Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
File: __N-YUS-f13ZOtubq9g9SNUYlP0.mft (raw, json)
Hash identifier: WmzUTF2syEDVwZvpaC5uTpefIIsBlKmpwGJQTV71qTk=
Subject key identifier: FD:C5:5B:D8:15:C5:F1:43:85:0D:69:EF:E6:62:51:6D:1C:D8:38:07
Authority key identifier: FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
Certificate issuer: /CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Certificate serial: 019778D3B7DADDA2EA3D73AE3D63C2110153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
Manifest number: 1597
Signing time: Mon 16 Jun 2025 13:00:30 +0000
Manifest this update: Mon 16 Jun 2025 13:00:30 +0000
Manifest next update: Tue 17 Jun 2025 13:00:30 +0000
Files and hashes: 1: T4JSoFrEVlA3_2SnHmgBXY12CKk.roa (hash: vzGu6j83ipDUTJQRTh0Y6Da8WT9NSHL+4Dey6CzoU8U=)
2: __N-YUS-f13ZOtubq9g9SNUYlP0.crl (hash: giyEAeB0hbVGQp79AhwnAnTmdpkrhz7sh4A0NCS43AE=)
3: dUNsJzgqtJkMy1l0L21Y0Zsy2ts.roa (hash: 1X+g9lFYFIJoJGwfwGANKciE/PMScLctb1+/RsHdL0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d3:b7:da:dd:a2:ea:3d:73:ae:3d:63:c2:11:01:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Validity
Not Before: Jun 16 13:00:30 2025 GMT
Not After : Jun 17 13:00:30 2025 GMT
Subject: CN=fdc55bd815c5f143850d69efe662516d1cd83807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7f:d7:e0:90:de:a3:91:91:bf:e4:36:37:42:
32:39:89:b2:06:cc:9d:3f:a9:72:21:99:73:28:d8:
01:db:74:de:8e:42:3b:c7:d5:bb:9a:bd:0a:75:fd:
0f:31:dd:3e:b0:26:46:2a:5b:ac:15:57:50:c1:f3:
5e:e2:a1:d7:bd:35:0f:87:78:f6:ba:c3:a4:d3:7c:
0c:19:51:8c:07:16:0b:83:d5:fc:58:f9:d2:d3:3d:
f2:af:ca:ec:62:79:79:51:8b:dc:2d:b6:e5:82:6c:
18:3e:da:94:9f:86:bc:d1:2c:3f:d1:fa:d9:09:08:
54:07:04:6d:8a:e8:64:e4:e0:19:28:7f:65:8e:98:
82:57:44:43:6f:71:56:94:65:ec:df:26:4a:70:b6:
d4:f4:99:fa:c2:04:5d:28:ff:0a:09:0b:11:7e:90:
48:9e:ab:57:70:11:33:f2:47:f5:0b:10:b5:17:0f:
99:77:6a:eb:4a:0f:51:c0:18:68:70:e5:6f:2f:28:
eb:54:8a:38:27:75:bd:fd:61:9a:b0:16:db:92:8e:
da:8a:b8:e2:13:4a:88:47:27:21:d6:2a:5c:51:e0:
c9:70:c9:52:ee:1f:31:7f:e8:bd:86:53:fb:03:e9:
8d:eb:37:92:66:ad:51:d6:27:b6:85:de:53:4a:b1:
8b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C5:5B:D8:15:C5:F1:43:85:0D:69:EF:E6:62:51:6D:1C:D8:38:07
X509v3 Authority Key Identifier:
keyid:FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d8:c2:55:02:84:83:4d:71:00:a0:0c:c9:4c:4c:3c:21:4e:
c7:a3:08:0a:f9:ce:08:1e:45:e0:39:05:c1:1e:3f:f3:5b:d8:
23:a4:71:d7:53:5c:32:8c:2a:fb:ef:54:9f:9e:91:ee:48:f6:
35:f4:79:37:38:9d:d6:9d:0b:b9:86:75:b8:33:f6:aa:01:f6:
c0:70:fb:3f:a1:a7:b9:d9:a5:58:e9:78:2f:0f:de:29:ca:b9:
3e:62:ac:9a:61:0c:c1:0b:40:6c:22:7e:20:79:7e:aa:41:5d:
a1:a9:c4:17:65:1d:9e:91:dd:aa:3f:8a:79:2c:52:de:4c:5f:
ef:a9:a2:c8:f6:da:5e:7b:c0:4c:74:94:4a:3b:e1:4b:a6:ce:
fc:77:d6:67:30:c1:69:07:60:71:26:b6:c2:0b:28:d5:6c:05:
aa:16:d9:03:62:80:c8:b0:bb:88:73:e7:49:fc:23:a6:5c:8e:
13:fd:ca:c1:a8:68:d9:c0:2e:3a:13:ca:b9:c7:fd:7c:15:14:
e9:a7:ba:28:69:9c:b8:71:b9:1a:56:17:bd:56:1a:bc:ae:a0:
c7:3d:4e:15:e6:13:b0:73:96:f0:85:b3:2f:56:fa:5b:ee:46:
f6:fe:15:82:94:71:1b:65:af:28:c3:97:10:58:d9:28:50:06:
cc:75:7f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:00:26 2025 by rpki-client