Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
File: yRjEAZR0zIHsZh_OZObJOJchlto.mft (raw, json)
Hash identifier: zdsKZR6YDtC9Y6pv/ST2peEZi/2fptpL3i2SM4tRbKg=
Subject key identifier: E6:27:17:96:83:50:37:5D:1C:F7:10:CA:D5:38:38:3E:F9:88:BB:C5
Authority key identifier: C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA
Certificate issuer: /CN=c918c4019474cc81ec661fce64e6c938972196da
Certificate serial: 019796DDC1B8E4A391A4F4F1FEFC274272B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
Manifest number: 0547
Signing time: Sun 22 Jun 2025 09:00:04 +0000
Manifest this update: Sun 22 Jun 2025 09:00:04 +0000
Manifest next update: Mon 23 Jun 2025 09:00:04 +0000
Files and hashes: 1: Jsgd2QMS4v8iKbqKY7mpL6rgdrw.roa (hash: zUKbiJyZKBDLVjXxF3gSP5G2WQgNlz6YzfL6risxYY8=)
2: yRjEAZR0zIHsZh_OZObJOJchlto.crl (hash: lxD2t8IgvVBP7nxwLlmyp4bby/oqm7KUDHNhadDPjaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Jun 2025 02:19:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:96:dd:c1:b8:e4:a3:91:a4:f4:f1:fe:fc:27:42:72:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c918c4019474cc81ec661fce64e6c938972196da
Validity
Not Before: Jun 22 09:00:04 2025 GMT
Not After : Jun 23 09:00:04 2025 GMT
Subject: CN=e62717968350375d1cf710cad538383ef988bbc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7a:7c:ff:77:d6:42:52:5f:c4:57:0f:bb:bb:
4f:ba:89:08:d7:16:26:6d:61:a2:df:96:fd:f2:c4:
e5:b4:c3:2c:11:f5:68:ad:a5:14:41:b9:43:23:ec:
0f:af:ba:15:7b:7c:39:7f:4d:89:f4:3a:0b:7d:35:
c0:b9:3b:9e:41:9d:02:3d:0f:f5:9c:1e:98:6f:e3:
8b:34:3f:9c:bd:a7:97:0e:aa:89:b7:e5:00:c1:d3:
8f:02:e7:b3:98:53:f9:03:0c:a0:81:35:94:6f:d8:
28:23:3c:ba:f8:19:67:31:0f:83:89:5f:87:f2:56:
50:6b:1e:d2:5f:98:de:4a:1f:70:07:c6:8f:88:5c:
46:3d:42:fa:8e:49:97:8b:3d:e1:d9:89:ad:ba:a9:
bf:ee:e2:cd:a4:e8:22:1f:c1:69:54:02:26:d9:5e:
5f:0e:36:f3:c3:3d:cf:a6:1a:2c:73:4f:8b:69:f5:
0d:19:31:ca:d1:11:83:26:42:66:6f:1c:c4:34:97:
b5:95:28:e1:68:9d:06:65:e8:1f:d0:0d:8d:a1:e2:
c3:12:da:9d:06:fc:2a:7c:a5:19:09:15:78:d7:d5:
f1:a4:97:cf:dc:d5:61:cb:80:a9:74:df:bf:ba:3a:
cb:ef:f9:ef:37:90:ce:c5:f1:9a:c5:13:d0:fb:60:
63:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:27:17:96:83:50:37:5D:1C:F7:10:CA:D5:38:38:3E:F9:88:BB:C5
X509v3 Authority Key Identifier:
keyid:C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:97:63:6a:26:58:14:fb:a1:4c:8b:41:08:1b:98:5b:10:ec:
9c:0a:7d:b9:de:0c:12:bf:42:63:27:d6:7f:11:a4:77:fd:f4:
cf:ea:92:7e:ba:d8:39:f9:9b:3b:aa:fc:59:ad:ed:18:4b:8a:
53:5e:00:50:35:28:36:3a:22:70:24:5b:2a:86:24:ca:44:a4:
52:f3:4b:7a:6a:89:08:12:0e:6d:2a:60:90:b2:fd:e5:94:6e:
f7:5b:eb:c1:7e:d3:f1:55:ee:f1:77:76:96:4e:3a:0c:04:4f:
b9:2e:4a:e9:f8:4b:54:2a:40:22:1d:de:55:e6:dd:a4:95:f7:
32:32:77:bd:66:e3:5a:d0:c2:04:b2:d5:0a:5b:2a:5a:5a:20:
bc:a7:70:65:c4:a7:74:71:3c:54:dc:91:83:d7:c8:b8:04:6f:
e6:83:73:fc:a4:63:20:74:d3:27:87:24:64:be:88:03:ac:6a:
8a:1e:cf:60:99:4d:7c:29:11:32:99:dd:aa:1a:59:89:cd:3b:
eb:1f:24:d7:47:27:24:44:f1:84:ba:a3:7c:ea:fe:d0:42:fa:
79:ad:69:7f:0d:1c:2a:9d:48:7f:9f:7b:d9:f1:f6:a2:09:ef:
fd:35:29:0e:a4:2f:41:5d:42:1e:cf:ab:08:21:f6:e9:a8:e8:
ab:81:7e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 12:54:26 2025 by rpki-client