Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
File: YuXsnfTdA7n1AKaglH0Ue27SFmY.mft (raw, json)
Hash identifier: 4ulH5+Y6Pl2MfubeHIdxpMBIzFBCtOJG4TUD6sSIl+o=
Subject key identifier: FE:3D:10:0E:82:1E:A3:C4:0B:B3:04:F9:00:12:CD:EE:A8:E6:84:14
Authority key identifier: 62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
Certificate issuer: /CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Certificate serial: 01976C9881E2E76291E61527431F42CDB460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
Manifest number: 0FF5
Signing time: Sat 14 Jun 2025 04:00:23 +0000
Manifest this update: Sat 14 Jun 2025 04:00:23 +0000
Manifest next update: Sun 15 Jun 2025 04:00:23 +0000
Files and hashes: 1: YuXsnfTdA7n1AKaglH0Ue27SFmY.crl (hash: LJ7MDanVRTxgqZMzo4qoqcoMmC6hMcS7scKd6rfn0NY=)
2: kJgRBYW8FH_KB9BmG0zuAtDHIt4.roa (hash: bRkMoYbDThsAekovmWN3M4u7dfA1wfKmJ7fIKIUCTN4=)
3: v525Sv1tFND5v2x1n4f6uRe4GHA.roa (hash: 9QaN1qqDjE/05U+XFuEbIUEXZMx4HBelPUj6nwrRoso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:81:e2:e7:62:91:e6:15:27:43:1f:42:cd:b4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Validity
Not Before: Jun 14 04:00:23 2025 GMT
Not After : Jun 15 04:00:23 2025 GMT
Subject: CN=fe3d100e821ea3c40bb304f90012cdeea8e68414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:01:f3:5c:b7:1c:7b:7b:41:63:02:a3:e5:ab:
8f:5a:dd:5b:7c:b8:c1:41:4e:48:58:96:db:59:bc:
e3:67:71:fa:61:c2:d4:4c:d6:e2:a6:35:72:f6:2a:
62:ec:de:fa:1a:2e:45:30:2b:20:ed:c8:a3:da:6a:
32:a8:3a:85:ce:85:d6:3e:59:38:98:4f:5b:02:5a:
d7:3c:85:b4:2b:96:59:2d:11:04:55:98:b0:2c:0c:
ae:b9:eb:74:b1:21:39:72:f4:cb:a1:8c:83:2e:c7:
52:a3:07:41:5c:a4:59:6f:73:7c:60:87:bb:e4:95:
35:56:f1:93:ce:da:d6:32:1c:7a:74:49:ef:4c:3d:
92:71:d6:b0:74:4c:7e:f7:6a:66:13:76:3f:8a:81:
a4:0f:97:dd:d3:15:86:c4:ab:7a:96:03:36:b8:df:
c3:d2:41:6d:36:4b:24:51:56:0d:01:72:aa:e2:c5:
6b:f6:37:12:6a:32:cd:32:22:48:1f:e3:7e:af:9f:
9f:66:8d:bd:09:5a:1d:ca:b3:88:34:a9:37:3d:fd:
c3:58:d1:d7:99:80:69:f0:a2:ed:22:13:0e:5d:e2:
3b:6f:5d:e5:17:53:f9:0e:06:20:7b:0d:e0:1b:8e:
73:20:c8:88:6d:5a:77:73:1c:14:3b:7a:0e:8b:97:
ae:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3D:10:0E:82:1E:A3:C4:0B:B3:04:F9:00:12:CD:EE:A8:E6:84:14
X509v3 Authority Key Identifier:
keyid:62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:95:c7:e9:19:ac:85:15:fb:a4:b2:62:63:99:b7:5d:95:09:
66:b3:f5:0c:d2:1e:69:ef:e3:44:2b:5d:99:8d:5e:7d:21:31:
f7:45:0c:d8:d9:1d:06:41:01:ac:20:97:f1:a6:c7:ab:4f:13:
74:b1:a3:ed:1b:52:04:34:80:98:7d:10:df:8d:e8:ef:35:2f:
c9:16:75:7c:82:3d:5a:98:09:17:d2:06:86:12:36:3b:c7:77:
35:b7:9c:a9:6b:55:f6:c6:87:4a:a1:e0:43:41:95:68:ff:c3:
78:78:82:bc:ea:9c:85:fc:ef:05:84:f2:48:e0:38:bb:88:86:
a6:49:15:8e:f8:9c:d9:a7:46:0e:2d:a3:25:d3:ee:a7:34:f2:
cd:37:4d:53:ac:18:6d:c9:26:6c:7b:ca:d6:1a:1c:b0:a4:8b:
de:c1:ac:a1:81:2b:0a:16:46:2a:37:88:c4:43:c4:f6:41:5f:
92:29:84:ec:b5:01:16:e0:68:e6:2a:6c:08:6d:a5:d0:48:93:
09:9f:b7:f0:14:55:6d:d1:e5:3d:c4:56:0d:6c:f8:1e:ca:20:
ca:2e:8a:a2:23:1b:08:71:e7:69:d8:83:c6:3b:d2:62:d9:9e:
69:66:01:c0:bd:84:53:7a:86:e2:f8:41:0c:c0:62:9a:f7:a5:
0d:f1:30:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:28:48 2025 by rpki-client