Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
File: yErFLitXLMKpmnQSV-VpqjceNWg.mft (raw, json)
Hash identifier: L8u1iFrOY+uSlwgRyo+020Qiaoih5iSDIxxt3o7JCxw=
Subject key identifier: 8F:BB:04:79:ED:65:8D:B0:87:7D:3F:BE:A4:27:9E:DC:52:17:8E:C7
Authority key identifier: C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
Certificate issuer: /CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Certificate serial: 01976DAB24D10687EA3C539920C213B0A35E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
Manifest number: 0E18
Signing time: Sat 14 Jun 2025 09:00:21 +0000
Manifest this update: Sat 14 Jun 2025 09:00:21 +0000
Manifest next update: Sun 15 Jun 2025 09:00:21 +0000
Files and hashes: 1: Ki24jPZgJrCPTdr-EzJOC_g3W_g.roa (hash: n4ZbZmzZFlutTnq+BcgW8yw5bghHlIwLiglxRYnEDAw=)
2: yErFLitXLMKpmnQSV-VpqjceNWg.crl (hash: 3vXy3zU5ewfTH2n6rflegWT0Wxp18icsnlY3Bzk4KCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:24:d1:06:87:ea:3c:53:99:20:c2:13:b0:a3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Validity
Not Before: Jun 14 09:00:21 2025 GMT
Not After : Jun 15 09:00:21 2025 GMT
Subject: CN=8fbb0479ed658db0877d3fbea4279edc52178ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:52:8a:6c:95:0c:a1:89:a8:66:b3:bf:7c:d6:
91:1c:00:36:ad:59:2d:f1:d7:e6:40:70:c6:d6:09:
f2:63:01:ea:9d:ec:5c:41:0d:39:59:36:fc:f9:77:
aa:9b:23:af:73:90:a6:2d:5d:73:96:5b:30:7e:68:
d0:df:62:f4:6a:49:bd:ea:10:12:38:10:f1:fd:7e:
1c:f4:d5:6d:9f:e3:5c:3e:da:9b:db:b2:b5:a4:03:
96:7c:47:4d:b0:f5:b1:d4:8b:6b:d5:b5:4f:11:c4:
b8:cb:1e:5b:37:fa:d0:5d:36:b8:f7:90:e9:fb:8e:
e5:03:ef:a3:5e:4d:ad:9e:77:6f:6c:72:50:d2:1c:
43:d4:31:81:82:1c:d6:7b:05:08:a9:e8:09:92:fa:
ff:3b:58:fc:19:85:93:9c:3d:d4:e9:0e:91:2d:3a:
c6:14:a7:e3:60:a3:3c:5d:6c:63:0f:83:6b:29:1e:
1e:98:27:a6:87:11:e1:7a:a7:f3:bc:27:a1:97:3c:
39:7b:e3:2c:3d:92:c2:a8:29:71:04:01:95:37:bb:
de:16:73:4c:f2:7a:97:d5:49:b7:5a:b5:ab:78:b7:
c3:55:a1:67:06:ce:5e:27:72:38:3c:13:05:83:2c:
45:9e:65:bd:17:76:0e:92:93:d4:9b:21:da:a6:7e:
e9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BB:04:79:ED:65:8D:B0:87:7D:3F:BE:A4:27:9E:DC:52:17:8E:C7
X509v3 Authority Key Identifier:
keyid:C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:00:a3:ba:77:79:30:b2:6b:e3:d9:2e:fd:07:04:87:3f:ca:
43:cb:f2:8e:dd:26:42:01:98:63:39:c9:58:49:ac:e6:66:fe:
6d:64:6b:c4:2e:c5:dc:26:76:ea:af:97:68:3d:84:3c:42:f4:
d2:50:be:40:b2:4f:0d:5e:da:e7:f0:63:68:fd:05:f1:c0:3f:
75:67:13:91:6a:3c:97:16:ec:81:51:bf:5a:fc:1f:8f:9a:b2:
63:87:f5:ea:6b:f8:52:23:18:cb:b9:0a:70:a3:3c:96:2b:e7:
60:90:5e:04:d9:f1:e1:76:98:a6:93:24:7c:ba:63:b3:19:0e:
cf:62:3c:78:a6:66:f2:87:68:46:b8:5b:c9:75:c1:26:0e:90:
a6:57:f8:ca:2a:0e:d7:bb:80:be:9f:3e:f3:f3:39:a5:b3:86:
14:b6:f8:b7:4f:98:79:56:fd:ed:6f:26:58:81:6e:af:e1:53:
2a:90:30:33:dc:9d:a2:68:a1:c4:df:ab:5f:a9:dd:04:22:f8:
d0:17:fe:74:07:88:0f:88:4a:7f:e5:f1:8f:07:fe:3e:bd:89:
15:d4:62:a4:a2:e1:e7:f4:e0:05:4f:d5:e4:0c:73:32:81:98:
58:31:19:04:15:82:8f:c1:10:4f:f7:dd:c3:ae:af:50:55:21:
7f:7e:33:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:02:45 2025 by rpki-client