Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
File: YSQjU25R-U-r_FCs-UTXmKrPQD8.mft (raw, json)
Hash identifier: vDX8LoNn16sZlqa/SsOP0TmqD6IbS5QT0KpUcIznzf0=
Subject key identifier: B9:EA:38:B8:4B:16:49:FD:5A:C5:02:D6:75:D5:99:B6:4A:96:0F:CF
Authority key identifier: 61:24:23:53:6E:51:F9:4F:AB:FC:50:AC:F9:44:D7:98:AA:CF:40:3F
Certificate issuer: /CN=612423536e51f94fabfc50acf944d798aacf403f
Certificate serial: 019774F822524080EAE0D79CDC8073CE313F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
Manifest number: 1597
Signing time: Sun 15 Jun 2025 19:01:48 +0000
Manifest this update: Sun 15 Jun 2025 19:01:48 +0000
Manifest next update: Mon 16 Jun 2025 19:01:48 +0000
Files and hashes: 1: Wdd1tMY2qRg0hLEXFJzhYiqLyU8.roa (hash: 7fQYHjrnqnFQHkWsTRVENbZi9f45/b+aKRBgyUNF2tI=)
2: YSQjU25R-U-r_FCs-UTXmKrPQD8.crl (hash: MsnTgorHR6NmHmbpqHTGOyypfBUwjzmBAU/JF8ro6B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f8:22:52:40:80:ea:e0:d7:9c:dc:80:73:ce:31:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=612423536e51f94fabfc50acf944d798aacf403f
Validity
Not Before: Jun 15 19:01:48 2025 GMT
Not After : Jun 16 19:01:48 2025 GMT
Subject: CN=b9ea38b84b1649fd5ac502d675d599b64a960fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b7:a2:29:82:bb:80:1f:8c:1f:94:fb:b9:67:
18:07:71:d4:15:6f:66:72:ae:56:e6:3e:44:00:4c:
ab:63:86:d6:8a:7c:97:bd:9f:22:41:59:32:a6:75:
6c:ac:e7:b2:41:f4:be:40:f6:39:fd:1a:78:80:f4:
52:30:4a:43:70:05:81:1e:45:b0:7d:c2:c4:eb:74:
2c:78:3b:8f:6c:ce:90:19:11:04:f0:36:62:09:a9:
72:ed:46:94:a8:94:51:41:62:1a:28:fc:e5:5f:88:
77:98:c8:ed:ee:37:89:f4:d6:0c:cf:2f:c1:9f:5b:
c0:f4:56:68:cb:b4:d0:53:3b:35:4b:15:69:91:cf:
06:d2:8f:37:8d:01:9c:95:bd:a4:c9:d0:81:17:09:
33:1e:a1:f0:dd:25:b9:47:c0:cf:f5:54:26:66:33:
fe:6b:c9:70:1e:77:0e:24:23:ca:7a:15:84:23:51:
f5:e2:e7:f3:24:f6:e4:c6:67:53:db:af:68:83:95:
15:ff:08:9c:ba:1c:91:64:79:a7:83:1e:7d:70:22:
79:29:cd:5f:7c:9c:66:6e:8c:bd:59:d7:c4:82:51:
37:62:a8:c5:a9:41:c8:61:49:98:68:4e:1e:07:26:
35:fb:6f:9d:af:7a:4f:1c:ad:82:1b:fb:7d:74:54:
6e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EA:38:B8:4B:16:49:FD:5A:C5:02:D6:75:D5:99:B6:4A:96:0F:CF
X509v3 Authority Key Identifier:
keyid:61:24:23:53:6E:51:F9:4F:AB:FC:50:AC:F9:44:D7:98:AA:CF:40:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:5a:05:56:b8:f6:3c:3f:49:ae:ff:29:a5:dc:3a:7e:3c:7a:
37:0e:9a:ed:a4:f7:b0:4e:6a:03:c8:2e:3e:d8:76:7f:c6:39:
3e:8b:96:55:40:e9:1e:81:9e:a2:dd:a6:0a:0a:5e:c7:ee:9f:
98:47:60:61:5b:d7:a9:48:be:b2:e7:d3:91:57:8d:a8:ac:87:
a1:2e:99:f4:74:ea:5b:24:8f:74:1e:38:41:d3:f0:7b:ed:74:
b5:fb:05:5f:f2:e5:43:df:9b:92:c2:01:63:15:cc:d0:59:08:
ed:72:4e:0d:e3:70:c4:19:77:b8:8f:59:35:f2:78:2b:43:41:
ad:f7:89:e5:32:b7:67:cb:a5:d4:18:7b:77:b1:f3:88:ea:ee:
fc:57:2c:ad:db:6d:ca:cd:a9:4d:3e:fe:75:2d:99:9d:0d:bc:
09:c5:0a:82:e4:eb:8b:4c:7b:d7:d9:00:fc:9d:35:d7:1c:d2:
5a:5c:af:be:57:d0:78:7d:5c:ff:14:05:7c:12:b0:6d:15:24:
3d:4e:88:5e:61:b7:e0:91:4c:c3:5a:5e:3c:22:2f:d7:b6:ba:
b3:d9:cd:fa:c3:e7:97:ec:4d:68:2f:e1:e2:c4:d4:e1:58:4b:
ba:47:84:04:d8:11:eb:49:cc:91:e3:7e:cf:d1:d3:de:cf:b5:
7e:ca:ec:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:03:53 2025 by rpki-client