Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
File: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft (raw, json)
Hash identifier: 9wyDM6Uwi4kIWFHULVPJVQpQp4yWryCkupV/nMyqSQc=
Subject key identifier: BA:99:8F:77:EC:31:3F:1A:88:4F:03:F7:68:37:E9:0D:5F:1A:B8:99
Authority key identifier: 60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
Certificate issuer: /CN=601331eccd96d02c1035734cd00a390e8311d942
Certificate serial: 01974BFB0CFD2E34979CC1AF51B54F4DC344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
Manifest number: 13C5
Signing time: Sat 07 Jun 2025 20:00:33 +0000
Manifest this update: Sat 07 Jun 2025 20:00:33 +0000
Manifest next update: Sun 08 Jun 2025 20:00:33 +0000
Files and hashes: 1: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl (hash: zz8ziIamGnCueY9LJMYMR9nvXVdTJWuruZGkUMW+lEQ=)
2: c7MGsEbypq7HQmSi7CA8wcLve5E.roa (hash: qY1ylvNOSUvOO34D9YGb2Z/M9yHjYdSK25iwWmwBxOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:0c:fd:2e:34:97:9c:c1:af:51:b5:4f:4d:c3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601331eccd96d02c1035734cd00a390e8311d942
Validity
Not Before: Jun 7 20:00:33 2025 GMT
Not After : Jun 8 20:00:33 2025 GMT
Subject: CN=ba998f77ec313f1a884f03f76837e90d5f1ab899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f6:5e:0d:8b:b2:a7:eb:38:96:42:f8:96:c6:
2e:5c:0f:bc:fc:7a:ef:4f:d1:6a:71:e7:25:f6:d9:
a2:80:e4:46:1d:1b:82:4c:a6:ad:4b:c7:4c:51:0b:
1e:83:ff:91:c7:6f:47:10:37:74:ee:2e:7e:cf:7f:
7b:c4:93:12:fa:07:51:2d:c4:bd:c7:55:6f:ff:ce:
c1:03:97:f9:d5:d5:6a:45:99:dd:6a:2c:a8:c2:c9:
25:5f:74:94:ca:15:77:1a:88:84:90:b1:27:ff:d7:
c5:76:54:19:4c:bf:08:5f:02:3a:6e:7b:89:d8:ad:
d3:d2:54:fb:c3:f2:89:2b:79:ae:19:56:f0:74:29:
5f:37:8a:9a:0e:b7:0f:82:55:01:31:49:d9:3c:8f:
b2:ee:37:2d:a8:0d:66:ee:5f:29:f9:55:df:87:92:
cc:39:c5:85:27:70:5e:46:34:a1:30:a6:81:11:40:
7c:bf:d7:d8:5e:8f:2a:14:bf:ae:f2:df:7d:73:fe:
64:e9:d3:87:61:53:c9:22:10:65:91:46:70:08:0a:
ae:fd:e2:ff:6b:20:5b:83:14:f3:c3:ee:e1:62:66:
fa:7f:d3:9c:fa:91:18:bc:9e:5a:c7:91:f6:37:57:
3a:a4:07:f9:55:b7:9d:b1:ae:f9:0a:ef:c5:d7:b0:
1f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:99:8F:77:EC:31:3F:1A:88:4F:03:F7:68:37:E9:0D:5F:1A:B8:99
X509v3 Authority Key Identifier:
keyid:60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:d2:eb:67:c7:85:20:e2:e6:06:cf:c7:e0:44:52:1c:59:ac:
91:17:39:ad:6a:db:09:5f:65:a9:d7:5f:7e:c7:7b:46:32:27:
77:d4:ab:78:1a:89:3d:59:74:a8:bc:f5:63:ad:57:1b:b1:03:
63:f9:04:78:2e:a5:7f:7e:ea:69:b7:5b:00:15:ec:48:1c:c5:
42:5a:83:dd:88:3f:25:5a:e7:53:0c:3f:a8:dc:90:6a:22:c5:
2b:6a:e0:0a:81:20:c7:07:bd:64:7a:1d:a6:9f:69:cf:e7:d6:
cd:5b:4d:04:98:f2:5d:0a:fe:54:ed:9c:6b:13:26:c2:90:5f:
1e:d0:06:17:0b:ef:f5:7a:34:3b:9e:a3:11:7c:15:5e:fa:a0:
e5:7a:d8:f1:15:cc:aa:ca:16:b9:b9:0e:77:4e:b5:3d:2c:16:
fb:d7:d1:6d:df:83:7c:27:f2:93:e3:a1:d8:82:f9:3d:cc:40:
21:f1:e9:fe:37:66:ee:31:ae:cf:40:e7:ee:20:92:a2:e6:e0:
9c:c6:29:04:56:c6:9b:38:d0:16:b0:57:ec:b1:67:4b:47:14:
b4:e6:da:d6:6a:46:62:46:38:b1:52:05:49:04:f4:9b:d5:df:
dd:37:93:44:1f:fe:31:b9:31:4a:b7:0d:b5:25:63:92:76:4c:
36:ef:76:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:07:23 2025 by rpki-client