Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
File: YLlhXfjGWdrIzAh70BHUtf83Pio.mft (raw, json)
Hash identifier: AVUv0HFzoXOx55kYdh0Ksr7iZn2Wgk9xxz7AzZbGJaQ=
Subject key identifier: C3:8B:0E:9D:05:78:CC:D1:85:12:CD:45:1E:74:03:9B:F4:A4:62:17
Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
Certificate issuer: /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Certificate serial: 0197488D34C66381788D71F91BCC3B5C0700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 04:01:43 +0000
Manifest this update: Sat 07 Jun 2025 04:01:43 +0000
Manifest next update: Sun 08 Jun 2025 04:01:43 +0000
Files and hashes: 1: X_PEzQ4h2-EZtXwGF1yRsO_RZBY.roa (hash: slaceRsemZrT4J4p4MYMe/YtYOfBM+8j+DQ+MF7JOoM=)
2: YLlhXfjGWdrIzAh70BHUtf83Pio.crl (hash: S3/Xuu9EC2ooqFiJ7lfl/TC/PkeH2cr88B6hQfCNQOk=)
3: uJcwClz6uJRHIAqaB4c6iwo2p2k.roa (hash: YfPxGf556xtNVvXkpS2EQtFKQegwkF+I1h92ZELHuRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:34:c6:63:81:78:8d:71:f9:1b:cc:3b:5c:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Validity
Not Before: Jun 7 04:01:43 2025 GMT
Not After : Jun 8 04:01:43 2025 GMT
Subject: CN=c38b0e9d0578ccd18512cd451e74039bf4a46217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3c:1a:05:a9:5f:7b:08:1c:d4:5a:a3:93:0a:
b8:da:7d:fb:7b:bc:ca:96:2e:30:c0:c0:d9:54:0a:
ea:f1:56:a8:f3:28:df:dd:5d:7e:50:91:d9:d2:0e:
8f:e7:b9:29:d4:74:af:a4:3b:19:b0:ec:78:83:71:
56:22:d4:08:f2:76:db:a4:6a:4d:86:c4:4c:cf:71:
97:7e:82:e4:02:31:0f:27:c1:a1:96:8d:f6:7f:78:
45:b5:9f:e4:8a:a5:3c:2c:30:9a:ba:77:34:f5:5a:
19:eb:89:8c:f8:e2:29:a4:86:f3:6f:dc:e2:4b:1f:
31:d9:be:37:ae:d7:8c:96:d4:ae:4f:c6:fa:da:97:
1b:31:7b:31:b6:4e:34:cd:39:bb:16:92:95:8f:8d:
b7:7a:71:5e:d2:8f:a8:18:c6:bb:16:f6:d4:1b:f6:
96:72:86:2d:32:a8:ee:61:0c:56:25:fa:ea:40:ce:
18:13:d7:61:ea:8f:90:e6:76:0a:21:da:b9:22:e7:
d2:e6:64:fc:e5:d5:ba:a6:80:0d:32:ec:96:9c:b7:
da:c6:29:f3:f2:64:c2:e8:40:ae:39:0e:da:48:8f:
d1:8f:76:84:63:16:6a:20:e6:de:82:81:b1:b2:70:
35:a7:e5:ee:4e:89:4c:8b:4b:0c:06:f3:65:19:1e:
0d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8B:0E:9D:05:78:CC:D1:85:12:CD:45:1E:74:03:9B:F4:A4:62:17
X509v3 Authority Key Identifier:
keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:06:2c:12:f2:cd:7d:32:a0:ae:a3:2f:a6:59:58:b7:68:93:
fe:74:89:68:88:3a:6d:82:62:4c:24:66:b6:fc:96:6a:e3:40:
61:d5:a9:64:79:7e:86:55:8b:8e:b1:f5:ae:17:d5:2e:90:b1:
f3:d7:35:dd:de:aa:17:ef:d8:9d:d2:2b:71:71:75:fc:70:f9:
ae:59:92:cc:84:46:fb:87:c1:5a:38:f3:69:f3:fc:41:36:78:
18:d6:3e:a6:cd:5f:db:a6:5b:85:87:8d:e8:73:21:5c:0f:2a:
99:51:d7:84:28:1a:9a:6f:8e:65:d8:ce:80:c6:dd:fa:dd:3d:
13:fb:13:6d:07:99:c9:55:48:8f:3f:8d:c0:34:c1:c5:51:69:
ab:94:c7:71:0a:22:9c:25:48:ce:50:d6:40:69:49:c7:e1:44:
b2:c6:08:da:a0:fd:92:e5:30:37:f9:00:c4:ef:10:ed:db:90:
d0:32:91:38:70:9b:ae:0b:e1:3d:5f:c5:ce:d6:af:e0:b1:bf:
62:4e:99:ca:ab:d0:70:b5:07:dd:6c:ed:63:8d:59:32:fb:07:
ad:01:e3:a0:41:a5:f4:0f:05:7f:4c:b8:4c:bb:3b:25:9b:9d:
02:9e:e9:77:81:ee:b2:fd:b8:4f:4a:bb:fa:6a:f6:a1:c0:dc:
63:ce:55:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:06:47 2025 by rpki-client