Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
File: YXJS67szSErc7HQFrepN4IoK-wQ.mft (raw, json)
Hash identifier: f/Wae7MEbUQ59N0wXYrnwLI3jpsqoJ65c3kpj/Zbr3U=
Subject key identifier: 40:11:47:D9:42:12:90:F1:60:35:2E:EE:0E:FB:9A:37:89:CA:AD:D6
Authority key identifier: 61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04
Certificate issuer: /CN=617252ebbb33484adcec7405adea4de08a0afb04
Certificate serial: 01976D065C8BE2785C21A0B49AB6F6A480CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 06:00:22 +0000
Manifest this update: Sat 14 Jun 2025 06:00:22 +0000
Manifest next update: Sun 15 Jun 2025 06:00:22 +0000
Files and hashes: 1: YXJS67szSErc7HQFrepN4IoK-wQ.crl (hash: ILqcU0xhtPkhcsvf/3/J+1ULYWaJTdNXAlkeDROOU0Q=)
2: doEo4Ht0sa1vtVeAkjpvUpCnHHs.roa (hash: +MKv/V0IfbD2z8rIVhSAM4id+TCFCy9eVNZqs6dovHs=)
3: t9q3JQRIfHPbUTHA-7F2iigGH4c.roa (hash: s2L1muHfCT4EhX7O1DIS6+l6imOYfyQC+qFGEKmez7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:5c:8b:e2:78:5c:21:a0:b4:9a:b6:f6:a4:80:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617252ebbb33484adcec7405adea4de08a0afb04
Validity
Not Before: Jun 14 06:00:22 2025 GMT
Not After : Jun 15 06:00:22 2025 GMT
Subject: CN=401147d9421290f160352eee0efb9a3789caadd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:78:7c:dc:e4:32:75:e3:bf:7c:43:a9:89:78:
76:2f:fc:c2:46:82:a7:73:4b:5f:94:fc:38:4f:65:
ac:25:59:72:dd:fd:59:64:11:b5:77:b7:d9:4d:28:
72:49:14:19:17:6f:38:9f:2a:fb:32:4c:d3:ce:4c:
3e:c5:4c:2d:bc:e2:64:6c:88:d9:05:c9:60:7b:98:
08:ea:5c:8a:d1:05:35:db:43:55:4d:11:84:26:4e:
40:cc:d7:ff:42:83:18:ea:ce:5e:55:5c:eb:8a:fc:
7b:3e:bd:71:01:14:4b:27:09:c8:ab:f4:c1:6d:ee:
30:15:d0:bb:21:75:e8:c5:a1:76:fe:c2:f3:14:f5:
94:a7:dd:9a:7e:85:b3:68:68:55:c3:0b:56:43:16:
0a:3e:d4:a1:0f:8a:1f:36:23:b1:ee:88:a1:df:e5:
0e:c7:6c:c9:3f:73:e9:4a:db:f4:97:34:85:7d:3b:
89:17:0b:07:5a:30:fa:5e:73:13:7b:0d:10:89:ff:
5c:3a:93:5d:d2:62:f4:c4:c3:5a:f8:6d:38:65:c3:
33:f0:6c:04:8f:09:b5:08:1f:27:4f:43:7b:30:a0:
a9:ec:8e:d3:53:36:7e:9f:60:21:40:9d:b8:1d:06:
d6:b2:bc:d8:55:92:93:0b:88:e7:8a:fd:0c:f1:6c:
f9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:11:47:D9:42:12:90:F1:60:35:2E:EE:0E:FB:9A:37:89:CA:AD:D6
X509v3 Authority Key Identifier:
keyid:61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b1:f0:8b:c9:37:fe:95:a9:da:e7:55:4e:0a:60:dd:47:ce:
11:00:66:0b:d4:73:9f:77:73:0b:fc:e1:27:44:2c:13:07:5f:
cb:2f:d0:e0:17:da:6a:7e:51:5b:9e:87:0e:b0:52:1f:9c:dd:
43:9b:62:9a:68:d0:19:c6:52:a2:6f:7f:f9:b2:25:30:4d:27:
de:cc:e7:af:47:18:d4:dc:a4:bd:3a:5d:fd:bd:dd:dc:e2:3c:
df:3d:76:16:63:e4:d4:24:11:5f:44:5f:3e:42:fe:68:54:21:
99:ff:d2:42:5e:ad:14:33:e6:81:31:55:6e:d3:40:70:ee:aa:
47:8e:54:27:1a:92:23:ed:19:5b:be:1e:70:56:de:20:ec:c9:
20:bb:8a:be:38:a6:4e:53:b6:3f:4d:a8:52:29:f5:6d:b9:ed:
d6:36:31:c4:5c:9c:bb:87:88:72:08:53:46:3b:eb:89:b8:0a:
25:74:03:a1:ed:53:bf:58:1d:8e:92:81:3d:e0:88:b6:69:cf:
6d:a1:bf:59:76:fe:53:9b:96:ea:96:73:67:e4:fd:ce:74:10:
92:79:be:64:43:af:2b:4d:3a:7b:81:13:e3:0b:21:bc:20:0b:
0b:c9:8e:1c:6f:d5:3e:76:0d:e2:60:23:b8:8d:89:89:5c:86:
7a:e2:fb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:11:46 2025 by rpki-client