Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
File: 1YzIUG_tu1Bh3pklsH1kmRihmSY.mft (raw, json)
Hash identifier: sikOySF7QGI1yTr4/NZFqA5upJre40dtvdodnFxbMNA=
Subject key identifier: B1:D7:06:BC:CF:94:01:BB:0E:11:94:07:18:7D:16:B5:A4:7E:FC:FD
Authority key identifier: D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
Certificate issuer: /CN=d58cc8506fedbb5061de9925b07d649918a19926
Certificate serial: 01976C2B72B3E20098DC425C5A22ACD3BD99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
Manifest number: 1070
Signing time: Sat 14 Jun 2025 02:01:15 +0000
Manifest this update: Sat 14 Jun 2025 02:01:15 +0000
Manifest next update: Sun 15 Jun 2025 02:01:15 +0000
Files and hashes: 1: 1YzIUG_tu1Bh3pklsH1kmRihmSY.crl (hash: gyXFmy6ks+tVI1jcG7ewiZz6E9oKWfsny7bTp1bVq6Y=)
2: DniqmtindUam8vj_sVzvh8icBDA.roa (hash: ta5Hj3U5JYOoiYd4yiO8g7IzMIhuCaznIwtfzYiosBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:72:b3:e2:00:98:dc:42:5c:5a:22:ac:d3:bd:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58cc8506fedbb5061de9925b07d649918a19926
Validity
Not Before: Jun 14 02:01:15 2025 GMT
Not After : Jun 15 02:01:15 2025 GMT
Subject: CN=b1d706bccf9401bb0e119407187d16b5a47efcfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3f:63:bb:a6:26:ef:73:d6:7f:54:b3:70:8a:
92:28:1a:cb:89:41:73:29:bf:06:4f:1e:d6:5e:57:
53:37:b8:e0:68:30:61:49:64:d2:8a:ac:ca:9f:61:
0b:a0:86:7c:4e:90:4f:63:57:52:44:43:dd:2b:77:
62:24:46:04:55:33:38:eb:66:4f:98:e5:11:4a:23:
e9:d6:14:bf:f1:6e:f8:ce:9e:5a:44:30:7f:f8:92:
9b:c0:29:9e:95:54:e2:57:fc:07:70:2f:30:86:00:
69:b9:46:96:ff:8a:11:87:af:be:ff:19:c3:a8:e4:
0e:48:8d:af:a8:52:9f:53:d9:42:43:fe:ed:29:34:
ac:79:0e:48:43:cf:4c:8a:76:93:13:18:29:01:35:
5b:7a:b9:88:ec:cd:4f:91:e4:30:a1:27:5b:9a:9c:
7e:4d:36:ff:82:9e:8b:e6:14:e1:72:c9:fe:7f:06:
69:39:6b:15:3d:99:16:97:93:b8:78:66:9c:41:c9:
56:4e:a5:1e:16:f7:cf:b8:31:be:32:c9:11:3b:58:
82:7c:8e:ad:33:82:c9:cd:b1:21:4d:6b:fc:05:55:
e7:d1:ac:81:27:65:0e:ba:db:d8:07:6e:cb:20:e5:
66:a2:42:b3:74:26:b6:2b:18:87:a8:8a:95:18:55:
54:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D7:06:BC:CF:94:01:BB:0E:11:94:07:18:7D:16:B5:A4:7E:FC:FD
X509v3 Authority Key Identifier:
keyid:D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:83:0e:23:f6:b0:5a:82:3e:0b:da:bd:49:6a:18:25:c2:3b:
20:14:1f:84:06:2e:83:91:b7:c7:eb:43:b0:9c:74:1d:d5:3d:
35:04:03:6f:5c:61:c2:f4:5f:d7:94:a7:b9:d8:ee:d4:e4:ba:
ba:dd:a2:db:64:10:cf:a0:20:70:4a:c4:b8:e7:76:66:e7:33:
d5:35:5f:62:f3:39:ef:10:e6:b0:5d:2c:7e:c1:4a:b3:3e:f7:
16:0f:93:ab:63:e2:c5:d6:68:51:a3:1b:8e:f1:98:6f:47:f8:
7f:04:f5:9e:32:4b:d1:45:8d:71:12:79:e6:b4:23:c8:7c:31:
f1:07:16:fa:60:43:83:41:cd:2f:9c:a2:8d:85:0e:d5:28:0b:
5b:5e:af:db:a2:6d:0b:24:94:8b:20:9e:f7:4f:92:ce:98:61:
3e:a9:2c:e2:bc:d3:7e:d1:02:cd:91:d2:c0:e8:60:35:10:30:
64:74:03:01:f9:37:b5:b0:15:c2:b2:4a:e8:08:71:58:ff:97:
67:ee:b9:b0:24:15:57:61:50:7f:cb:bd:cc:fa:22:a7:4b:6e:
7e:fa:2b:44:a2:3c:fd:81:ed:4f:b5:ea:73:3b:87:cf:a0:41:
40:44:c8:65:de:66:35:3b:17:be:04:2e:b2:84:eb:b8:46:a4:
77:e3:e7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:31:52 2025 by rpki-client