Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
File: Yj80T9SpG_rRODCNUnFVu85Sr24.mft (raw, json)
Hash identifier: z3lURbIpxhb0WGK0EzEHWw15mwLc90GbGFtkqR1LnuY=
Subject key identifier: BE:0C:5A:D7:20:EB:BC:06:C9:F6:31:01:30:64:49:70:74:FB:62:B5
Authority key identifier: 62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E
Certificate issuer: /CN=623f344fd4a91bfad138308d527155bbce52af6e
Certificate serial: 01977376A2C89A92DBF12A1D3277696683CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 12:00:44 +0000
Manifest this update: Sun 15 Jun 2025 12:00:44 +0000
Manifest next update: Mon 16 Jun 2025 12:00:44 +0000
Files and hashes: 1: PaAAUO_ixJ6swm7tE4jKyNdYpk0.roa (hash: TfUDJUozwqa+GvnOHe7awC0XZSqVbUNsIbWR0csLcfM=)
2: Yj80T9SpG_rRODCNUnFVu85Sr24.crl (hash: 6HEyV1QtZJ1SPKbR5nayurYvwcI5D9IvwsTPXtIjwls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:76:a2:c8:9a:92:db:f1:2a:1d:32:77:69:66:83:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623f344fd4a91bfad138308d527155bbce52af6e
Validity
Not Before: Jun 15 12:00:44 2025 GMT
Not After : Jun 16 12:00:44 2025 GMT
Subject: CN=be0c5ad720ebbc06c9f631013064497074fb62b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:68:80:4e:d6:51:82:fb:40:a5:06:ce:db:
f7:1d:e6:ed:ec:a3:37:b7:10:1d:66:e1:10:7d:0d:
b1:39:a4:98:66:66:5e:4c:54:fb:9b:1b:38:64:ba:
51:f4:d1:b2:7d:cc:a5:c0:f2:e7:22:af:1e:6f:56:
1f:6a:1f:5e:66:10:55:23:8e:a5:68:3b:49:d4:c5:
7c:73:a0:cc:b4:57:03:d0:4a:5c:a5:da:4a:36:75:
14:7c:a0:fd:48:7f:07:ee:d9:e4:af:3b:64:95:26:
3d:08:1f:70:9a:61:ac:6c:91:b5:aa:97:81:4e:2d:
45:16:3c:52:5f:0c:20:8a:00:ba:67:7c:20:36:9a:
8e:5b:41:de:ea:aa:02:c1:28:40:bf:29:cd:ce:26:
07:4a:9a:2f:b7:92:ec:58:b0:b6:5c:44:9d:e4:c9:
46:94:0d:f3:c3:ef:b5:c3:f7:ad:f1:9a:99:7e:03:
22:20:4c:df:69:bc:a2:7d:2f:ea:78:af:b2:3f:5d:
99:3c:f2:2a:35:09:5b:74:25:57:f9:8b:17:2b:5e:
a3:d9:21:de:ba:d4:57:a3:8b:17:20:d5:57:b7:6c:
2e:7b:db:1a:db:8a:16:9d:fa:0a:8d:1e:c7:13:78:
6f:b9:7e:f1:01:6a:62:8c:e1:41:6a:e1:f1:b1:50:
af:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0C:5A:D7:20:EB:BC:06:C9:F6:31:01:30:64:49:70:74:FB:62:B5
X509v3 Authority Key Identifier:
keyid:62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:0c:e7:80:a3:8a:dd:a7:60:45:86:de:a5:88:c2:08:92:17:
8f:2c:a3:a6:0f:7c:58:c0:8d:a5:27:06:4f:28:a4:1c:54:6e:
08:04:31:cb:1f:11:01:66:6f:77:99:6c:cd:de:7d:a4:79:a9:
ae:eb:a3:4d:a0:ce:97:f6:b8:dd:5a:31:2d:61:c7:1b:e4:a0:
88:9c:79:35:ff:44:bc:8b:4f:d8:3f:fb:6e:fa:d2:30:dc:ed:
ef:58:d1:6d:1d:b2:c5:4b:da:b0:51:91:8c:fa:fd:82:ed:c4:
76:fb:f2:80:b0:c0:62:10:e8:28:4a:29:ed:73:ae:5d:e2:47:
28:6a:e6:76:dc:c7:c3:ad:c7:4a:ea:7e:48:a1:59:cf:40:29:
73:98:a8:72:c6:c9:69:45:b0:40:97:29:13:c3:f5:f1:c9:e2:
1c:e2:fc:e5:d6:b0:92:55:b7:0b:a6:4a:5e:a7:73:05:a6:59:
a7:61:ec:d0:c2:d7:2b:f3:3e:38:44:99:56:b0:d4:fa:74:4e:
05:27:80:29:00:55:00:af:6c:7c:ee:ce:6e:30:8b:5f:b8:4a:
a6:c7:eb:ca:90:92:c9:39:75:ad:f4:8a:63:f7:08:71:21:d6:
77:19:88:19:34:9d:77:77:ba:34:2c:aa:c1:3e:22:7e:94:47:
cd:df:07:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:02:30 2025 by rpki-client