Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
File: YUyVhYifmODHf5ts2ANhqgK91o4.mft (raw, json)
Hash identifier: BWKLwsmfGxdaprtKzfrzp4bJugvmWeEPoZHBeNx5/1o=
Subject key identifier: F4:B1:8E:EA:5E:8D:39:EF:E6:BD:AE:A7:36:CE:03:64:A6:C7:DE:84
Authority key identifier: 61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E
Certificate issuer: /CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e
Certificate serial: 0197B93410520AE0552908056EF785E94708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
Manifest number: 15BC
Signing time: Sun 29 Jun 2025 01:01:26 +0000
Manifest this update: Sun 29 Jun 2025 01:01:26 +0000
Manifest next update: Mon 30 Jun 2025 01:01:26 +0000
Files and hashes: 1: 1hMpXEk-3MWaN_1A5D8V9EPMUFk.roa (hash: CWNT05GFaywUZSs5xqqgNA+kl89pNKE3DHnIiDI2iJE=)
2: YUyVhYifmODHf5ts2ANhqgK91o4.crl (hash: e+c7HwQBZkseXGeVkVymj/LoY3pnhHJkxOJ/HcEOmGk=)
3: rWHh4mQ0uaKggoKTpG34xhoULNA.roa (hash: E9+8lA/ClMI1O0rcr+QMuqVLJyMAlgl6OS/N6XXdTOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:34:10:52:0a:e0:55:29:08:05:6e:f7:85:e9:47:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e
Validity
Not Before: Jun 29 01:01:26 2025 GMT
Not After : Jun 30 01:01:26 2025 GMT
Subject: CN=f4b18eea5e8d39efe6bdaea736ce0364a6c7de84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8e:a7:19:37:2e:dd:ce:39:6d:62:eb:3a:3c:
63:78:e0:9c:f4:05:31:2b:75:fa:a3:a5:c9:45:23:
8a:f4:5e:f0:0a:ad:d1:a6:9d:95:94:e6:51:53:dc:
be:13:5d:a5:89:78:de:8c:33:10:54:7c:1e:7c:b1:
70:d2:8d:ac:4e:ba:76:41:3a:18:7e:39:f3:7e:86:
14:52:62:4b:a4:f5:6e:fb:50:d7:0c:b6:36:48:ca:
e8:d1:41:c1:db:17:82:6c:10:e0:33:6e:bc:5a:78:
ab:45:27:1c:43:da:34:fd:cc:36:75:e7:b8:a9:30:
e3:41:70:15:f4:34:02:e4:e3:ea:e7:c2:86:c9:b5:
f2:04:8e:18:52:84:d3:43:a5:5d:ba:05:67:47:56:
30:7b:02:2b:87:34:f4:93:7a:24:85:39:c8:88:c4:
72:a4:f6:2d:36:1f:b7:45:a5:1c:11:71:24:bf:dc:
be:df:a7:3f:05:ae:8a:f1:b0:01:95:59:f7:92:40:
13:08:e7:cf:fa:54:fb:88:e2:f5:04:6d:23:06:a5:
3d:03:60:b2:3f:3f:d3:84:db:fc:be:9e:f0:86:a7:
5a:54:3c:df:27:18:6a:b4:4a:05:7d:bd:40:0e:8c:
dd:f9:e2:98:88:6e:14:93:f8:f7:08:00:5d:3e:1f:
21:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B1:8E:EA:5E:8D:39:EF:E6:BD:AE:A7:36:CE:03:64:A6:C7:DE:84
X509v3 Authority Key Identifier:
keyid:61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:78:93:d3:3f:82:20:7d:27:f1:7c:9e:1c:16:58:43:67:8d:
85:d2:1b:a3:c4:bd:57:47:88:3f:e7:ed:a1:07:09:33:07:c1:
09:0f:a3:a3:0d:35:f1:37:76:e3:ff:2b:89:64:f7:ef:d4:36:
ce:a8:e5:e7:a3:de:9e:87:8d:18:8e:3e:09:e1:ac:d0:50:03:
fc:fd:04:2d:72:f2:d9:f0:03:df:4d:cb:ff:37:65:cd:47:ac:
5e:b2:36:34:1c:ec:34:06:09:94:d6:51:5f:0e:0b:1f:6f:a6:
33:35:17:c4:64:e8:9b:ea:cd:f1:25:fd:68:ac:5c:59:ba:71:
1b:7f:4e:4d:f9:71:3b:cb:8a:fc:0e:24:2b:93:b2:94:8a:68:
47:fd:85:c1:d5:3b:05:98:51:df:af:f8:94:cc:ad:35:0b:a0:
15:5e:70:99:9a:35:dd:44:9e:b0:26:f4:a6:d2:0a:bc:f6:64:
7b:a7:e6:1b:c3:84:b6:17:14:00:b8:5a:96:bd:40:8f:46:14:
50:fc:13:0a:1e:ec:5d:c4:92:40:b8:0b:b2:1a:28:c0:e8:5b:
67:7b:4a:9d:85:ec:f6:6a:c9:86:2b:2e:fe:a8:7c:0f:f2:89:
2a:7f:f9:7a:eb:60:46:18:58:0a:65:27:63:f1:83:6d:72:49:
a6:8e:ba:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:16:40 2025 by rpki-client