Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
File: YJDN0x06cdoc5KS9hfGYfjyk6vo.mft (raw, json)
Hash identifier: o91ZmlABfllR68JkB2H05QQjEqRCog1LRY693LuiCLo=
Subject key identifier: 64:AF:26:61:01:8B:E8:22:2C:89:BB:B6:FC:C2:1B:73:F0:A5:78:9F
Authority key identifier: 60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
Certificate issuer: /CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Certificate serial: 01974D0E0EAF2DAD24BEBFA83D423431A39F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
Manifest number: 0D9F
Signing time: Sun 08 Jun 2025 01:00:56 +0000
Manifest this update: Sun 08 Jun 2025 01:00:56 +0000
Manifest next update: Mon 09 Jun 2025 01:00:56 +0000
Files and hashes: 1: YJDN0x06cdoc5KS9hfGYfjyk6vo.crl (hash: pFrifJtyWCk1hAKbQZTvoy4Td7pLh4dAmfyD4i9vrB0=)
2: ffPjrVVu7lFrIrT7aSEeaO2AX6Y.roa (hash: 6A8IWQ2G3JPXavMyiGoa9Wq0l3UDM2Dw7jgy8bn/B9E=)
3: kIZJFU9FE0sowBjI7e7IPS7NRgU.roa (hash: 9Wc+e5T27oPhVr20geXtNISFlzFCv5eieNsW873OfKo=)
4: pDSqiruHTrt5wT6tXenOPgXVrZ8.roa (hash: dRSuxcEHLCbEbcETL0Q2NrXwBwARtdUXwOtoy1/PE/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0e:0e:af:2d:ad:24:be:bf:a8:3d:42:34:31:a3:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Validity
Not Before: Jun 8 01:00:56 2025 GMT
Not After : Jun 9 01:00:56 2025 GMT
Subject: CN=64af2661018be8222c89bbb6fcc21b73f0a5789f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3e:34:15:95:71:0e:b4:52:51:6d:eb:d6:13:
5a:4f:40:31:23:10:60:1f:5c:f1:19:b5:02:f8:06:
69:c3:9a:8a:2d:4b:65:ef:eb:88:51:c8:c2:86:7b:
84:9c:9d:5d:61:d3:50:fd:f0:48:78:20:df:cd:99:
60:d1:37:a1:96:c8:12:7f:e7:9b:80:9a:13:5b:d0:
79:70:31:1a:f7:57:d6:d4:9e:33:2f:81:bf:c2:83:
55:d5:72:26:68:6f:9c:b5:b5:46:3d:32:14:06:bc:
cf:e5:57:98:38:0e:9b:15:3f:96:42:d3:2b:c8:99:
59:ba:fc:7f:9b:85:6d:c0:78:88:6f:e3:a7:46:b3:
4e:b4:a8:58:dd:6e:37:b9:9b:1a:3d:5e:d8:2e:9c:
84:63:b7:02:6c:44:e4:40:f7:21:84:37:b4:7f:c4:
61:e1:1a:87:ae:ca:43:3d:e6:c0:af:41:ad:01:a6:
87:d6:97:71:47:81:9d:f0:2c:ec:80:2d:93:2b:0a:
96:b9:12:5c:d3:d0:26:51:88:a0:e5:1b:13:f0:c8:
41:eb:fb:99:34:07:6d:d9:c1:4b:af:af:29:33:99:
d5:9f:91:9e:6f:0b:91:ad:37:2c:28:cd:48:b8:18:
be:b0:32:5e:eb:c1:62:88:7e:41:85:60:de:03:b7:
1b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AF:26:61:01:8B:E8:22:2C:89:BB:B6:FC:C2:1B:73:F0:A5:78:9F
X509v3 Authority Key Identifier:
keyid:60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f4:fe:60:2a:70:b6:54:d5:27:e2:a0:e1:a5:ea:00:b8:86:
a4:be:2b:70:2b:17:44:12:75:0f:86:1c:dc:87:e0:97:3c:41:
26:3b:12:24:90:89:20:ff:98:7c:e9:fc:fd:ea:a7:7e:c0:02:
6e:bf:7d:76:7b:f6:ae:d0:db:bb:1c:9e:af:40:68:41:83:87:
e5:85:14:1b:42:23:92:e3:99:1f:f9:18:55:c1:10:74:e6:ee:
84:91:2a:18:67:c3:91:ad:b5:f0:dd:93:f8:61:68:c4:b9:78:
1c:1f:b9:c9:f8:d4:d7:bf:49:48:a6:29:db:86:a8:94:86:6d:
fb:74:34:dc:3b:5a:3d:16:05:93:39:b3:32:ea:46:db:a0:ea:
51:04:26:e8:6c:7a:54:d5:10:44:bb:5b:f5:19:ea:0a:6e:fb:
8a:e0:7d:ab:ec:7c:ab:20:a1:f9:7a:0e:e1:69:d3:6b:19:27:
31:de:8f:bb:ca:60:bf:ce:93:84:c9:a3:3b:25:29:de:7c:00:
a8:9c:ff:d8:2c:a0:96:69:ac:ec:9d:55:1d:8e:ac:4b:b5:75:
7a:33:9a:95:48:73:cf:11:0f:fa:33:7f:1b:90:64:6a:85:99:
2b:9c:c0:23:14:24:3c:4b:31:5c:da:a7:21:b1:bd:17:0b:b9:
2c:d9:36:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:21:55 2025 by rpki-client