Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
File: yDOgOJWSdW5BXN40irvCQxKwLfY.mft (raw, json)
Hash identifier: ren35+H52DMONtZL9kvMQOOIhcqVVIrKqTOkZeUiuNc=
Subject key identifier: 55:20:C3:BE:2D:73:AF:77:DC:14:DC:E3:01:59:FF:E1:D0:28:2E:75
Authority key identifier: C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
Certificate issuer: /CN=c833a0389592756e415cde348abbc24312b02df6
Certificate serial: 019783C594AA7317BA6647B7334F92619765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
Manifest number: 159C
Signing time: Wed 18 Jun 2025 16:00:53 +0000
Manifest this update: Wed 18 Jun 2025 16:00:53 +0000
Manifest next update: Thu 19 Jun 2025 16:00:53 +0000
Files and hashes: 1: erRTM1_91VtMTpdLg1tFc8DEnKQ.roa (hash: igv5stthjArSt6knKlRkVvpjhTI9/bVwYZs5FEOn1NI=)
2: yDOgOJWSdW5BXN40irvCQxKwLfY.crl (hash: VqY97+qWMaZFB5J5/9iIJYMNg83nYEwiW92nGOeqzKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:c5:94:aa:73:17:ba:66:47:b7:33:4f:92:61:97:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c833a0389592756e415cde348abbc24312b02df6
Validity
Not Before: Jun 18 16:00:53 2025 GMT
Not After : Jun 19 16:00:53 2025 GMT
Subject: CN=5520c3be2d73af77dc14dce30159ffe1d0282e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:45:ab:8a:b0:c1:7d:7b:4f:f5:90:06:7c:8a:
49:47:0d:45:ef:43:e1:a9:8e:c9:f4:d3:d0:b3:5b:
eb:12:39:a5:e4:74:4f:08:15:df:b8:70:45:7b:b6:
32:b9:14:48:99:fd:99:58:c5:51:1d:e3:12:eb:b1:
20:68:ad:f9:1c:eb:e4:85:53:ff:8c:02:7d:7e:0d:
f3:69:1c:f7:8b:68:8d:96:07:b7:b4:3a:2a:51:7f:
65:27:95:cf:48:83:1a:27:d5:e1:59:f7:ff:6b:a4:
52:6c:cf:ac:36:36:2c:4b:4c:c9:48:2d:8f:8c:5f:
90:ab:d2:11:45:35:df:5c:93:8f:fb:0e:cd:f5:3a:
8d:bd:c8:54:ef:ef:05:07:37:b6:c5:d0:98:94:74:
ee:61:9a:17:37:57:ad:b6:13:8d:f6:be:55:82:cc:
32:a4:84:eb:1a:66:c7:66:1a:75:3b:90:e2:77:a1:
0c:be:d6:6b:a4:f6:57:c0:b1:51:23:c9:e1:09:e4:
c3:cc:91:06:ad:cc:75:db:8a:d3:10:54:1b:4b:9e:
f0:7c:b4:74:20:78:25:44:81:85:75:b5:e5:4a:6f:
7c:b8:d6:fb:66:f7:da:3a:8d:5f:53:2f:9a:81:28:
bb:ce:a2:d5:7f:e0:76:79:e0:42:85:81:9b:29:da:
df:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:20:C3:BE:2D:73:AF:77:DC:14:DC:E3:01:59:FF:E1:D0:28:2E:75
X509v3 Authority Key Identifier:
keyid:C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:57:e3:a6:85:d4:84:8a:fc:c2:c1:c9:f0:d7:dc:4c:b2:ed:
40:d0:09:aa:77:c5:a1:da:21:1d:ff:f0:d5:87:a4:9a:f4:11:
8c:41:66:2f:1d:24:3b:50:4c:da:e9:5a:1c:a4:ab:42:b2:cd:
56:27:e4:7b:23:e2:eb:10:16:3e:30:8f:50:4b:28:e2:34:7d:
79:22:74:1c:8a:9a:12:ae:a2:48:54:50:41:6d:16:fd:c9:00:
dc:59:54:98:6b:8b:32:1d:f8:42:13:40:17:b1:47:d6:a1:ba:
a5:b8:e4:45:37:06:8d:60:80:78:3a:9b:d9:a0:d5:9c:21:99:
70:bc:a3:45:ae:e2:14:36:8a:5f:1e:53:64:57:13:df:1d:9e:
66:73:12:b8:0f:52:71:c0:1a:65:d0:e3:2f:ea:00:5d:2c:16:
dd:3b:36:87:ab:88:b0:91:3e:40:04:0e:d9:02:22:fa:4c:ab:
34:f9:4d:da:53:7f:d2:34:c7:7b:cf:f3:57:cb:4f:2d:d5:3c:
4d:7e:b3:fc:c7:db:23:b0:df:a3:2b:d3:4d:a6:25:4f:d8:2e:
d6:e1:60:18:16:b9:84:ae:08:2d:5d:cc:aa:c1:4e:b1:a0:60:
10:89:c1:2b:79:23:50:51:6e:d5:89:6a:46:2c:1c:6e:52:f2:
e6:11:a2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:12:10 2025 by rpki-client