Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
File: yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft (raw, json)
Hash identifier: WaU/9LuYuU5mbia6Ul+bC3aGAFujmc0dnFxIx7EBU4k=
Subject key identifier: B3:BA:84:0B:B1:B1:9A:2F:60:21:8F:DA:DD:11:AD:3E:16:54:BC:5F
Authority key identifier: CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
Certificate issuer: /CN=ca37843f0752224459e6034569a217c8b611564b
Certificate serial: 019780562453D69076B93670290794BBE09A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
Manifest number: 159D
Signing time: Wed 18 Jun 2025 00:00:18 +0000
Manifest this update: Wed 18 Jun 2025 00:00:18 +0000
Manifest next update: Thu 19 Jun 2025 00:00:18 +0000
Files and hashes: 1: VUGB_aCyOLA1Q6JSyAIK8Xkmymc.roa (hash: IOfuqkQd8JjyCobA5qA+5uEdvI2UFX4aZo+Aq0Rs/7c=)
2: Wp47mYbGIM1Wn1TH4UytNLnpCRE.roa (hash: s3jKeR589toj6Nv3VDplJDroNH801WsVAu93zGQYjRo=)
3: yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl (hash: uLoSVuJOm3dGuASD1udQ8RM5SBD3wb2HU8Ma/stNtKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:56:24:53:d6:90:76:b9:36:70:29:07:94:bb:e0:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca37843f0752224459e6034569a217c8b611564b
Validity
Not Before: Jun 18 00:00:18 2025 GMT
Not After : Jun 19 00:00:18 2025 GMT
Subject: CN=b3ba840bb1b19a2f60218fdadd11ad3e1654bc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f5:6c:9e:55:4d:62:79:53:a8:6a:a1:3f:61:
e9:f6:ff:5b:59:2e:c1:f5:4f:26:69:6f:51:ad:ca:
93:ba:12:a4:02:f1:42:2e:fa:42:39:7f:34:03:01:
4e:e8:68:dd:c3:b8:eb:ce:50:73:1e:ec:54:57:d2:
cd:6e:a1:be:a6:56:2d:dd:1c:ea:6e:15:ec:ea:60:
9f:c2:e7:c6:27:45:51:0f:43:b4:cf:fa:bc:e0:ed:
01:e0:05:6a:0a:a4:fb:8f:d1:e8:d0:f6:f3:59:b5:
9c:34:50:de:b7:5b:08:c5:a1:d4:ff:49:60:f8:d2:
15:ca:ea:e7:55:a0:c7:e6:27:e9:b0:fe:af:4e:63:
f3:3d:58:ac:91:84:9f:3c:b8:5f:3b:7c:d3:70:70:
70:98:37:9b:10:d2:a4:68:39:bb:02:0d:cf:e5:1c:
19:ca:17:a2:6b:09:97:61:34:1d:69:12:47:37:76:
96:ee:f6:69:d2:0d:92:5f:6d:b3:e8:65:be:4b:17:
c6:4d:e3:0f:73:b2:48:6f:e5:76:99:a4:4f:dd:d8:
15:a7:6d:32:18:a5:17:e7:08:89:ef:5c:ce:01:5e:
c2:30:c3:62:fb:a3:94:ce:da:24:a6:a5:c5:af:4f:
f7:ac:47:59:bf:09:2d:b6:4b:3e:69:37:be:76:ca:
17:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BA:84:0B:B1:B1:9A:2F:60:21:8F:DA:DD:11:AD:3E:16:54:BC:5F
X509v3 Authority Key Identifier:
keyid:CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:96:3f:15:b7:45:79:75:63:9b:3c:42:7d:b5:73:2e:d4:2e:
46:af:25:a5:2e:36:aa:a6:8d:55:8a:6a:f0:e8:92:04:e7:4e:
27:66:92:92:e5:0a:f9:af:1a:91:db:63:66:20:0c:5e:15:ae:
98:6e:fd:5a:82:25:60:0c:24:c0:2e:ab:76:22:6b:31:55:a9:
4a:5b:0a:bf:e4:7c:2f:dc:91:a9:fd:ef:1a:ec:0e:18:06:fc:
4b:93:1d:b2:88:44:13:40:89:e3:39:b0:f0:fb:39:d4:73:de:
29:2c:b2:d7:f8:92:c1:c3:a2:aa:64:7b:a5:7a:0e:52:5d:4a:
28:20:8d:45:b8:14:29:04:1a:b8:65:0f:a3:83:a6:3e:00:22:
d5:40:ba:d0:6c:33:26:ed:49:ab:e9:2d:4c:0b:ee:f4:59:d6:
69:99:0c:9c:22:48:7c:a1:1d:21:0b:24:69:35:06:95:7f:68:
36:e3:90:20:04:53:22:52:b9:7c:2d:57:36:93:a8:8e:fb:f0:
32:de:64:67:98:ca:e7:11:b6:14:0d:82:6f:92:e4:04:66:cc:
75:61:4a:7d:6f:13:93:1d:86:9f:0e:01:1c:85:a7:58:7a:f4:
e5:29:9a:cf:74:01:ac:45:25:10:67:7f:8c:75:fd:4c:71:1a:
00:38:66:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:31:16 2025 by rpki-client