Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
File: ysIWQb28-sJMVLakhZSDxeQWQLY.mft (raw, json)
Hash identifier: m2zRvyI6VNHZ7otQqryxIX1dwLa0JKWepiXFeLnoJqA=
Subject key identifier: 44:92:3B:91:67:96:8B:77:B0:73:33:62:75:32:59:89:6D:8F:F8:39
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Certificate issuer: /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial: 019768F29DFFCBC6A1AF28938C219951A609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
Manifest number: 1591
Signing time: Fri 13 Jun 2025 11:00:19 +0000
Manifest this update: Fri 13 Jun 2025 11:00:19 +0000
Manifest next update: Sat 14 Jun 2025 11:00:19 +0000
Files and hashes: 1: 2Oc3FqLDZOIsZ3-ChpBNgzAI1qA.roa (hash: ngieeqkZH2PetACTisY+FlZAWILVipXJYp8vJQiZ9t4=)
2: 8h-VrH2OLGuzooixz2EHGOzGj7c.roa (hash: j9xYGg1A7OFK4mnjxkQLlnHkLT4I6Te+j3atszApNdQ=)
3: x3vXcqd4rOe3aN_H50pQssbociA.roa (hash: KHAoiYRVl8v/BdqhdcKxO0EIBKUpuD3RXPz3naD0K1c=)
4: ysIWQb28-sJMVLakhZSDxeQWQLY.crl (hash: +hPJS+uPGHlAttzIR45ouFpDFv01TAipSl0WhSLy5TE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:9d:ff:cb:c6:a1:af:28:93:8c:21:99:51:a6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Validity
Not Before: Jun 13 11:00:19 2025 GMT
Not After : Jun 14 11:00:19 2025 GMT
Subject: CN=44923b9167968b77b0733362753259896d8ff839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:58:23:9d:6c:57:4a:f5:cd:71:ce:cf:b9:7f:
6a:51:42:b4:39:bb:23:80:fc:58:af:92:ef:64:85:
4b:b4:d7:8c:08:74:6a:07:fc:5f:53:58:5c:6a:ee:
92:49:a0:fd:06:5c:ac:af:8e:dd:85:71:ae:e0:c1:
f1:f1:31:76:99:9b:a0:e4:bf:df:57:4c:46:93:09:
15:88:02:0c:e9:90:12:0b:f8:7b:01:4c:cc:a8:6a:
49:5a:a7:70:00:f3:51:b9:4c:8d:40:5f:b0:d5:46:
78:40:67:a2:20:b3:92:6d:16:83:35:da:04:8a:15:
84:c4:c7:f3:be:f7:3e:ce:a6:8c:8a:4b:39:c4:d7:
83:8d:fb:b5:15:e7:32:ba:97:00:a2:eb:2f:0f:0c:
54:6f:9a:da:e4:b9:f0:2e:82:bb:5c:a5:e8:46:80:
74:41:cc:75:82:3d:a3:f2:be:cb:55:d0:6d:21:d9:
9b:2b:4f:d0:2a:49:1b:48:a1:43:37:bd:67:13:da:
d7:4e:99:ed:e6:73:78:19:8f:46:c6:a0:1c:ae:af:
92:e1:1b:1d:93:f5:03:e8:ed:ef:ea:2f:ad:3c:58:
ff:94:99:1b:af:75:bb:48:41:08:6b:b1:7f:a5:96:
1d:36:a6:70:1d:aa:06:64:be:ab:22:8f:89:b8:17:
72:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:92:3B:91:67:96:8B:77:B0:73:33:62:75:32:59:89:6D:8F:F8:39
X509v3 Authority Key Identifier:
keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ee:94:a1:ea:59:fa:b5:7c:b8:b2:2d:df:3d:35:d8:14:f2:
07:ff:8a:b0:86:cc:3e:b2:c2:00:95:59:65:2b:79:69:44:ee:
3a:57:5d:d8:a4:aa:85:72:31:2a:1f:d3:e5:84:d0:c9:a4:db:
34:1a:62:a0:8a:3a:20:3e:5c:27:47:6a:f3:d2:f7:7c:64:c8:
b9:44:47:90:0f:0b:f6:d7:c8:86:8a:1a:7f:38:bc:9b:ea:19:
94:e1:da:94:19:67:69:60:0e:86:a6:5d:38:9a:ab:6a:e9:d8:
78:de:22:c3:38:d1:68:9c:be:72:f5:96:4d:7e:23:bd:2b:ca:
34:b4:e8:03:66:a5:fa:8c:1e:e3:1c:73:c2:d0:44:68:db:cc:
77:c3:05:f1:79:f1:23:e5:d0:86:fb:6a:b1:b8:22:af:5b:22:
b6:e4:73:6d:99:b6:ae:91:4e:6d:bf:4e:dc:3f:1c:fd:05:54:
95:41:0d:38:7c:a1:e9:0c:6d:76:12:9a:93:95:82:98:01:38:
57:47:bd:f3:9e:72:9f:14:28:a2:27:0f:2f:0e:1c:bb:22:f8:
f3:9d:22:d7:17:98:06:19:03:87:f1:81:d1:e4:05:55:54:48:
f0:27:f7:be:2b:a9:40:47:e9:0a:04:b4:cc:9b:25:4b:be:bf:
7e:f7:49:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:19:28 2025 by rpki-client