Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
File: YTIzl9blKd_wbHzxTRdg1ucGqm8.mft (raw, json)
Hash identifier: wSBmhOonn8rx4vw42ZH4HULTFdgTRNSoEtEvM9/1RVw=
Subject key identifier: DC:2F:E7:43:76:DA:7C:C8:F9:AA:81:8D:AE:D5:E2:E0:DC:D7:53:B5
Authority key identifier: 61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F
Certificate issuer: /CN=61323397d6e529dff06c7cf14d1760d6e706aa6f
Certificate serial: 01975C1315E1B5C4F78774C6B2B79BF011D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
Manifest number: 0244
Signing time: Tue 10 Jun 2025 23:00:44 +0000
Manifest this update: Tue 10 Jun 2025 23:00:44 +0000
Manifest next update: Wed 11 Jun 2025 23:00:44 +0000
Files and hashes: 1: YTIzl9blKd_wbHzxTRdg1ucGqm8.crl (hash: I0n1vER3V+pjBfVztlWFQRZfMNX8Wmt1VPYuRrX4OXs=)
2: kGTMJp8YWdhCRnyfOKgxhKChBJQ.roa (hash: ZVU5RQX8MRgj32JsdxWQo2xXu6d3VcvuzIOlJ8aVzuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:13:15:e1:b5:c4:f7:87:74:c6:b2:b7:9b:f0:11:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61323397d6e529dff06c7cf14d1760d6e706aa6f
Validity
Not Before: Jun 10 23:00:44 2025 GMT
Not After : Jun 11 23:00:44 2025 GMT
Subject: CN=dc2fe74376da7cc8f9aa818daed5e2e0dcd753b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:83:80:ce:13:d8:51:4d:6c:6b:30:aa:45:f6:
ef:ef:1d:9a:e3:d8:13:74:ed:21:87:02:7c:d3:8b:
51:c3:65:31:fe:74:c0:45:d6:6e:2e:09:cb:f0:ff:
a7:ef:9a:5c:30:ca:2a:3c:4a:7d:74:80:cc:09:32:
c9:86:28:88:8b:b3:41:9b:3e:c5:2d:e5:f3:c9:a0:
7a:d9:e9:f7:da:11:ed:08:27:5e:cc:3b:2e:a9:e0:
d4:e1:b0:48:d4:09:04:ba:5e:29:77:68:31:b1:0a:
74:5a:0a:80:9b:7c:50:f8:ff:81:2a:8c:b0:a8:f8:
9f:58:27:7e:b8:f2:6d:1a:1d:4f:e8:9b:db:52:d9:
bf:f0:f6:bf:a3:a3:5f:5f:ad:37:45:75:f9:f6:c7:
b8:4c:b3:7d:3a:b2:e0:15:cf:1a:48:70:d0:30:d7:
47:ba:52:bf:e7:78:21:a6:b6:76:0d:d1:6f:aa:66:
04:a7:c8:a7:ff:5a:49:e2:76:ff:0d:7f:11:70:91:
ed:bc:3d:82:eb:59:d2:10:32:aa:ca:59:1c:5d:b5:
15:20:26:83:c2:73:85:a0:b8:2d:bb:28:01:eb:86:
ce:fb:d0:a2:23:40:23:9c:1e:73:43:62:02:3e:d4:
a7:98:b6:19:69:63:b4:84:f4:77:9d:99:ea:d6:cb:
78:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2F:E7:43:76:DA:7C:C8:F9:AA:81:8D:AE:D5:E2:E0:DC:D7:53:B5
X509v3 Authority Key Identifier:
keyid:61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f2:b1:0b:d9:6e:cf:1e:a2:d1:23:4d:50:ed:4d:7b:85:75:
22:68:21:06:14:8e:9e:a8:82:2f:08:46:1a:d5:28:af:6d:5a:
7c:f1:b7:01:97:eb:87:39:1a:34:11:0f:f3:4a:58:72:ef:e6:
2f:fa:66:ff:34:d3:68:f6:c6:52:80:b9:1d:04:4e:fe:eb:e2:
ec:e7:7e:d2:36:05:c1:78:53:52:2f:55:96:b2:29:d1:c8:1b:
40:85:14:e7:86:0b:ff:c5:13:75:af:de:b2:c4:7d:da:af:a7:
6e:4e:2a:5c:f6:07:ff:be:df:94:ba:4c:38:9f:6e:9e:88:df:
b2:fc:e5:29:e2:92:0a:3c:e1:a7:e0:32:87:17:45:64:8e:80:
44:dd:b0:2b:5d:e2:5e:fd:ba:24:98:d6:28:be:05:9f:3f:92:
2e:86:00:ba:72:5d:50:86:16:f8:c1:a5:47:dc:05:c6:2c:f0:
a2:af:cc:01:ef:c1:eb:bb:8a:66:c5:57:dd:05:0e:76:e7:5b:
06:30:73:8f:74:13:4a:cb:4e:96:b1:b6:ef:62:95:b5:4c:40:
93:9e:2d:8b:b8:4e:ef:ed:a7:fb:69:f2:29:4a:00:39:f2:49:
8d:0d:d6:02:4a:92:f7:6d:ca:1c:a8:1f:bd:20:ef:57:30:26:
3d:04:af:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:28:20 2025 by rpki-client