Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
File: yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft (raw, json)
Hash identifier: 951iigUJQFk4Sq+H81HTg45oLZXK93aa5KF6qvFYnkQ=
Subject key identifier: 00:E1:5A:17:B8:44:97:DD:11:ED:6A:F2:AF:78:1F:F2:AD:07:24:97
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Certificate issuer: /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial: 01976D3DE556C322693859AC5C4DAC01EB98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
Manifest number: 1595
Signing time: Sat 14 Jun 2025 07:01:02 +0000
Manifest this update: Sat 14 Jun 2025 07:01:02 +0000
Manifest next update: Sun 15 Jun 2025 07:01:02 +0000
Files and hashes: 1: 2q7qFO0SAjMdaNENG8krQrfpEsw.roa (hash: MRyfRcQ3vFTbqLu3EtrXWQ8bXorq49HiuJbhIqPCu2k=)
2: qdjN7PwUTgcUnjjFAlonTerXwAE.roa (hash: VbOA5tJgv2XPJFvDfrmwF7dfcvJwsiBE98hvS8Guihg=)
3: yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl (hash: IdFH0MQMTEdyRVVB/ooHUGxL3PEGXR88PSCin0PFAZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:e5:56:c3:22:69:38:59:ac:5c:4d:ac:01:eb:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Validity
Not Before: Jun 14 07:01:02 2025 GMT
Not After : Jun 15 07:01:02 2025 GMT
Subject: CN=00e15a17b84497dd11ed6af2af781ff2ad072497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b2:3f:96:63:20:d0:75:05:8e:50:92:2c:5b:
a0:76:b7:9f:4a:b9:cc:b0:91:e4:ca:eb:e9:da:a5:
7e:8d:0f:53:90:8b:09:41:7b:02:f6:30:8e:96:76:
51:68:ca:7c:9e:fe:94:a5:25:5a:0c:34:5d:d3:d7:
39:50:b3:12:79:8e:35:d3:fc:fb:6f:20:97:a8:e9:
65:38:5e:7a:31:c1:11:84:3d:2b:4a:a2:ed:c0:39:
4b:9e:5b:30:2a:40:25:12:58:d1:aa:a4:57:5f:83:
e9:fe:b4:35:8d:5a:9d:1a:e9:86:9d:ba:9e:07:52:
d2:39:1f:78:1e:85:fd:0b:af:95:3b:a0:ff:d9:3b:
82:73:82:d8:85:62:02:93:ae:42:c8:a3:5b:3e:4e:
7b:1f:64:ee:3d:41:51:26:b9:d9:6e:67:2e:82:a9:
8b:79:bc:f9:9b:fa:d4:37:08:bd:44:08:61:2a:c5:
42:be:e2:c6:20:e2:55:f2:84:31:47:18:c2:6e:f7:
11:45:07:21:e0:97:d3:0e:60:7b:0d:2f:56:6c:e5:
92:dc:8b:f2:85:df:72:05:0b:6f:6f:ac:4d:a7:90:
cf:e5:fd:a0:17:50:5a:04:07:a3:53:5f:83:d2:4f:
f8:2a:79:29:76:05:77:eb:98:aa:74:3a:68:0b:57:
32:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E1:5A:17:B8:44:97:DD:11:ED:6A:F2:AF:78:1F:F2:AD:07:24:97
X509v3 Authority Key Identifier:
keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e4:84:63:cb:f9:1b:a0:26:d1:6f:ca:8e:86:2a:fe:b6:13:
d1:7a:45:79:19:47:45:d7:1c:6b:cb:5e:0e:29:ff:30:d7:f8:
c3:1b:ea:c2:28:b2:63:f4:5c:26:5a:bf:31:f7:19:8a:61:41:
af:f9:90:05:a0:6e:e9:88:36:a9:1f:24:b5:d7:83:1c:56:67:
93:d7:f1:be:b7:d2:d0:79:f9:bd:2e:dc:ab:5e:bd:bc:0e:13:
29:b7:8f:b3:7f:9a:61:f2:d7:cd:64:32:80:c6:00:c4:63:ab:
28:e4:79:27:d1:1b:c7:d4:f6:e5:e5:65:80:10:92:db:69:a3:
1f:22:28:68:58:fb:56:9b:c3:4f:36:0c:62:07:22:b2:70:e0:
09:eb:80:44:75:72:a2:6f:ea:63:33:ae:d3:88:fc:13:8b:02:
a8:37:59:5a:67:87:41:73:ff:b8:de:2d:43:b6:e2:bd:01:5b:
f1:98:4b:78:0e:f6:31:4a:23:4b:f2:9e:0c:fc:77:ef:26:3c:
f5:85:cc:85:9c:32:21:94:cc:80:76:2c:a5:26:b4:99:47:dd:
73:31:87:52:7a:b5:4b:ff:d4:a9:fc:ac:01:69:ba:58:6f:32:
11:ea:a0:a9:16:42:c4:b9:1f:05:eb:04:ae:e7:67:e0:51:81:
eb:70:62:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:05:47 2025 by rpki-client