Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
File: yxvWK-7KsOkDspgRJB2yRLv1LDk.mft (raw, json)
Hash identifier: uYmx+KFUqAJb4Bof7pQt6iITf3mrKH1DPr8h+HcdOq4=
Subject key identifier: 64:02:09:44:6B:F5:8C:91:67:7C:65:3D:D4:0E:1B:7B:3B:91:79:61
Authority key identifier: CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
Certificate issuer: /CN=cb1bd62beecab0e903b29811241db244bbf52c39
Certificate serial: 0197703ECC59D3D58125AA921E57725187F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
Manifest number: 0F30
Signing time: Sat 14 Jun 2025 21:00:53 +0000
Manifest this update: Sat 14 Jun 2025 21:00:53 +0000
Manifest next update: Sun 15 Jun 2025 21:00:53 +0000
Files and hashes: 1: 5aYNWnqt5MGeMuyfI5maKIJbJY4.roa (hash: 8Iaoh9OG5OjpMjtvt8V5oYDLknZ3K/iUcc80PeVe4YY=)
2: LlheXbpgUpnd6LfIavs5m7046X8.roa (hash: m29XywNUw2LYO1n9FuR/vWvutq9J3qKuKN5li9RC9G4=)
3: yxvWK-7KsOkDspgRJB2yRLv1LDk.crl (hash: s2/95rgqAjmg9WEtbsAB7fgAeGZ5xcBd5RDIm7fVL3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3e:cc:59:d3:d5:81:25:aa:92:1e:57:72:51:87:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1bd62beecab0e903b29811241db244bbf52c39
Validity
Not Before: Jun 14 21:00:53 2025 GMT
Not After : Jun 15 21:00:53 2025 GMT
Subject: CN=640209446bf58c91677c653dd40e1b7b3b917961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:10:ef:d6:8a:34:a1:20:6f:2d:c3:65:0c:82:
4c:9c:4d:04:a0:e7:29:c6:18:2c:b5:1b:15:81:d5:
7f:9e:4a:91:be:80:84:e5:e7:70:9b:20:94:c1:bf:
5c:26:1b:01:68:72:1c:3f:d4:5b:9f:9c:82:1d:8f:
27:21:ff:54:86:ba:2b:48:bb:fa:28:8f:b2:43:d5:
66:aa:d3:4f:22:24:dc:c0:ce:ca:9b:cb:74:ef:d1:
23:a6:37:4b:f1:e2:29:b6:2c:fc:f1:78:7a:2b:0b:
ba:d3:af:57:99:39:d2:d0:7f:3a:c2:16:93:0e:12:
dc:e8:b2:59:04:3c:b3:06:d8:4b:58:1b:b0:22:a1:
22:82:fe:bb:65:76:68:8b:8e:73:6a:73:28:79:b1:
47:eb:50:e5:91:0c:e0:0a:08:19:01:40:db:18:b9:
6a:29:41:f1:fb:c8:94:7d:5c:5d:30:73:28:4d:90:
d7:82:23:19:37:7c:06:84:ab:3d:c7:f1:a6:6f:74:
8f:d3:3e:2d:9c:ff:42:6a:48:08:3c:c1:6c:7c:fd:
dd:15:b9:c9:17:c3:7b:4f:c6:b1:b7:4d:5e:47:64:
82:84:95:a5:a5:47:94:8a:7a:8c:5b:a8:cb:30:ff:
b4:0c:05:72:e3:7e:16:92:90:89:e5:87:ff:ff:0c:
23:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:02:09:44:6B:F5:8C:91:67:7C:65:3D:D4:0E:1B:7B:3B:91:79:61
X509v3 Authority Key Identifier:
keyid:CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f4:d1:45:30:b1:58:6e:86:a2:d3:da:c4:7d:d1:03:07:cf:
fd:b6:02:6b:91:74:a5:b8:4c:5c:d9:60:01:2f:eb:5b:ae:51:
52:83:cd:18:3d:4a:e2:d0:ab:40:3d:a0:79:89:c7:78:15:9f:
e4:90:b8:57:8b:14:85:89:8f:66:b0:8c:b7:d2:f6:82:d9:6b:
d4:f9:67:ca:2a:62:de:59:06:2e:99:74:dd:5b:89:9f:7c:08:
51:11:5c:63:3a:38:e0:1c:70:fd:d7:06:97:54:24:f1:bb:62:
bd:29:23:69:f9:6d:61:58:40:c4:8e:0a:31:f2:f2:d4:f9:98:
f8:e6:5e:87:c7:26:f7:95:02:61:86:d8:a1:e2:55:16:8f:ed:
db:b2:72:44:6c:7b:b7:7e:31:77:95:ef:c5:e1:92:f2:07:2b:
60:58:79:3c:62:63:2c:1b:02:27:43:ba:db:13:e7:42:4a:1b:
a3:b3:a2:67:3e:04:f2:10:86:96:cd:7f:91:ba:70:91:31:cd:
75:99:65:ac:27:e7:c1:84:a6:bd:1b:e7:cd:f3:db:ed:1c:79:
c6:ab:2b:dd:ac:a6:d3:25:8e:c3:58:97:e7:5f:fa:c8:fc:c2:
41:21:b6:60:3d:97:e7:ef:19:30:4a:86:cf:b6:60:83:0f:8f:
2d:2a:9f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:03:04 2025 by rpki-client