Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
File: ycTTQSeR46PplAQFieyK0vWP4xI.mft (raw, json)
Hash identifier: Qk4Xp45hsqmLnAh2DYZHWIPvhHTkNHjG3Ue8kDG8xaU=
Subject key identifier: 81:64:CB:F1:C6:82:66:90:46:05:E3:F5:26:9D:90:1C:A1:0D:5A:78
Authority key identifier: C9:C4:D3:41:27:91:E3:A3:E9:94:04:05:89:EC:8A:D2:F5:8F:E3:12
Certificate issuer: /CN=c9c4d3412791e3a3e994040589ec8ad2f58fe312
Certificate serial: 01976C2B50B34518B9C3B78909D233B2C6A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 02:01:07 +0000
Manifest this update: Sat 14 Jun 2025 02:01:07 +0000
Manifest next update: Sun 15 Jun 2025 02:01:07 +0000
Files and hashes: 1: mMGnUGaN6rsw58xOd0MAF_HAY9o.roa (hash: 0HzReZTMzsNR7hcuVRKNU/DysaBkSSFxX1IonoMajpg=)
2: ycTTQSeR46PplAQFieyK0vWP4xI.crl (hash: q9l4vWVHddKAaP8n6WISlVFyRVWNbSCXmNQZYdGnYTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:50:b3:45:18:b9:c3:b7:89:09:d2:33:b2:c6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c4d3412791e3a3e994040589ec8ad2f58fe312
Validity
Not Before: Jun 14 02:01:07 2025 GMT
Not After : Jun 15 02:01:07 2025 GMT
Subject: CN=8164cbf1c68266904605e3f5269d901ca10d5a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3e:42:c0:fd:e2:fb:1c:02:c2:9f:17:52:b0:
f7:fb:f2:82:50:8b:83:1b:1e:76:2a:c1:d9:cf:e1:
1b:b8:65:ac:13:97:33:53:da:04:e1:c0:4e:78:7c:
a4:7c:d5:5a:fa:9f:d2:17:b2:50:f5:be:a1:d5:91:
16:6a:16:98:03:aa:30:6f:65:54:8b:07:87:ba:72:
5d:3c:ac:61:ba:e2:1d:91:b3:e4:87:96:c5:4c:90:
3c:ba:00:b3:0c:2a:50:c6:83:7a:4b:ea:ef:65:3d:
19:07:a6:04:a6:14:c3:24:a8:ab:ed:f6:77:7d:3a:
6d:7e:f1:77:aa:ea:18:2b:c2:db:f4:9a:4f:6a:d5:
f3:31:2c:ea:b1:76:b2:3a:fa:4c:bf:6d:25:8f:59:
8a:0a:59:2d:cb:95:79:84:94:7b:2c:53:0e:aa:d9:
38:64:3e:0c:a8:52:d2:42:2f:41:fb:41:31:f6:0c:
34:30:39:70:af:bc:fe:f6:20:a8:63:23:c1:88:11:
82:72:60:42:ec:9d:af:35:a4:01:83:6c:06:80:66:
74:f5:f8:bb:f0:c4:c8:cd:c3:93:af:9b:f1:dc:ba:
32:20:26:c8:d9:f8:34:2f:83:c4:39:8b:90:a0:c4:
e5:0b:82:06:46:2e:b2:1a:94:01:da:df:3e:ea:12:
35:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:64:CB:F1:C6:82:66:90:46:05:E3:F5:26:9D:90:1C:A1:0D:5A:78
X509v3 Authority Key Identifier:
keyid:C9:C4:D3:41:27:91:E3:A3:E9:94:04:05:89:EC:8A:D2:F5:8F:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f2:83:ef:06:98:bf:71:74:99:38:63:c9:67:5d:6e:40:04:
12:98:8a:55:64:9c:ae:33:bb:54:87:ce:a7:05:12:26:d1:ec:
ec:7f:11:c3:82:be:28:60:e9:c5:01:8d:34:05:e9:6d:18:04:
4d:13:67:09:41:cd:f6:92:34:74:ab:ba:27:70:04:ef:8d:c9:
c4:e6:ea:fd:82:48:d9:c6:a7:f6:dd:d2:73:65:d9:81:5a:ba:
68:ad:3d:bf:75:23:8d:1a:8a:ca:e7:17:e9:5c:bd:9e:4e:c2:
f3:0b:06:21:4e:f7:02:77:46:8a:d5:76:60:37:da:9c:4e:6b:
6e:4a:ec:f1:f1:14:6c:4a:58:20:62:fd:96:96:22:d0:c3:da:
d3:00:c7:e8:d9:89:78:b2:7e:c3:77:b8:64:9d:66:fb:51:d9:
bc:01:bc:45:90:c0:94:85:03:2b:58:e0:20:4a:c8:4c:64:db:
35:2b:be:5b:bb:eb:62:a6:ac:65:78:39:09:4c:e4:c4:14:69:
ec:08:d2:dc:d3:d2:29:3a:30:27:43:50:aa:f1:53:ab:a7:c8:
2c:cb:cd:02:5e:52:42:05:05:be:95:c7:de:d8:18:f4:a4:92:
7d:b4:3b:de:0c:aa:a7:25:d4:72:a5:c1:a4:5e:d2:b5:ed:39:
ad:e4:ef:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:42:09 2025 by rpki-client