Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
File: yjvKh2SUaTK6Lai9t9E82GiVr2k.mft (raw, json)
Hash identifier: oObB6T9hNvJfGjJNEkffF0P+PkYMJGUinz8CgvYJsMg=
Subject key identifier: 1F:27:D9:6D:D7:62:B5:D3:4A:70:D3:A1:B8:88:BC:38:B6:7A:9D:28
Authority key identifier: CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
Certificate issuer: /CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Certificate serial: 01977A1DB9C51F26E78BD6F9F1595E79CCBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
Manifest number: 152A
Signing time: Mon 16 Jun 2025 19:00:57 +0000
Manifest this update: Mon 16 Jun 2025 19:00:57 +0000
Manifest next update: Tue 17 Jun 2025 19:00:57 +0000
Files and hashes: 1: l3CxsRe6lXWBML9apstKtmGDLng.roa (hash: R2ig12fHn/XZc83X/g+gRKab+UR2maUGxkjxgHc5+u0=)
2: yjvKh2SUaTK6Lai9t9E82GiVr2k.crl (hash: Te8ggEKt+FjPntDh/L+XpuJ/McUMnbNwV2CjvQup08M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:1d:b9:c5:1f:26:e7:8b:d6:f9:f1:59:5e:79:cc:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Validity
Not Before: Jun 16 19:00:57 2025 GMT
Not After : Jun 17 19:00:57 2025 GMT
Subject: CN=1f27d96dd762b5d34a70d3a1b888bc38b67a9d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3f:95:78:ad:1f:3a:b1:86:9a:93:3d:f3:c3:
a4:d9:d6:d1:01:67:68:79:57:f8:10:72:23:5b:b7:
9e:a5:7b:9e:39:fe:42:12:8a:55:6c:1a:31:5e:da:
23:9f:76:d9:4b:82:65:94:16:61:d6:c7:10:bd:f3:
e7:c6:9b:73:e1:be:46:80:6f:3d:1f:dd:b7:34:18:
0f:d4:8d:9f:19:0e:a8:78:c1:99:23:36:ec:6b:18:
1f:ba:4b:97:1a:2b:73:cd:44:b4:19:0f:eb:38:44:
de:64:be:6a:92:d4:2f:63:a8:47:f8:a9:e4:23:51:
70:28:48:66:0f:fa:35:7b:d3:cb:a6:8a:fb:0a:b0:
77:35:5a:95:4a:54:1c:90:92:5f:a9:d5:2c:9f:84:
0d:ff:b3:b8:33:1f:79:a4:2e:70:73:78:cd:a3:6c:
3b:2d:dd:d9:18:a4:13:d0:3b:36:c3:33:3a:12:f6:
3a:f7:ec:55:59:65:a9:d4:11:29:31:96:a6:28:c7:
b1:e3:14:1d:c3:25:da:ba:8c:93:5c:1d:21:20:43:
28:12:c6:6a:13:31:7a:09:6e:07:43:eb:33:06:45:
5d:14:d7:06:27:16:2d:14:5c:54:a1:fc:fb:f2:58:
31:9b:47:0e:9d:64:69:8a:5d:ec:a0:66:57:8d:08:
37:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:27:D9:6D:D7:62:B5:D3:4A:70:D3:A1:B8:88:BC:38:B6:7A:9D:28
X509v3 Authority Key Identifier:
keyid:CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c2:c8:72:8e:6a:44:54:27:92:e9:b5:b2:8f:98:c5:04:59:
ee:e8:d9:a1:2b:c9:15:af:8d:d4:29:4b:59:9a:48:ce:19:2e:
00:76:a6:56:0b:ad:0b:54:eb:6a:9e:9f:6e:2e:de:bc:85:73:
9d:e4:14:1e:2d:23:ed:a9:64:fc:8f:3d:8c:df:2f:df:b2:76:
36:2f:bb:9d:8e:1c:9a:82:5e:e0:8e:db:10:e7:e2:2c:de:f8:
d6:bd:79:88:dd:1d:c2:5f:b8:56:f4:d3:cd:49:ac:11:27:91:
de:ff:85:4c:b8:ad:d4:84:de:0a:58:ca:f2:96:a3:59:7b:e0:
6c:0a:56:31:ba:a1:25:d0:85:2a:0d:7d:b8:4c:96:ed:92:12:
b6:17:b8:14:05:09:9f:50:79:a8:0d:21:58:34:57:c9:63:3a:
02:bb:e5:a7:6f:a8:a4:96:e4:fc:cd:7e:df:32:ae:b2:ae:f6:
34:75:50:1b:b0:19:a5:38:a5:c0:04:ce:15:41:b3:79:a9:11:
9b:9d:9c:a5:57:02:7b:46:14:91:9f:e9:9d:1c:0e:5f:16:1f:
56:c0:11:94:2a:08:76:e8:4c:bd:2f:4e:9d:21:cf:48:9b:b5:
8c:39:56:ae:a5:a3:87:7e:49:7b:8b:15:c5:c6:ef:80:42:bf:
34:d8:9d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:38:03 2025 by rpki-client