Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
File: YU9WZQWavHvjR17553qXl7cW_Ic.mft (raw, json)
Hash identifier: KYR9dJP6z+8hTtm/gUqKMvCB0l+733LdV9pCu6cwceY=
Subject key identifier: 94:C5:AC:88:AC:FF:4B:69:E3:BD:CE:54:DB:3F:33:AC:EA:05:A6:BE
Authority key identifier: 61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87
Certificate issuer: /CN=614f5665059abc7be3475ef9e77a9797b716fc87
Certificate serial: 0197B63304B9CD39A5E54AAFF68CC7AA5804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
Manifest number: 119F
Signing time: Sat 28 Jun 2025 11:01:26 +0000
Manifest this update: Sat 28 Jun 2025 11:01:26 +0000
Manifest next update: Sun 29 Jun 2025 11:01:26 +0000
Files and hashes: 1: TBiZ_CyXMsOJcf6YES-qeNnA7K4.roa (hash: QMLp06BguaI0fqG8Q739POQiUPSQCHhnkaMoIvb33Vg=)
2: YU9WZQWavHvjR17553qXl7cW_Ic.crl (hash: hu6bgPRii9y93bR7oqaiix1CWJV7EEh6/MIBu5pdbMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:33:04:b9:cd:39:a5:e5:4a:af:f6:8c:c7:aa:58:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614f5665059abc7be3475ef9e77a9797b716fc87
Validity
Not Before: Jun 28 11:01:26 2025 GMT
Not After : Jun 29 11:01:26 2025 GMT
Subject: CN=94c5ac88acff4b69e3bdce54db3f33acea05a6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:77:99:51:2b:eb:62:9e:39:56:a3:ce:68:
cb:37:d2:fb:97:c0:4d:35:6f:c9:e8:d5:54:38:47:
e6:62:cc:aa:93:96:c1:15:ba:d0:e9:3d:12:34:c7:
6e:c5:73:8d:f6:80:55:f9:db:92:35:55:47:38:2b:
55:c0:b7:cf:75:c2:0a:4f:cf:35:31:ec:9b:71:aa:
59:68:02:7d:b1:8a:f0:c6:1d:8f:6d:10:01:57:f6:
c7:a7:17:9e:c4:1a:42:d3:d3:72:5d:d7:04:cd:46:
fb:63:b2:36:bf:23:00:a4:53:08:95:88:98:8f:30:
f9:5b:09:8b:45:75:be:10:11:f5:1b:cc:52:cb:9d:
6a:42:16:40:a0:98:bd:0e:9e:f8:61:3c:0a:62:43:
22:77:d1:4c:d6:ef:75:b4:34:c2:23:42:78:4e:ff:
91:63:3f:3c:9a:65:69:c6:a6:94:40:06:0e:a6:77:
4f:85:09:97:d7:59:bf:dd:9f:1d:3d:d7:c9:1f:cc:
04:43:27:3e:6e:ab:2d:2a:0f:7b:5d:fb:aa:b2:fe:
81:0b:a6:69:8b:08:8c:2d:c7:17:73:a1:9f:5a:c4:
53:e8:0a:5b:05:c7:a9:01:4d:09:a9:b0:2f:f8:a0:
f4:6f:00:e1:cd:f0:b6:1c:00:c2:45:d4:78:a3:9b:
0c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C5:AC:88:AC:FF:4B:69:E3:BD:CE:54:DB:3F:33:AC:EA:05:A6:BE
X509v3 Authority Key Identifier:
keyid:61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:05:46:e0:ff:bf:3b:b6:39:e0:f7:5f:a8:fd:d4:5a:fb:91:
cd:03:33:28:42:ca:a3:4a:44:14:67:5c:5c:6d:f5:70:b5:95:
61:de:2e:be:21:c7:a7:0e:f2:58:85:59:cd:53:28:53:cc:56:
86:1a:a0:d9:90:93:61:27:3e:a4:bf:33:a2:46:24:32:d6:ce:
c1:6f:9e:14:a4:5d:78:e2:24:f4:fa:fc:94:f2:33:a6:1e:cb:
3a:71:da:4e:83:49:cd:9c:eb:96:cb:95:19:d9:a4:fd:ce:83:
e4:d4:84:cf:19:c8:f3:d2:06:10:68:18:6b:ff:f1:31:1d:64:
da:a1:1b:77:0f:cb:4b:02:1f:57:ed:de:50:c1:f6:52:37:a3:
e2:36:bf:c6:af:52:2e:8f:26:77:2f:af:89:6e:8d:cc:0d:f2:
5d:1c:00:8d:0b:16:8e:90:a6:f6:74:b6:34:5b:aa:b5:b9:4e:
78:9e:9e:9f:f4:c8:65:3e:4b:1f:a3:69:56:46:46:6f:a4:db:
47:fa:90:6f:21:6f:5b:11:e7:3b:f4:66:7d:41:d7:c5:32:df:
5d:5e:7a:41:91:d2:82:51:e5:94:8c:00:74:22:46:05:60:82:
fc:ce:a9:b8:4f:45:cd:f5:bd:7f:1c:c1:b8:45:63:6b:6a:9b:
df:ff:a1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:11 2025 by rpki-client