Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
File: YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft (raw, json)
Hash identifier: DU2lp9K6MIIp+TLHxSzN2KOGA4kmUSPa8DWWbBJV/OA=
Subject key identifier: 0D:56:03:80:E9:25:83:4B:65:D1:AF:99:88:84:20:1A:E1:4E:61:A0
Authority key identifier: 62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
Certificate issuer: /CN=62117a1e6f699c322b6b983494f42c2209127553
Certificate serial: 01974742A6C73FCA974B78CEE8A0304B443D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 22:00:39 +0000
Manifest this update: Fri 06 Jun 2025 22:00:39 +0000
Manifest next update: Sat 07 Jun 2025 22:00:39 +0000
Files and hashes: 1: IwNnMumHuRi32I7ksfRxTLj5SGU.roa (hash: CRwLwpZrZ0WbgGxRhGmhgHh8+Fm0a0d8zmfWAizQF84=)
2: X1s8zvuHJ81hdIgP19R2zatnWy0.roa (hash: zIp2gzAGnioL2V7YTZ/nOIwk4pKLhlEEq3/Z8mzK0KQ=)
3: YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl (hash: Qnqa/cDPPx6Zmc7gs58G5ArxGT60Po2455AjBgu3XFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:a6:c7:3f:ca:97:4b:78:ce:e8:a0:30:4b:44:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62117a1e6f699c322b6b983494f42c2209127553
Validity
Not Before: Jun 6 22:00:39 2025 GMT
Not After : Jun 7 22:00:39 2025 GMT
Subject: CN=0d560380e925834b65d1af998884201ae14e61a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b9:6e:50:50:41:f6:89:31:45:ae:64:71:20:
61:f4:a4:73:92:82:f1:08:7d:08:b4:96:57:66:ee:
6c:a6:80:ff:44:32:e4:34:94:9f:4a:1d:d1:64:91:
5d:0f:a1:41:0d:83:27:67:cd:52:3c:03:f9:f1:14:
ca:d1:1f:86:67:be:52:97:2f:07:d2:7c:75:5d:d6:
00:87:d0:04:58:b7:f0:bf:7a:6e:51:1b:47:25:93:
5c:04:5a:50:59:1c:66:c3:1e:12:f5:0c:51:d8:5f:
ba:6d:38:77:c1:45:6c:d8:a9:97:b7:1c:9b:6c:9f:
eb:56:52:6e:bf:e9:5a:89:f2:83:ed:ca:9d:af:87:
29:e1:d4:38:a9:cb:a5:3c:c5:96:d5:28:bb:f0:60:
9e:6b:0e:db:4d:04:15:52:19:e8:2b:dd:a7:fc:52:
ae:35:d4:7b:9d:ac:98:4a:0a:e2:35:0e:a0:d0:04:
f9:16:c7:74:73:c5:13:c2:d2:a6:58:ea:48:07:2d:
74:d3:bc:e7:c1:94:fa:e7:3c:00:9c:cb:b3:f2:8a:
cb:a9:40:74:52:3c:96:70:72:6f:76:d5:02:b1:d2:
aa:b9:ab:c3:19:f3:21:cc:6b:2c:2a:c8:34:cc:36:
c8:3d:93:96:0a:1d:dc:60:9f:c7:27:46:a3:df:a8:
34:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:56:03:80:E9:25:83:4B:65:D1:AF:99:88:84:20:1A:E1:4E:61:A0
X509v3 Authority Key Identifier:
keyid:62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a9:d6:a0:03:2f:c0:f9:87:f1:99:24:f2:0e:d1:93:35:7e:
52:60:47:e8:27:0e:8b:d1:e1:4b:e2:f9:9e:54:02:8a:7d:ac:
74:80:39:fe:89:64:8a:5e:77:23:1e:57:ef:42:32:72:38:7f:
32:52:ec:77:98:51:cf:a6:84:df:0d:78:a7:27:cf:2e:92:e9:
d6:08:e9:a3:de:41:48:fd:a1:c2:27:56:fc:c9:a7:5f:66:33:
89:00:e0:28:00:8c:1f:a2:8d:c7:95:ba:79:ee:6a:6d:97:7b:
93:9b:a7:10:be:ff:43:95:ff:48:c8:cb:0f:61:19:c0:1f:13:
b7:33:00:fd:14:68:a1:91:e4:f0:91:87:b0:e1:12:9a:18:9e:
86:c1:38:ef:a3:4c:6f:7c:c4:95:49:c8:ae:15:f5:f8:11:21:
bf:9d:88:15:66:89:4a:c4:1c:ee:ed:2c:09:b9:c8:22:16:7b:
a1:41:36:f0:e8:b4:7d:2f:97:45:19:2f:9d:28:19:54:e0:b3:
ee:3b:44:fd:90:fa:ed:ba:eb:fe:4f:5d:48:9d:40:3b:6b:df:
ff:76:af:06:3f:2e:af:e2:18:04:af:35:b4:09:8c:29:d4:da:
d2:27:c6:c7:d9:d4:85:e9:db:93:8f:87:78:98:e3:6b:97:25:
89:5e:2b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:11:42 2025 by rpki-client