Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
File: YRuftFY550kvKzYx9kD2q5r7YpA.mft (raw, json)
Hash identifier: cY3L7+To1UwSK/HXkcCcl1BiFXKidCEAY941tW89d1c=
Subject key identifier: 10:49:AF:E5:1F:4C:B7:AF:C0:28:EB:34:70:D9:D5:D5:07:C4:47:A1
Authority key identifier: 61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90
Certificate issuer: /CN=611b9fb45639e7492f2b3631f640f6ab9afb6290
Certificate serial: 01977865BB681CB85627B9C27C85FF2FC60F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
Manifest number: 37
Signing time: Mon 16 Jun 2025 11:00:22 +0000
Manifest this update: Mon 16 Jun 2025 11:00:22 +0000
Manifest next update: Tue 17 Jun 2025 11:00:22 +0000
Files and hashes: 1: 78p7eZsSQ8zonV0TNMaLaLjK96I.roa (hash: +QO+TKXARPaWdOJ8baQ83Q+fqGFHJ3lndWpB+9vwuT8=)
2: Aqz_ehMSCGzxFOJ8FvGbcOAmgSU.roa (hash: s3KelrVfC9+y7bPujzwFv1EKOWZnruzzVkasMV5xnU4=)
3: Dz7fUAyA3Q6aEL4NtI6fDewBO-Q.roa (hash: xVI7un3YDJ74QBZKCGBUFc9S59Re+F08cwvGlwnT43k=)
4: LuLOUOJIGHxq7ykgB21inUS-57w.roa (hash: ab5+eNLQ6Vj2WxgXbW4Ku3+IuOco/UzZZHvYaaD6UKw=)
5: YRuftFY550kvKzYx9kD2q5r7YpA.crl (hash: DVb4tiKbX6QfrKusC63dszpIIP5CyAM5KQWBYRd5RMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 11:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:65:bb:68:1c:b8:56:27:b9:c2:7c:85:ff:2f:c6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611b9fb45639e7492f2b3631f640f6ab9afb6290
Validity
Not Before: Jun 16 11:00:22 2025 GMT
Not After : Jun 17 11:00:22 2025 GMT
Subject: CN=1049afe51f4cb7afc028eb3470d9d5d507c447a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:30:46:4d:0a:4e:6a:fd:35:c0:d5:e8:3f:da:
64:8b:00:f2:3e:18:5b:d6:6a:ec:c3:05:d4:36:a2:
1a:4e:bd:81:73:9a:e5:7d:fb:44:04:b9:48:a0:d6:
22:03:72:37:48:2d:85:53:f7:34:27:9a:fb:70:69:
48:bc:4e:49:56:f5:5a:5b:e3:29:24:f3:83:fa:1d:
ad:5b:c9:41:fe:f8:bf:55:3a:56:56:31:12:be:28:
d5:fd:3e:1c:9f:12:a1:69:8b:94:ec:76:d1:68:01:
6d:11:1f:8e:7c:8d:27:e1:95:5d:94:93:b1:e4:11:
06:ea:32:1b:04:e2:77:9f:73:5d:49:92:b3:78:4f:
e0:50:6b:de:63:28:70:d1:a2:ec:f0:04:c0:ac:15:
d7:7d:30:f0:9c:e9:83:67:be:86:70:17:89:bc:8a:
14:a2:a7:1d:ed:12:52:0e:7c:23:cd:d7:86:73:17:
6f:0b:19:74:dd:2c:34:ad:c6:0b:1b:63:20:d2:60:
1e:52:6a:a2:6a:4a:32:7e:db:09:c5:75:f0:f0:a9:
63:41:e7:2d:33:91:bd:03:29:7c:b1:f9:d1:cb:ac:
96:3e:f8:71:5e:6e:15:c0:37:72:a1:60:0f:90:0d:
64:77:58:3d:4f:ec:6b:2f:3a:6c:8e:9a:c9:9f:8c:
bf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:49:AF:E5:1F:4C:B7:AF:C0:28:EB:34:70:D9:D5:D5:07:C4:47:A1
X509v3 Authority Key Identifier:
keyid:61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:64:3d:ba:ac:58:8e:7b:17:85:25:0b:b3:fd:5e:18:b9:07:
73:99:7b:fe:05:44:58:84:1c:cd:f1:12:e5:6c:0c:c2:aa:22:
62:86:56:7b:27:f6:2d:6d:55:fd:37:34:28:36:12:44:d0:e5:
94:7f:f3:cc:74:40:91:51:85:20:d0:69:63:e9:65:57:b2:91:
eb:36:c5:f1:c7:92:ad:07:d6:98:21:44:f6:b1:07:08:54:4e:
71:0b:8d:b1:4d:19:dd:93:a1:e4:d8:bd:a9:66:82:9a:55:de:
35:1b:d1:f1:d5:17:37:d1:66:e4:06:2d:e3:33:a0:9d:0e:e9:
af:3e:38:08:ca:03:c7:73:df:bc:40:e5:cc:cd:79:c3:66:04:
cd:8d:98:d0:2d:34:ec:02:4a:74:b2:6d:40:1b:26:e1:46:af:
83:b8:23:f2:5b:4b:0c:1b:7d:06:1f:b7:22:cf:83:b4:b5:71:
a5:8c:e7:21:cd:7f:5a:fe:0b:91:9a:da:76:5c:c9:6c:3d:08:
05:a4:0b:33:17:15:55:12:71:63:da:d7:0a:20:52:81:04:c5:
b0:87:89:4a:04:23:40:33:19:15:d4:92:b8:be:44:b1:da:04:
c1:24:d2:3d:48:4b:a4:ca:f9:5f:7b:c2:ec:fd:88:08:f7:b8:
11:20:54:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:30:49 2025 by rpki-client