Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
File: ykeSHkQwUhp3J4iME7x7jhBMvb4.mft (raw, json)
Hash identifier: qRKKMeD1r8lL1/L/G4UNwP2hxfIyBNH1dhW/P2GjOIQ=
Subject key identifier: 48:33:B2:2B:75:59:F4:1C:17:19:7F:D3:AD:FF:EB:8C:7D:78:BE:78
Authority key identifier: CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
Certificate issuer: /CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Certificate serial: 0197488CF39677FA56DE63710D66B6E48E46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
Manifest number: 1417
Signing time: Sat 07 Jun 2025 04:01:26 +0000
Manifest this update: Sat 07 Jun 2025 04:01:26 +0000
Manifest next update: Sun 08 Jun 2025 04:01:26 +0000
Files and hashes: 1: Ky7rxpR-4kSoR04Qa7eCVK5uiAA.roa (hash: 79v9RJlNPMb159U3SJ5gXF4cXCcoiW5a6vs+5ie+7Wo=)
2: Zc10HX1foB49pMgA50Z_9jpZwkI.roa (hash: 2g9yRUzjmd9wC7gYwkCUgnhu5bqK4zqTow7PrbYY/ZM=)
3: ykeSHkQwUhp3J4iME7x7jhBMvb4.crl (hash: sV1FyrgzbGxOaOpD5Ga3HBK/ClE6YmKaZ8/isLxrtqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:f3:96:77:fa:56:de:63:71:0d:66:b6:e4:8e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Validity
Not Before: Jun 7 04:01:26 2025 GMT
Not After : Jun 8 04:01:26 2025 GMT
Subject: CN=4833b22b7559f41c17197fd3adffeb8c7d78be78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2b:88:ec:31:10:7a:cb:af:07:27:3e:79:1d:
47:d8:4b:02:8b:f8:08:4d:88:93:25:fd:97:b0:ec:
ef:ca:bf:14:fe:74:0b:7f:7b:6c:f9:c9:d4:3a:57:
98:a4:9c:9a:62:20:f6:42:bb:8f:7f:07:b6:f2:fb:
6c:03:24:59:bf:d0:2c:5b:48:b9:e3:1d:b5:9c:97:
22:e7:8e:69:19:f9:17:f4:ee:01:99:ca:ec:31:7a:
41:d9:cd:69:54:b8:8f:09:c3:df:44:55:f6:8c:d7:
2f:1f:9f:c9:35:64:f3:63:8e:8c:b2:4e:11:ae:16:
de:b5:85:4c:82:59:75:ff:b1:b5:a7:de:f0:b5:42:
b2:18:38:32:26:dd:b7:74:75:9d:1b:24:a4:45:34:
36:29:37:f8:6c:c2:f6:b7:33:76:95:91:04:5b:53:
05:73:38:8e:6f:86:b9:cc:23:3f:3a:25:59:66:25:
78:68:b4:bd:7d:cf:ca:7c:53:df:32:15:ee:97:70:
e2:3e:95:cb:ad:9a:f4:fd:14:3c:63:7c:8f:02:27:
08:74:7a:56:34:f4:65:b5:3e:21:a4:37:d9:22:e4:
49:0f:08:e8:32:36:4c:ab:59:42:f9:bf:bb:ed:cc:
ca:a9:c2:52:c6:b6:be:db:d0:ce:16:7c:a8:e3:ba:
d3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:33:B2:2B:75:59:F4:1C:17:19:7F:D3:AD:FF:EB:8C:7D:78:BE:78
X509v3 Authority Key Identifier:
keyid:CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:35:94:6d:a7:04:f6:3e:5c:04:65:80:09:f1:64:c3:16:16:
d2:a4:c1:a1:29:54:dd:61:cb:bd:dd:38:fd:6e:e7:d0:19:ca:
6c:fe:e0:a5:e1:d3:97:15:68:8b:50:76:ea:10:80:32:bf:ec:
1e:9f:61:af:ae:e9:e5:b4:2f:71:ad:1a:b8:f0:d6:de:94:e5:
f7:02:0d:dd:1f:df:84:69:b8:c1:f1:fa:c8:b7:2b:dd:8a:46:
71:8a:10:66:42:46:3a:45:f1:7c:54:22:7d:cf:69:8d:5e:7e:
fd:e1:bb:8c:36:88:fe:ae:61:b3:42:6b:48:71:ad:4e:46:02:
c7:ef:26:c7:6a:f9:09:8e:97:ce:0a:67:c3:78:c6:9d:6b:c3:
76:40:a1:38:cd:e8:b6:b1:2c:24:23:b9:2e:72:5c:12:b4:fb:
44:58:11:e8:fd:0d:13:ce:44:0c:81:87:d2:27:3d:79:9c:35:
08:b9:86:ad:1d:2c:14:a7:dc:e3:e7:36:99:8e:69:2c:36:61:
1e:f9:ae:7d:68:ba:f9:95:73:7f:09:aa:66:1c:2c:c6:8c:9b:
dd:7c:08:85:3b:c9:27:0f:13:0a:fe:2d:65:cd:5d:9c:26:6c:
13:ea:24:e2:01:2d:3a:df:39:75:03:54:c3:b3:05:79:36:c7:
23:4f:44:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:05:13 2025 by rpki-client