Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
File: yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft (raw, json)
Hash identifier: F+CpVaGrGXGCaLDpcWRf6lqI9lGKawBZSQIDn+rm6Tc=
Subject key identifier: 5A:CB:AC:B5:06:F3:86:3B:7F:10:ED:8C:2E:09:42:CB:D1:5A:DA:F4
Authority key identifier: C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
Certificate issuer: /CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Certificate serial: 019778D3B20A9BED93957CD0ED4DCBB560ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
Manifest number: 1595
Signing time: Mon 16 Jun 2025 13:00:28 +0000
Manifest this update: Mon 16 Jun 2025 13:00:28 +0000
Manifest next update: Tue 17 Jun 2025 13:00:28 +0000
Files and hashes: 1: OiIBQ74SHEVkT-8PoCX8Cy-Yivo.roa (hash: W/4g1y46KUHpbD2tJe93lGZ8b+4RqJt+o9NgZvpLShw=)
2: pPvNW_FjjB8IVvvOxts_XCA2Mls.roa (hash: YljUAeMCIRCHABINDqpaynGVTLqLA/H2A6irIYGG7BY=)
3: yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl (hash: bp5YJsnd6XxwEdhZbA4AOS3y3xfYt33q74zq/yRj11U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d3:b2:0a:9b:ed:93:95:7c:d0:ed:4d:cb:b5:60:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Validity
Not Before: Jun 16 13:00:28 2025 GMT
Not After : Jun 17 13:00:28 2025 GMT
Subject: CN=5acbacb506f3863b7f10ed8c2e0942cbd15adaf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:46:30:7e:14:99:95:dc:34:2a:fa:77:fd:c3:
ed:a4:14:38:c1:a6:09:35:74:0a:da:90:99:65:81:
64:e3:ae:54:7e:de:78:72:82:d4:c2:30:07:9c:65:
49:c7:90:db:83:da:b6:b2:a0:ba:01:b3:af:4f:8a:
98:77:1e:d8:8a:a8:7a:b0:5d:8f:8c:c3:10:7c:ca:
89:06:d4:d7:6e:01:83:0b:81:cb:4a:11:58:ca:d3:
a4:f5:e0:ad:2d:59:1d:cd:b1:32:1b:91:47:60:bc:
c1:50:58:34:99:fe:f3:d2:f2:2f:f0:79:53:db:d7:
40:b0:64:92:74:20:8e:f0:55:82:f2:2e:0f:91:39:
63:f9:77:fb:50:55:17:8c:9b:ec:d5:5e:6c:f9:be:
23:d2:15:be:ed:38:86:35:e2:cc:0b:08:3c:fe:e3:
9c:6a:91:f1:34:39:c1:96:c1:09:46:05:ab:3f:56:
56:dd:d9:f8:24:66:29:23:e3:49:8a:0a:6d:44:ed:
21:3f:f6:88:ad:5e:d5:ad:77:45:19:2d:a2:bb:17:
72:d6:e8:99:3d:51:83:46:35:90:7c:47:b3:15:71:
0a:1f:2b:26:ac:17:9f:d6:15:b3:3f:de:8c:6a:2f:
7b:06:dc:15:fe:cd:6a:2e:aa:82:a8:f2:5c:4e:f3:
81:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CB:AC:B5:06:F3:86:3B:7F:10:ED:8C:2E:09:42:CB:D1:5A:DA:F4
X509v3 Authority Key Identifier:
keyid:C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:24:ed:69:b1:44:60:6d:9f:84:d1:72:2d:e2:e2:f9:8b:cc:
db:72:8d:3b:e9:42:28:78:c3:04:6d:f9:5c:de:f9:08:91:bc:
01:b4:f2:d1:58:24:82:00:d8:54:ba:c2:cf:11:ee:8c:4e:11:
6b:0d:9f:e5:bc:bc:d1:f8:bc:b9:0f:4e:52:6d:e5:d9:77:e4:
46:db:ca:7a:1d:7a:9d:09:02:e7:c6:49:0a:77:6a:86:a5:77:
4c:e0:3b:f1:43:78:0a:35:8c:3e:67:a1:97:26:e7:5b:0e:c5:
99:06:be:2e:18:f0:5d:4c:1c:d3:80:fc:5f:05:4e:41:0f:4e:
ca:d9:46:ff:a4:e2:62:7c:f5:c0:ac:90:c6:9d:96:d2:d2:90:
c0:06:cb:fe:5a:17:77:e1:1c:a3:61:c5:24:39:f8:10:79:19:
ca:bb:95:c9:45:7a:8b:44:18:e5:9d:71:29:e5:c7:2d:df:18:
4b:f3:f5:13:f0:c2:56:97:4d:81:f1:c7:68:07:fb:0d:54:06:
e2:bc:2e:8e:34:d7:33:5b:d9:bb:1b:51:70:41:1a:9d:d0:c1:
90:31:ac:40:b5:f9:8a:09:a8:49:4c:2d:83:1d:79:35:37:85:
70:ec:77:82:5e:d6:a7:fd:96:8d:44:21:42:7a:13:7d:25:c3:
0b:f3:41:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:31:28 2025 by rpki-client