
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
File: Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft (raw, json)
Hash identifier: VV/NJhx660icJpY59lU0JZuktPNQSppoFbw7Pi1z0Ls=
Subject key identifier: E1:00:C5:AE:C3:82:C5:D8:F9:6D:05:33:35:E7:A1:57:FA:A9:11:A0
Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
Certificate issuer: /CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Certificate serial: 01976D3DF01B34216B0B0D0C1CE43246FBF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
Manifest number: 1597
Signing time: Sat 14 Jun 2025 07:01:04 +0000
Manifest this update: Sat 14 Jun 2025 07:01:04 +0000
Manifest next update: Sun 15 Jun 2025 07:01:04 +0000
Files and hashes: 1: XVpCVjKP_Ci3PBb-SDD9rEF23jc.roa (hash: fb/E1ZjjaeELkfBCLdUXpvrP74l6BqHMfdZ9UTlkuWc=)
2: Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl (hash: VGtFe22mMCPdN+SZ+x7PYRyAnNSPiHEqNKzxGWWHdfg=)
3: Ygr-d1fsjv6D-0-qsUYAE5I_CT4.roa (hash: jcx2vm/E34fLSi/zBhEY8LVOd5D4GVaLPMNLqe0cuM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:f0:1b:34:21:6b:0b:0d:0c:1c:e4:32:46:fb:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Validity
Not Before: Jun 14 07:01:04 2025 GMT
Not After : Jun 15 07:01:04 2025 GMT
Subject: CN=e100c5aec382c5d8f96d053335e7a157faa911a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6b:28:f9:28:ca:25:79:37:84:88:b1:90:9b:
73:41:ec:93:9b:a5:05:8c:1d:2f:6b:f2:2a:7f:cf:
fd:b3:e1:0d:7b:54:0b:5d:04:9b:b8:01:9f:e8:3c:
5a:47:1c:da:36:1a:29:ff:f8:7b:14:fa:59:29:32:
fb:3e:d4:8d:6f:61:9d:0f:f1:7f:62:02:79:b8:61:
5f:94:89:13:43:40:4c:c9:6b:bb:28:0e:ae:b1:30:
0a:ef:b8:ec:1a:cb:77:01:fc:f1:b4:de:9d:11:b7:
8c:b3:2e:2e:2f:87:0e:b2:32:26:e1:90:97:b3:3e:
13:4f:a1:10:83:5d:17:fc:90:67:48:5d:f5:47:7e:
73:d5:88:57:2b:9e:6e:dc:2b:95:64:37:b2:c4:97:
cb:0c:b6:98:3c:9e:87:44:6f:69:b6:e2:0f:44:1c:
f4:da:68:30:2c:e2:e5:93:d8:83:9b:72:95:65:f2:
81:86:bd:2e:c9:37:7b:80:7a:c2:70:10:2a:13:27:
ac:23:ff:80:68:a0:15:91:75:2a:13:b6:19:84:d7:
56:c1:31:7c:71:e6:34:6e:bf:6d:62:f0:5a:4c:71:
51:56:da:5f:e9:41:f3:74:ef:0d:07:b1:c3:b8:6a:
9e:f9:df:18:0e:b5:ad:67:7d:15:cd:5e:82:b7:15:
a7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:00:C5:AE:C3:82:C5:D8:F9:6D:05:33:35:E7:A1:57:FA:A9:11:A0
X509v3 Authority Key Identifier:
keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:83:73:3c:20:67:32:cc:fc:0a:50:07:08:6c:35:19:58:0c:
f1:ae:25:f4:b3:85:2c:60:ef:61:02:8c:b7:ec:19:2c:5f:cb:
d1:91:05:58:52:d7:dd:47:19:47:2b:05:9f:ef:ed:8b:c0:b2:
9c:ee:31:57:a8:e7:55:b1:31:ac:ac:90:e7:08:c3:77:35:99:
80:47:e5:8c:27:f5:36:7d:3d:69:d2:45:ad:b3:14:43:43:94:
58:54:36:ba:f4:3e:8a:d8:32:69:8e:76:ee:7e:8b:ef:a7:67:
72:03:b2:a9:47:e6:ea:42:05:39:26:57:d6:e4:e5:6f:70:ea:
a3:18:9c:ec:62:8c:f7:7c:bf:52:81:7b:b0:e7:51:ef:5b:50:
58:b6:fd:84:80:52:5f:5c:4c:05:e9:94:a8:91:b5:e3:64:73:
37:11:e6:9f:73:21:e8:5b:fc:88:d0:13:03:5f:05:ce:0d:1e:
ca:55:77:84:29:9e:83:ee:e1:4a:c0:3c:1f:2f:77:c0:44:f8:
9e:4b:7b:4f:bd:17:60:74:2a:1c:81:f1:e4:11:33:7e:80:6e:
5b:19:cf:dd:1d:41:9e:38:32:f9:50:0a:f9:32:5f:2a:b3:6e:
b9:d6:80:0d:5f:a9:fa:d5:a7:51:77:a6:e9:b7:83:0f:32:10:
24:33:bc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:17:38 2025 by rpki-client