Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
File: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft (raw, json)
Hash identifier: M5Avp4hlOWDkM10g8kLiDHjt9iUON+ZyobUlSjIiV2I=
Subject key identifier: 54:5A:AA:15:06:DE:77:E9:6D:88:4B:D4:1E:99:68:BD:52:63:75:54
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 01976FD11E3248A35F0EB990ABCA51972184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
Manifest number: 15D3
Signing time: Sat 14 Jun 2025 19:01:05 +0000
Manifest this update: Sat 14 Jun 2025 19:01:05 +0000
Manifest next update: Sun 15 Jun 2025 19:01:05 +0000
Files and hashes: 1: TpmLWFSbZb2dQ8K2GqBwrSHlhMw.roa (hash: xdJre5WYs0QeN/1xP/iEZblWiapiREglW6GQPHWgPiI=)
2: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl (hash: W/XIJJRLvQSCtn0zMoHREfU2L/FHihkqZ/h1O4UV90c=)
3: bePIOwHo2yd_SzOvruKwF9356uc.roa (hash: AE/WNLdQCiM+hKgplC+GUSqytNFuyhj+98knbmTnMvA=)
4: dRTCI7WuV9VtfDNe-2nZ1GKnPnU.roa (hash: htkBFdeG41G9wQhCLxQ4mCGf0L4SjF+BPE94eJdKX70=)
5: kNG8doC8aOlVcpdzC4H8wIke8-4.roa (hash: RhzxZTrYI5RS5OoyTDGpnX6oHuBHa87akNaFgCcYhjo=)
6: ngGxELy2wl8gCNyQvaYYMnYRe3s.roa (hash: 1vlbZmpTbwG9jf+Nzc2gP7ednTVheAhVKYYb/whXWvI=)
7: qaon0_VUrQ1CtM8ujS3h5z-HyYE.roa (hash: QjdBf8u7Dl0e5x76/XhPz/FbSF5qqjpq22dycf6FL9w=)
8: zya-nVnvYDRCe-NCa3yWVbEp98k.roa (hash: YAuOnGIJzSzoCT2LI34mrWSk3/Q4ZvQVKTNwjixKRhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:1e:32:48:a3:5f:0e:b9:90:ab:ca:51:97:21:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Jun 14 19:01:05 2025 GMT
Not After : Jun 15 19:01:05 2025 GMT
Subject: CN=545aaa1506de77e96d884bd41e9968bd52637554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:35:ff:65:0a:6b:a5:b9:2d:49:e3:51:1c:25:
e3:a4:64:8b:53:46:02:fa:bd:fe:06:08:8e:48:8d:
bf:fa:ce:56:57:29:b7:d2:f8:46:86:8d:a6:03:64:
81:36:e5:b0:fb:6c:e1:5c:0c:62:f5:4b:4b:d7:2d:
f2:c0:f3:07:b7:34:1f:c7:05:98:da:bd:94:bb:4c:
5f:37:ab:d3:a5:25:27:52:f1:c2:ef:09:52:76:79:
b6:9a:1f:5a:6e:6d:6c:26:c3:8a:e2:55:af:92:0b:
7a:35:ab:d5:47:c2:75:d2:65:2e:70:d3:03:5c:35:
a7:3b:6b:c1:29:69:87:30:c1:d8:cf:36:f3:73:9e:
38:f9:e9:80:64:6f:93:53:c2:07:ce:63:b2:41:90:
6f:89:72:6c:6a:01:6f:04:17:ab:16:53:ca:4a:ce:
ec:fa:4d:01:33:0e:3d:dd:95:7a:03:d1:45:fb:f5:
f0:01:5f:3a:4a:f3:5f:6a:e8:8b:29:97:95:dd:7b:
d5:74:5c:d7:b3:af:e9:a0:87:01:33:b6:f9:16:45:
f7:88:73:b7:5f:b4:16:70:81:f6:d7:6d:65:39:9b:
42:a4:89:48:b4:e3:c6:93:55:7a:8d:60:fa:ef:45:
61:13:90:a0:e9:99:66:fb:8f:30:31:3a:bd:6d:b6:
b7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5A:AA:15:06:DE:77:E9:6D:88:4B:D4:1E:99:68:BD:52:63:75:54
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:0f:b4:9e:e2:1a:8f:d2:19:c1:d1:a1:06:3f:04:e0:a5:39:
b9:11:b3:9b:29:22:a9:6a:52:b6:2a:92:13:20:3f:d7:ae:c0:
39:26:be:c3:e5:d9:18:e0:63:5a:ef:e7:93:56:7d:44:32:df:
7e:0a:68:30:46:79:92:dc:98:d2:f2:a3:05:d6:6a:b1:08:8a:
43:85:d4:36:de:ee:e2:f9:82:d7:e8:aa:a0:3e:3f:09:e0:62:
2f:7f:91:19:6b:54:60:3f:74:58:5e:02:0b:13:9f:6e:cc:50:
85:83:ce:f3:6b:d6:eb:17:c8:db:61:67:51:1f:81:86:1f:57:
9f:63:9e:31:21:f7:bb:3e:cf:bb:0b:e0:4f:e9:4c:95:71:85:
2f:3b:0c:b7:be:5b:df:22:8a:83:bb:0d:78:59:0d:d4:0e:2c:
0f:43:d9:17:81:56:c2:c3:f1:82:22:6b:91:32:79:5d:04:0c:
36:39:f8:75:32:f6:13:7c:da:f9:e5:d8:72:57:63:51:74:6b:
d7:03:68:74:0d:88:68:18:20:54:50:46:47:34:65:75:e2:ad:
07:c5:e9:23:35:e6:f5:0c:06:cc:3b:d0:28:4e:b0:30:dc:38:
9f:13:f8:14:71:99:fd:e4:b9:61:36:cb:97:eb:5c:87:c9:0f:
42:d0:d1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:25:56 2025 by rpki-client