Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
File: yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft (raw, json)
Hash identifier: /f60EVNKrIUS0ol9c6lnfPw0WNVOaXIKrWfYTCkau4I=
Subject key identifier: DF:43:55:CE:46:6A:5D:47:98:14:D1:44:1B:E4:C0:B1:1E:E2:F5:7E
Authority key identifier: C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
Certificate issuer: /CN=c8593923257b20eda4aa4bc3c4a0c30d8490ea56
Certificate serial: 01977A540BEC7F50EA9603B5784078CDBBD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
Manifest number: 1597
Signing time: Mon 16 Jun 2025 20:00:17 +0000
Manifest this update: Mon 16 Jun 2025 20:00:17 +0000
Manifest next update: Tue 17 Jun 2025 20:00:17 +0000
Files and hashes: 1: WhKy2xbRKPMUqHbNxaU8wqbOrig.roa (hash: D12/ehSmYFcNAL5zHVyUB4wCp9NF+Juiz/ym/wvx6Xk=)
2: yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl (hash: woAZtNOYYcuUqLr99TEcqiaGGcN8RpYzqofTNJ1QLxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:54:0b:ec:7f:50:ea:96:03:b5:78:40:78:cd:bb:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8593923257b20eda4aa4bc3c4a0c30d8490ea56
Validity
Not Before: Jun 16 20:00:17 2025 GMT
Not After : Jun 17 20:00:17 2025 GMT
Subject: CN=df4355ce466a5d479814d1441be4c0b11ee2f57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3a:cf:8c:b3:18:55:ea:a0:de:5f:c5:21:c1:
75:b5:e8:1e:e0:15:2b:8f:73:82:a6:3d:30:ee:7c:
e0:ea:74:9d:e2:b5:f4:db:34:11:bc:72:fe:5a:27:
c6:2a:4a:1a:5b:18:7d:02:37:7c:62:6b:f3:d4:85:
9c:01:24:1e:9a:42:34:15:b9:ec:88:46:b6:7f:85:
a2:54:4a:bc:c7:2d:66:0d:ed:03:60:2c:5f:81:6a:
75:dc:88:95:f7:53:5d:43:1e:74:83:07:fd:7a:2c:
c0:81:a7:d6:86:30:2e:ac:02:57:89:e5:ce:d6:e3:
91:60:c7:f8:b5:e6:5a:0b:2e:d3:ba:b7:70:25:df:
73:d6:33:6a:e5:ef:9f:28:a5:ad:d9:af:35:da:17:
ef:dc:7b:04:20:4e:50:71:6b:e8:48:a1:e3:fb:fb:
35:5e:dd:f3:cb:91:a0:59:66:34:1a:97:2e:de:a9:
37:a0:8a:9b:29:57:5e:41:be:3b:10:a5:c6:9a:31:
54:06:1c:c5:57:c0:27:ed:b3:45:74:39:6c:e7:02:
18:2a:d4:f2:76:44:ff:fc:b7:e1:b6:3b:ee:8d:36:
c0:0f:28:86:28:77:26:40:85:42:4f:d4:fb:4d:b8:
9d:28:48:a7:ad:5c:db:19:ad:8f:0b:a0:ff:ed:13:
c3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:43:55:CE:46:6A:5D:47:98:14:D1:44:1B:E4:C0:B1:1E:E2:F5:7E
X509v3 Authority Key Identifier:
keyid:C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c3:24:61:cb:e4:06:21:6e:9a:82:7b:2d:6d:db:80:29:bd:
25:99:1a:5f:19:2c:74:f2:c6:11:b9:66:9f:75:94:9f:6e:f4:
d8:9d:05:1c:b5:80:58:1e:75:d3:77:cd:2f:b9:8d:53:db:04:
60:2d:7d:d7:11:c4:09:34:27:d0:43:30:91:2e:67:4f:bd:5c:
d6:f6:4d:d7:13:be:17:5f:e4:ec:ed:c2:b6:4c:90:b3:7e:f4:
af:76:fc:b4:74:4f:6a:cd:22:d2:30:a4:4f:7f:bb:17:11:bd:
0c:a5:ab:39:01:a3:e8:c0:da:20:98:91:f2:63:0c:0f:fa:bf:
21:35:78:69:c2:02:30:4c:88:e3:09:9d:8f:34:4a:9d:ff:8c:
89:01:66:4c:fd:d1:ac:b2:28:f0:ea:2e:33:65:7d:3d:5e:67:
9f:a4:50:d5:d7:ae:98:55:43:bf:a9:be:ea:6a:b9:76:ad:b4:
90:77:63:c9:c6:fb:c3:25:52:04:f2:81:28:a6:39:80:4e:9e:
12:a6:3a:46:32:8b:56:66:fd:dd:0a:23:f9:24:3b:41:e6:fb:
a0:fb:96:62:ca:b7:36:bf:f1:0b:a0:0a:c2:e6:97:aa:df:7a:
cb:12:92:03:3c:88:b2:66:3a:30:04:27:d7:a1:ac:bc:89:65:
67:fa:3e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:25:04 2025 by rpki-client