Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
File: Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft (raw, json)
Hash identifier: ARgPtHa+PMZUAgcWJepLdUtpf1D4krAfcqnNYeRmc3c=
Subject key identifier: E4:C7:DE:09:73:4B:BB:34:41:01:B6:A1:4F:E5:51:D0:C3:3F:6A:28
Authority key identifier: 63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32
Certificate issuer: /CN=63b5072a0701221e1d291f02deb8cd5169e6ac32
Certificate serial: 0197711B1F5521C67B2F2EA3AA64E5A1314A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
Manifest number: 055A
Signing time: Sun 15 Jun 2025 01:01:32 +0000
Manifest this update: Sun 15 Jun 2025 01:01:32 +0000
Manifest next update: Mon 16 Jun 2025 01:01:32 +0000
Files and hashes: 1: Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl (hash: f1rLElacHuQS/mVPLUr8lzfm/oqvYOsnjonIX8le1OQ=)
2: YUQVyrq4PHervTbSyhk_DAk9Eqc.roa (hash: awqm1ZtQIXxZlbailLUEsiOtmvaS6joj09FbNkED+tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1b:1f:55:21:c6:7b:2f:2e:a3:aa:64:e5:a1:31:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b5072a0701221e1d291f02deb8cd5169e6ac32
Validity
Not Before: Jun 15 01:01:32 2025 GMT
Not After : Jun 16 01:01:32 2025 GMT
Subject: CN=e4c7de09734bbb344101b6a14fe551d0c33f6a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ae:cd:e7:67:0f:ba:94:f0:6e:58:8a:9a:73:
ff:22:7d:f9:5d:58:47:d5:b8:7e:ad:8e:3e:c1:6c:
ac:41:8f:5c:91:3a:3a:8c:ff:ae:8d:aa:95:29:53:
5e:bd:0a:d5:ef:3b:9e:2c:6f:d3:67:20:f0:ab:07:
fc:27:c6:c8:5d:f4:6e:7b:ab:7b:5d:18:01:c5:82:
8f:4f:ef:79:21:b1:fd:11:b7:2f:28:8e:76:d6:77:
f0:d9:d3:d7:07:be:d4:ef:4e:f0:6e:97:b0:fe:3b:
12:11:70:c4:fd:d5:a5:c4:d7:03:fc:85:c6:10:7d:
45:c1:29:d1:6d:3c:b3:63:b4:c6:1f:e4:da:11:d8:
3e:8c:97:28:1a:b3:a4:c3:0d:22:e5:91:19:e2:a7:
7a:04:7e:31:ab:17:30:52:bb:77:90:93:f2:a7:b7:
54:c6:92:a0:d9:54:8b:e9:a4:b0:4d:58:d8:fd:14:
22:0c:aa:f6:42:08:0b:95:1c:d5:30:49:45:39:70:
63:4c:93:c6:79:52:24:6f:96:42:df:22:8a:b7:14:
e7:bc:96:9c:bb:72:89:3d:eb:1f:3d:8c:ec:fc:21:
76:47:1b:47:f1:11:80:fb:2d:44:b1:98:03:ba:2b:
61:fa:96:1f:c4:74:e6:05:88:78:71:38:50:0d:eb:
8f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C7:DE:09:73:4B:BB:34:41:01:B6:A1:4F:E5:51:D0:C3:3F:6A:28
X509v3 Authority Key Identifier:
keyid:63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:80:a2:a6:9d:0b:5e:f9:8c:15:6a:69:76:57:32:38:f7:89:
57:a1:4a:85:33:3b:70:e6:c3:76:9f:ae:c2:fa:b6:7b:43:ba:
d6:5e:17:6c:ae:f8:c5:35:83:7a:f2:3b:86:83:13:33:d8:7b:
32:fd:af:d1:54:3d:79:23:36:0d:74:b1:64:95:43:52:81:35:
63:c3:e1:cd:37:48:3e:c7:d5:a5:e7:13:ba:01:21:52:22:a2:
5b:10:fa:cf:ca:3a:82:27:50:c5:0f:c7:2d:1a:dd:c0:79:ce:
c9:04:b9:df:2e:83:a0:20:e9:6d:35:8d:c9:fe:c0:62:b5:6a:
f5:99:61:7b:44:27:82:85:ba:ed:c2:e9:7d:6b:83:49:03:9a:
38:d3:a6:c9:da:f9:2e:3c:d4:91:82:00:36:5e:ae:a7:e5:2b:
b7:05:3e:82:0a:3e:ea:45:a3:b4:07:71:bd:97:b6:19:74:50:
ee:c1:7e:d6:29:13:54:3f:c7:27:f0:f7:34:fc:01:03:78:bd:
2a:10:b4:12:49:4f:fb:0e:42:ac:7f:9e:0e:32:5f:c5:78:2a:
0e:17:cc:30:c9:19:47:91:ab:f8:d1:c2:27:a7:e5:0e:21:21:
e4:6d:d6:5e:f7:ee:1d:27:f9:71:b1:68:76:2a:22:03:df:cb:
02:22:49:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:58:06 2025 by rpki-client