Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
File: yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft (raw, json)
Hash identifier: L6CIt7/Ec4SLHRr9q5sMXR+ul0AW4T/X/qA6BrizJ1I=
Subject key identifier: F0:10:DD:7E:4D:DD:94:2D:2B:83:F6:C3:C6:62:3F:A5:07:E3:DA:35
Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
Certificate issuer: /CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Certificate serial: 01976F2BE443395370190C6648C2C7366108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 16:00:36 +0000
Manifest this update: Sat 14 Jun 2025 16:00:36 +0000
Manifest next update: Sun 15 Jun 2025 16:00:36 +0000
Files and hashes: 1: 4nT-1vcQu44Sr-GCt6E0ooWA0hc.roa (hash: 9TU/QChXgdZn/WcufvGJiX+DQZh8m5mR65S2JB7VAL8=)
2: 7t39UO78LeFsKwD7CJstzTknIXs.roa (hash: QthZq6ZVZqJtxtcGdDvDYL6VwA/yafoVzBmUfyLehqw=)
3: yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl (hash: 257VpsaxfCWo1GJfFJclScFGIt0SQjEdVSFf5XPuOHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:e4:43:39:53:70:19:0c:66:48:c2:c7:36:61:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Validity
Not Before: Jun 14 16:00:36 2025 GMT
Not After : Jun 15 16:00:36 2025 GMT
Subject: CN=f010dd7e4ddd942d2b83f6c3c6623fa507e3da35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:04:4e:05:0e:6f:76:11:cc:0c:d4:3e:ec:49:
8e:c0:30:b5:3f:f8:49:ad:8b:2d:1b:b9:fe:27:36:
9e:72:3f:25:7a:eb:48:f5:78:38:42:15:f5:48:d7:
36:4f:3d:ae:ad:90:a5:77:07:22:a5:ab:f1:7f:73:
f2:98:16:46:82:5d:93:fa:3d:76:60:c9:5c:8a:71:
94:82:83:c6:85:ce:df:ac:4c:10:e2:db:c0:36:98:
f5:aa:c4:81:24:93:a1:5c:38:14:59:2a:48:c2:55:
3f:bd:85:74:18:33:eb:ac:84:71:ed:45:d3:70:01:
a5:fa:2c:bb:be:b9:1c:0a:11:fd:40:82:22:13:83:
59:66:6f:a3:50:d3:95:fd:91:7d:66:f4:4a:61:27:
d0:1a:c0:10:41:c4:53:c2:d3:f7:e8:e5:8b:19:9b:
e4:7f:5f:6e:4c:28:a1:a3:52:ac:2f:89:7c:bd:2f:
63:a8:81:10:96:4d:00:3e:d7:b3:97:5b:05:ee:9e:
6c:c8:fa:5e:aa:04:27:68:c1:a1:66:91:f7:3a:22:
ef:75:e8:b2:8e:e6:7f:53:3d:c5:4a:b3:4c:64:c7:
71:92:0b:ac:93:44:45:be:08:fc:78:f2:7c:5f:7e:
ab:87:b0:5a:b9:fe:ed:16:da:d1:58:ba:37:9a:43:
30:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:10:DD:7E:4D:DD:94:2D:2B:83:F6:C3:C6:62:3F:A5:07:E3:DA:35
X509v3 Authority Key Identifier:
keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:fc:ad:34:c5:87:7b:f3:bf:1e:05:87:05:96:7c:da:25:2f:
68:a3:8e:58:1d:90:d6:b5:95:a6:e9:d7:16:0d:2e:c4:f4:62:
89:90:89:74:8d:4d:a0:7b:b8:ec:4b:4e:17:30:f9:27:67:9b:
27:73:c9:b4:59:30:45:8c:2f:a3:68:a3:a9:38:dc:12:24:0c:
f7:68:23:ee:9e:79:5a:86:4c:4e:cd:54:bc:85:68:fd:41:e4:
19:dc:0c:9f:ed:d6:a7:fa:c0:2d:00:36:0d:35:27:f2:e3:e2:
a3:48:f7:b6:99:09:b0:61:5b:c5:05:32:61:fa:51:95:4c:aa:
8e:b9:5c:0e:bb:f1:e1:5d:50:43:dc:95:94:9c:dc:63:f3:15:
79:a8:b9:47:a5:f8:42:1e:71:ac:c4:c1:cc:19:e2:9a:97:c0:
42:bf:d8:3f:bf:c2:22:b0:24:ed:b9:11:1c:38:a4:13:77:aa:
a6:63:0f:7e:48:c6:07:76:49:f1:90:87:b0:be:97:14:79:c1:
06:06:e4:fc:9d:e1:a3:91:72:90:77:80:5f:49:c0:c1:a2:f2:
fc:fb:27:e7:30:2f:62:8e:c5:a5:1d:9e:8d:4a:a7:93:d9:ba:
8f:4d:20:e0:59:13:4d:94:c4:e1:4c:a5:31:57:40:3b:9f:b3:
94:17:fe:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:05:53 2025 by rpki-client