Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
File: YP9t9Egm-fEGScV46sQWFnBSlCc.mft (raw, json)
Hash identifier: 0aq3NfwG7XPenm/pC1/37kFsgfCtPeoEKk8HirJKt3o=
Subject key identifier: 71:F0:23:98:EA:B1:AC:A4:39:1A:74:86:44:71:A0:92:1F:FB:F3:0A
Authority key identifier: 60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27
Certificate issuer: /CN=60ff6df44826f9f10649c578eac4161670529427
Certificate serial: 01976EF4B277C3174CC788F8C8C851F64A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 15:00:19 +0000
Manifest this update: Sat 14 Jun 2025 15:00:19 +0000
Manifest next update: Sun 15 Jun 2025 15:00:19 +0000
Files and hashes: 1: YP9t9Egm-fEGScV46sQWFnBSlCc.crl (hash: ZgHrCfWZlthnVi/q8gujOXwzxs3UsMmjzsHf3bBJ87Q=)
2: aQpN_AazwsYK521EYwQJi9M2iSk.roa (hash: GQsuDZdcScHpctBuVbdbtj6CCFBXdaH1ubDgAN0EZ6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:b2:77:c3:17:4c:c7:88:f8:c8:c8:51:f6:4a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ff6df44826f9f10649c578eac4161670529427
Validity
Not Before: Jun 14 15:00:19 2025 GMT
Not After : Jun 15 15:00:19 2025 GMT
Subject: CN=71f02398eab1aca4391a74864471a0921ffbf30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:10:5f:cc:7e:dc:29:89:84:1b:52:98:7d:5e:
15:f2:66:b5:b7:a5:44:f2:96:49:6c:b8:1d:52:7c:
c6:0c:80:f4:e8:07:c7:57:f0:65:3a:a4:11:d9:70:
bc:12:14:95:ac:b6:7d:82:cf:b2:c7:59:09:0a:9f:
62:cd:bd:3f:03:df:2b:27:f4:9c:ad:f1:eb:8a:63:
12:9b:0c:a3:a3:89:62:bc:8e:6d:3a:64:be:cc:49:
fb:87:2c:32:2e:d7:11:55:02:4d:b9:9b:cf:8f:9b:
dc:da:77:57:03:14:cd:aa:f4:f0:26:8b:55:89:89:
c7:be:65:e5:c9:f8:53:30:bc:cc:08:be:67:c1:ba:
c8:05:89:81:6b:fb:14:06:6f:5c:17:33:f8:47:67:
fe:17:9a:28:c0:16:57:12:b9:f4:a9:49:9e:16:56:
7c:95:22:4a:0d:bf:cf:a4:ea:a6:80:42:bd:81:9c:
db:4a:3b:cc:90:d7:3a:da:05:d7:16:6e:39:be:f0:
ed:f1:09:a3:d3:ea:50:d9:dd:3b:4b:9a:9f:d5:08:
c5:ca:88:99:40:fa:1c:00:08:83:b0:fa:97:97:30:
96:f7:39:91:a9:48:84:23:e1:89:51:ec:62:d1:6d:
f0:75:80:df:65:2a:3c:9c:44:e8:b4:11:0c:47:45:
18:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F0:23:98:EA:B1:AC:A4:39:1A:74:86:44:71:A0:92:1F:FB:F3:0A
X509v3 Authority Key Identifier:
keyid:60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f6:d6:5d:cd:6d:b3:6f:80:44:aa:10:d1:3c:56:4a:ef:5e:
b2:94:ac:68:93:ec:f9:b6:02:7f:82:28:30:14:a7:9a:b9:91:
10:55:9b:a4:ac:02:16:cb:1a:25:2c:52:0d:1d:be:27:7c:7a:
6b:90:a1:9d:85:13:71:c9:c7:ca:2b:be:96:29:3a:6e:2d:28:
81:21:dd:44:ef:d2:26:79:fb:0d:a1:f8:ff:f1:6a:41:0a:42:
56:fb:66:4c:d6:f0:77:6a:7a:df:e4:58:ea:91:d1:19:1d:ad:
a9:0e:60:b5:ee:dc:13:df:b5:22:e1:c7:5a:3b:26:62:6b:b6:
24:bd:6f:5c:a8:42:ed:cf:35:bf:60:08:d6:58:14:50:a8:dc:
5a:49:cf:f3:98:6d:db:49:8d:64:18:8f:a0:c6:6f:89:f9:46:
3b:d8:2e:99:50:75:e2:ba:e3:ef:25:e6:db:fd:27:1b:11:ef:
c2:a9:4a:88:cb:52:76:4c:c4:45:36:a7:62:4c:6f:8f:e6:ed:
66:11:7b:3f:6b:28:13:cd:5f:64:f8:f3:41:d1:94:d5:0d:f0:
6b:a7:37:0b:10:53:0c:5e:a5:bf:b3:b7:0d:ba:4b:83:59:78:
11:10:7b:6c:e9:78:9c:df:4a:ea:81:7c:31:47:6b:2f:0e:55:
4a:c6:24:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:19:36 2025 by rpki-client