Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
File: yl4-xakGI8y5d4TTzvJCEqMcuvE.mft (raw, json)
Hash identifier: J+PezciQLGzrpi+ymJq9nm1riIUnH9UOfct3neZ3KcY=
Subject key identifier: 3D:BA:7D:14:90:CA:D0:30:6A:7E:35:00:6E:12:47:CB:A4:23:40:D7
Authority key identifier: CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
Certificate issuer: /CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Certificate serial: 019768F2F260ABB438BFE7382C80270A9938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
Manifest number: 158B
Signing time: Fri 13 Jun 2025 11:00:41 +0000
Manifest this update: Fri 13 Jun 2025 11:00:41 +0000
Manifest next update: Sat 14 Jun 2025 11:00:41 +0000
Files and hashes: 1: J9IdjUhrnmdPlVz9AGQjjVXnZY4.roa (hash: /POjVrGUKaeCRXBaJsPW90/VSUb2DNJJX57AghjcdVQ=)
2: WufKLm_VUBSOVUjA2N7mSbnC5yo.roa (hash: ZMQ2JSceB3qiiNWG8Og7oPp2n6BUB8rjHDG+QHM/0fA=)
3: yl4-xakGI8y5d4TTzvJCEqMcuvE.crl (hash: IiwPF2PKYj3heWKNPXIQa10qoss/iAuxLG8mq5ncG+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:f2:60:ab:b4:38:bf:e7:38:2c:80:27:0a:99:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Validity
Not Before: Jun 13 11:00:41 2025 GMT
Not After : Jun 14 11:00:41 2025 GMT
Subject: CN=3dba7d1490cad0306a7e35006e1247cba42340d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:20:36:01:52:f0:6f:0e:fd:06:1b:c6:c7:d2:
43:b4:8c:14:1a:41:2a:77:b9:c7:22:c3:f6:ce:01:
91:3b:00:76:1a:6c:4d:98:70:20:42:e3:84:71:cd:
99:df:ee:3f:75:d0:fc:01:9c:ab:e3:8e:6c:27:7e:
35:30:69:80:3a:fc:d4:b8:b9:49:45:f2:fd:81:05:
55:eb:9c:78:f4:68:ba:55:19:23:48:8e:9a:fb:ad:
80:e8:48:63:6f:3c:39:61:6b:ac:12:dd:ec:d4:2c:
f1:25:30:d3:33:2b:fd:86:5e:c9:fe:5e:ad:48:7e:
41:80:bd:53:c4:c2:55:1e:78:84:64:62:8f:ec:a2:
cc:32:82:51:5a:d3:be:c6:89:03:d3:94:38:d8:f4:
27:d6:27:cd:5f:76:75:d3:53:30:e1:19:f2:5b:53:
03:4f:07:9d:66:a9:5f:a3:71:76:60:3d:f6:cf:a6:
97:d8:36:f2:2b:35:87:ab:9d:cf:b8:83:37:b4:81:
c0:e7:85:19:fe:27:c0:a3:ff:fb:d7:63:fe:1b:b1:
75:19:81:18:46:74:7a:e0:0f:cb:cf:8c:f0:21:45:
01:0e:69:c8:41:e6:14:2b:fb:72:0e:8f:90:c9:6c:
13:94:43:4e:bb:0c:85:7b:51:be:26:e8:d7:41:8d:
87:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BA:7D:14:90:CA:D0:30:6A:7E:35:00:6E:12:47:CB:A4:23:40:D7
X509v3 Authority Key Identifier:
keyid:CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:5e:6e:dc:8a:d0:dd:38:e9:52:72:1a:72:c9:4d:7a:f0:b0:
90:00:67:a0:d8:a5:32:a6:2b:2d:c2:af:1e:65:35:a3:59:49:
52:9a:0b:63:35:de:2b:67:f7:1c:9c:ed:6e:cd:1d:10:84:cb:
68:53:62:59:96:6f:7c:e7:43:32:85:24:78:08:0b:b4:7f:a1:
a4:f2:b7:b4:bf:8d:31:91:f4:2f:ba:5d:57:ed:e3:c6:53:b4:
13:17:ef:93:9b:86:e7:16:87:69:cf:78:47:41:af:09:e0:2b:
c9:5a:e9:c0:de:37:9d:b1:63:b8:7b:fb:51:6b:81:ca:f0:35:
c2:d9:39:f9:8c:1c:5b:f8:39:2e:1a:2f:a4:5b:a5:15:d3:9e:
67:b4:ab:d3:e6:8e:38:1d:f4:52:54:9c:1e:d7:75:2f:9d:d9:
c0:eb:eb:cf:f0:1b:77:47:15:74:3a:76:1c:82:d5:4c:ae:71:
81:4d:10:2c:fc:86:0e:3a:fd:d9:28:d0:5a:8b:e7:ed:60:48:
0b:6e:c7:f0:4b:d1:83:63:33:d1:d2:62:34:87:b0:83:10:20:
ea:ed:5f:58:26:7c:83:79:9f:e7:25:1f:f8:14:ed:bb:53:b7:
7a:57:72:b2:3a:e2:32:53:ad:39:2e:83:b4:2f:67:d2:56:f8:
59:3b:55:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:26:41 2025 by rpki-client