Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
File: ypJvljURiT-k2fvV5k4PikODfkA.mft (raw, json)
Hash identifier: dgLzZnBQZoyQBT3lvASWNCfrlyAqZiEOIa3TvIg43w4=
Subject key identifier: B0:D2:3A:66:94:87:46:0B:03:20:8B:1F:82:8A:E5:FE:58:FA:67:2C
Authority key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
Certificate issuer: /CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Certificate serial: 019778D3E02A643ABAE7E1982F4DC757F2F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
Manifest number: 1592
Signing time: Mon 16 Jun 2025 13:00:40 +0000
Manifest this update: Mon 16 Jun 2025 13:00:40 +0000
Manifest next update: Tue 17 Jun 2025 13:00:40 +0000
Files and hashes: 1: GUCAqvQ0tMU-bensdtba-Wc3xJ0.roa (hash: WEDF5d5E+5ca0KR+0265vV9lQ4jW9zrbyE6qVfdzth4=)
2: ypJvljURiT-k2fvV5k4PikODfkA.crl (hash: 8ElbpaQ0W9AtCrgKczwBmVOtgW+B0kvNxXT6gA1HoLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d3:e0:2a:64:3a:ba:e7:e1:98:2f:4d:c7:57:f2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Validity
Not Before: Jun 16 13:00:40 2025 GMT
Not After : Jun 17 13:00:40 2025 GMT
Subject: CN=b0d23a669487460b03208b1f828ae5fe58fa672c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5b:e5:33:f9:43:e7:31:85:80:83:80:0e:08:
45:1d:3f:20:a9:aa:55:2e:a8:6b:a5:84:4b:64:33:
be:98:35:4e:43:bd:25:03:96:5b:0c:49:a7:a7:cb:
ca:7f:d9:f2:26:8e:76:81:d3:e3:f3:79:36:f8:36:
be:16:b7:65:52:79:b6:83:88:07:46:c0:d7:d8:68:
2b:69:14:fb:cd:d9:a4:f4:b8:27:52:a0:e0:08:8a:
c2:5c:2e:cc:69:79:2d:b1:1e:c3:0f:4b:96:4b:b1:
80:de:bd:4d:77:6a:3e:24:b6:1c:fa:ae:07:24:14:
a9:1a:0c:99:5e:2f:a1:1e:ef:4b:2c:53:1e:34:fe:
db:53:45:01:16:3e:fc:1d:b1:4a:31:01:a3:e0:04:
29:08:d6:dc:8e:23:1a:83:7a:83:63:6e:74:ad:74:
20:cb:96:f3:50:2b:54:b4:ef:07:87:b1:fc:78:1e:
2f:04:83:43:fa:d2:ef:d9:cd:3b:68:bf:be:9c:92:
8e:52:06:d0:bc:e0:8c:e8:26:1c:6c:6d:91:f5:fc:
4c:6c:de:11:cf:91:7d:3e:74:ec:ab:2e:40:a6:8f:
fc:d9:dc:cc:32:67:52:f5:3f:e3:19:76:6a:e2:e9:
10:ed:8e:84:2a:70:83:df:0d:e9:9a:4f:12:b9:e0:
e8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D2:3A:66:94:87:46:0B:03:20:8B:1F:82:8A:E5:FE:58:FA:67:2C
X509v3 Authority Key Identifier:
keyid:CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:42:e6:2c:9c:1f:b8:d1:df:8d:de:4c:81:14:ef:e7:5c:af:
a5:ec:42:39:cb:d0:cc:0f:ff:4e:8b:9f:6d:51:8d:2a:2d:f2:
43:31:63:cc:db:10:df:54:f1:df:18:ae:e2:95:e3:e7:fe:8b:
7b:99:96:92:4e:40:1e:cf:63:e6:99:1c:00:86:04:2a:e4:1b:
83:c7:cb:3e:85:94:17:3c:40:60:f1:b5:b1:36:90:ea:da:bd:
54:40:a8:d3:5c:fa:a3:c5:6c:85:f8:52:74:ae:09:0d:d3:a6:
99:27:5f:9f:49:1b:d7:5d:57:ce:c0:9c:5c:b9:4e:c1:82:5e:
7d:bd:d1:3d:39:83:81:7c:54:61:71:07:48:f4:ed:16:f5:52:
f6:f2:f3:5c:53:8a:05:d5:0d:9a:76:72:41:93:9f:04:8c:23:
cc:0b:e8:39:81:d8:8b:af:92:86:8e:1e:de:ff:e1:e9:a9:9c:
70:5e:cf:55:15:00:da:5f:1e:3a:c6:78:53:58:e4:0c:83:e1:
9b:cb:77:c8:a7:fb:39:40:b7:30:65:64:9a:41:81:de:24:74:
fe:f1:91:37:1f:2c:c5:a6:63:27:8f:09:9c:99:6d:64:04:b0:
f3:5b:68:fd:88:89:8f:f2:69:21:86:e1:51:11:c7:d0:f7:70:
23:aa:35:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:56:33 2025 by rpki-client