Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
File: YeENrB93PFWiRHUzRnGeiZ9NRDI.mft (raw, json)
Hash identifier: F0pS4WnNoMKLCJ0RIInVFT++rIctCjCfQ9qb5J5FXQo=
Subject key identifier: F8:99:4B:20:D4:66:54:FC:C3:E4:7B:20:8B:78:60:A5:3E:E9:7F:02
Authority key identifier: 61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
Certificate issuer: /CN=61e10dac1f773c55a244753346719e899f4d4432
Certificate serial: 019781D731F1A9AA04A54944A5BE957DC2C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
Manifest number: 1599
Signing time: Wed 18 Jun 2025 07:00:53 +0000
Manifest this update: Wed 18 Jun 2025 07:00:53 +0000
Manifest next update: Thu 19 Jun 2025 07:00:53 +0000
Files and hashes: 1: 2Pb_1CM0MkPudBUY3Q0_pYkoPc0.roa (hash: xADulynKw7d5uIvUb/iOH4gEDrZezt1Odl3vumrVJCo=)
2: YeENrB93PFWiRHUzRnGeiZ9NRDI.crl (hash: rT3KloO/yWtK8faEgpv1YCSyZpyLQ7tN3KvKDK7vEsc=)
3: mWcMZUbVESCreyIMM1F2DvYaJHs.roa (hash: DDyp9xxUdtbm3SG6nGLtJGXjnrbdaA8Ifcbc14VxZ9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:d7:31:f1:a9:aa:04:a5:49:44:a5:be:95:7d:c2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e10dac1f773c55a244753346719e899f4d4432
Validity
Not Before: Jun 18 07:00:53 2025 GMT
Not After : Jun 19 07:00:53 2025 GMT
Subject: CN=f8994b20d46654fcc3e47b208b7860a53ee97f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7b:98:b8:22:d1:80:33:13:f9:02:c1:84:71:
ca:e4:62:71:f5:50:4c:c4:8d:29:60:1f:73:d0:78:
d0:f4:14:0b:bf:6e:c5:61:84:cd:fe:29:8e:65:d4:
ae:ba:01:62:d0:b0:93:b8:e7:10:7b:1c:8a:c0:f5:
6c:6b:1a:65:4d:4e:83:f0:92:29:fc:81:4e:ce:a5:
a0:d8:35:9d:f2:8c:37:31:18:24:17:6a:43:2f:8b:
1a:e3:22:a7:27:31:b8:68:16:db:55:ef:c5:a3:ba:
31:0f:43:f4:bd:b7:69:e8:75:be:67:47:ae:fc:27:
70:59:9f:5a:bc:bb:94:09:21:a0:e9:54:eb:fa:fa:
61:5e:be:79:51:49:6d:b4:22:16:de:c4:42:17:f1:
0f:6b:1d:a6:53:f1:01:cb:54:72:4d:b7:ec:de:52:
f4:90:84:1b:fc:46:64:5e:b1:ce:3f:07:2e:99:7e:
a6:65:2f:91:6d:c1:24:51:40:ff:f8:f8:58:15:4f:
2d:b6:10:80:b5:bb:dc:e3:d4:99:7b:61:27:fa:3e:
c4:b2:a0:5b:31:59:4b:7b:db:f2:46:36:14:a0:e6:
28:23:06:51:ac:1e:3d:40:97:c6:29:19:70:13:e5:
a4:e8:73:9c:1c:0e:0f:e6:2d:ef:55:ff:e4:c4:3a:
0c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:99:4B:20:D4:66:54:FC:C3:E4:7B:20:8B:78:60:A5:3E:E9:7F:02
X509v3 Authority Key Identifier:
keyid:61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f2:6b:4e:e3:c7:c1:09:4f:0a:4e:6d:4f:e3:8a:de:a8:48:
cc:4c:c9:48:73:20:25:7f:61:55:f4:53:93:2e:d2:ed:13:de:
a3:c0:f3:72:a4:fd:44:33:8a:67:f2:44:e3:9e:cc:4c:94:e4:
91:d1:8f:db:ae:e4:4a:39:18:fb:f1:03:53:60:81:89:e2:41:
e5:4b:b6:52:5b:d3:ee:84:f6:0c:d1:02:18:af:90:f1:2d:e8:
e8:b8:e6:75:bf:29:ca:de:2c:d5:09:cf:63:26:2e:f1:da:8a:
5b:2b:af:15:d3:55:75:17:56:04:9a:63:2a:90:80:7d:c8:8d:
19:83:22:88:f7:99:86:48:df:9a:aa:03:1c:5c:26:76:00:31:
38:29:5e:7f:67:ac:b8:65:ae:81:2d:90:aa:f5:c6:fc:b4:06:
f1:f3:74:9c:4a:df:39:c0:5b:27:79:f6:84:41:34:81:23:c7:
e0:15:0e:f1:ef:c9:f0:80:f6:51:07:bd:de:e0:20:90:af:a0:
ce:4e:4c:a2:96:fa:b3:57:2d:00:1f:f6:51:2d:d1:72:49:c7:
97:6e:d4:1a:79:90:b9:34:2c:a0:ad:12:c3:09:df:08:6b:86:
59:ad:ac:18:2d:70:9a:c6:f5:bd:0c:8c:a6:b6:0c:f8:8f:20:
f4:12:ef:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 13:18:36 2025 by rpki-client