Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft
File: Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft (raw, json)
Hash identifier: kWIaHxR7bqPWPnUcEj0lFqZ5X8f7xYVooDUGAapHuFM=
Subject key identifier: 7A:7E:33:C3:AA:61:E3:22:0A:D5:40:E5:18:F8:42:E4:4D:6A:AF:17
Authority key identifier: 63:98:EC:15:BC:03:9C:5A:60:42:FB:E9:04:84:45:6B:E0:2D:A7:B9
Certificate issuer: /CN=6398ec15bc039c5a6042fbe90484456be02da7b9
Certificate serial: 019770753BACC8EB309F7CFA2B417D7BD027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft
Manifest number: 0EC5
Signing time: Sat 14 Jun 2025 22:00:20 +0000
Manifest this update: Sat 14 Jun 2025 22:00:20 +0000
Manifest next update: Sun 15 Jun 2025 22:00:20 +0000
Files and hashes: 1: Y5jsFbwDnFpgQvvpBIRFa-Atp7k.crl (hash: hM9ilqdEdPttYdTryXVSz2xp12yo8ALDo5D/DpK4W/c=)
2: e7A-mRDgO875HCDrxITlnnJ3Ki0.roa (hash: 7vWhmuACkkydDfcxmeEEUNVhiR5m0fscFivB+SuNzME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:3b:ac:c8:eb:30:9f:7c:fa:2b:41:7d:7b:d0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6398ec15bc039c5a6042fbe90484456be02da7b9
Validity
Not Before: Jun 14 22:00:20 2025 GMT
Not After : Jun 15 22:00:20 2025 GMT
Subject: CN=7a7e33c3aa61e3220ad540e518f842e44d6aaf17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b9:97:d3:d7:0a:81:2a:c6:41:c5:14:d5:6d:
86:92:fd:c8:d8:44:f9:dc:a4:0e:50:74:bf:3e:de:
f9:e8:24:eb:9d:a0:18:ae:e2:4c:a1:b3:77:1c:51:
1a:90:27:b6:78:d9:09:32:b0:ba:5e:be:4c:b0:54:
11:b6:7b:18:c5:fb:e0:4c:db:37:d6:c5:c0:76:70:
90:17:a7:ae:65:54:1e:f8:86:16:87:24:2d:12:fd:
2e:9a:fe:f3:56:d6:c4:e4:5e:90:f5:df:1e:bc:aa:
7e:2e:0d:5d:1c:09:dc:5f:f4:59:e6:16:3f:0f:11:
2f:e9:8e:d0:b2:b5:ab:70:8b:40:98:7e:8d:67:0e:
a2:f2:c3:34:a4:53:54:cd:a0:c7:e4:17:ca:9a:55:
3b:a7:d0:cb:01:bf:80:40:37:d5:fe:a6:7b:60:05:
6f:1e:49:51:9f:f8:77:b7:6c:06:a7:a6:96:a2:2b:
74:44:69:63:e9:94:32:9e:cb:a7:1f:b2:f1:07:bf:
48:1b:55:cc:2f:66:67:ab:7a:59:6b:d6:a9:16:23:
b1:c0:f2:4f:43:68:83:5e:dd:81:84:04:38:d1:78:
33:44:12:63:92:6f:6f:0e:35:45:13:44:fe:d6:64:
91:71:2f:58:da:dc:a0:8e:1d:47:09:34:f1:c1:bc:
82:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7E:33:C3:AA:61:E3:22:0A:D5:40:E5:18:F8:42:E4:4D:6A:AF:17
X509v3 Authority Key Identifier:
keyid:63:98:EC:15:BC:03:9C:5A:60:42:FB:E9:04:84:45:6B:E0:2D:A7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c3:05:f0:fa:14:f8:4a:25:6c:d6:a2:40:74:88:20:1d:54:
2f:62:ae:68:ac:28:c8:c7:64:1d:e6:ee:54:cd:10:1e:be:71:
90:3c:d0:0b:95:fc:af:87:a3:96:e2:b8:f2:15:fc:31:dd:d1:
4c:6d:39:18:a5:9f:25:86:ad:51:27:72:9a:15:33:8c:83:84:
d4:11:e3:bd:7e:21:78:89:3f:3f:b4:df:30:6a:5d:f6:16:4d:
a3:9d:f3:a7:d4:14:b3:0e:aa:76:09:0d:58:5c:e9:27:ae:3d:
d3:04:2f:29:90:b0:00:64:5e:d9:e0:3e:78:b9:53:ce:a1:53:
7e:6d:2f:5e:2d:3b:f2:09:64:c0:28:68:5d:82:4e:1c:99:e9:
19:d7:b8:3e:3d:37:5b:ff:33:48:18:be:e3:6b:99:e3:0f:d3:
6c:f0:e4:ce:ba:fb:f6:0b:ef:df:c7:f6:05:8c:41:d7:bc:bc:
44:57:c8:f4:da:ff:71:76:3d:6a:b7:9a:6a:99:e6:95:13:42:
b5:0d:57:6c:ca:15:9f:c9:a0:79:37:e7:0c:3a:ff:1c:bc:40:
19:45:26:79:14:25:8f:6e:8e:bc:66:85:1d:7c:49:38:77:87:
e1:2e:67:67:c0:ce:00:13:de:5f:47:6e:23:9a:48:3e:4a:9d:
f7:3c:4e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:12:07 2025 by rpki-client