27:
0a:f2:22:38:d6:bd:ee:4c:94:e6:9b:43:97:0c:7b:
d8:71:f8:12:1a:3f:be:0e:d4:e6:dd:29:08:52:7f:
c0:ba:ab:3f:f9:e3:6e:23:da:b7:c0:57:f7:91:3c:
b8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7C:C9:AA:DE:67:27:62:FC:6A:85:CD:5B:18:DA:B7:DA:3A:1D:EC
X509v3 Authority Key Identifier:
keyid:61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:15:70:ac:2a:e3:fb:8e:4a:1e:45:db:98:c7:6c:33:97:af:
7a:22:d8:b9:cd:34:6c:c0:44:78:02:4e:5e:79:00:74:71:c5:
5d:ea:f3:48:4d:4e:b6:29:7f:6e:dd:d6:07:85:8e:57:67:5c:
9d:e4:fb:ea:8b:cb:2c:a9:5d:1b:74:2c:a4:fa:05:1c:73:bf:
7d:d5:40:76:20:a9:9d:c0:ac:1d:a1:d8:ef:bb:5b:0b:a2:e4:
13:87:69:a4:ed:ef:13:b8:0c:6d:e1:df:7a:19:f6:d2:c0:61:
0a:31:6f:ec:2d:da:c1:05:91:92:87:f9:7e:91:9a:b3:51:eb:
d6:ad:e0:93:a2:85:eb:66:27:79:c4:b6:d6:f4:fa:5b:42:f4:
b1:f3:a8:26:45:80:75:e9:ff:c1:ac:f4:86:97:9e:30:0c:30:
b5:8d:d1:ea:31:f9:6e:d5:1c:52:6b:e4:61:4e:ad:ca:42:c6:
1e:88:c5:08:be:ee:e7:cf:e8:23:99:b4:0c:1c:19:92:41:18:
c0:5f:53:dc:09:5e:08:27:e0:45:e4:fa:d7:63:33:19:ea:f8:
19:b2:53:b3:ed:42:68:9e:19:3b:11:15:07:61:6b:2a:5c:66:
1c:0c:b4:b5:38:91:ad:d1:08:c6:8a:6e:b5:3e:af:59:5f:5f:
09:79:ba:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:46:10 2025 by rpki-client