Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
File: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft (raw, json)
Hash identifier: C4cWd8quu3KADl7HmfGxPq658AGj7pDLNTgTjxo9GCs=
Subject key identifier: 86:99:81:06:A8:AA:F9:E3:91:22:70:BB:90:3D:4F:3A:B8:77:6A:BE
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Certificate issuer: /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial: 01974F3390FF96BE4E1E3F2E4D6B7106807E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
Manifest number: 0D7B
Signing time: Sun 08 Jun 2025 11:01:08 +0000
Manifest this update: Sun 08 Jun 2025 11:01:08 +0000
Manifest next update: Mon 09 Jun 2025 11:01:08 +0000
Files and hashes: 1: CNe8Ce9LX6bIFoae7IEYInIJvX8.roa (hash: vAks/DifGuIDg8MpuhTecKF4JO7GCicanpj2dhKngMI=)
2: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl (hash: Q0QDx9S6tUfvwpdo8ZYUF3xMiH+O8u88b3R03L/M9yU=)
3: nXfzcpDMArjxgb2F7qR75SrYmPY.roa (hash: 50wVvlHYuRdw/re5wFDGWVBuuEfzzC0RRb8vEvTcySU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:90:ff:96:be:4e:1e:3f:2e:4d:6b:71:06:80:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Validity
Not Before: Jun 8 11:01:08 2025 GMT
Not After : Jun 9 11:01:08 2025 GMT
Subject: CN=86998106a8aaf9e3912270bb903d4f3ab8776abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f5:a6:4f:d4:2c:e9:25:32:f5:ef:56:58:09:
b7:95:97:15:b0:dd:59:8d:94:b9:52:29:12:38:3c:
bf:4b:03:2f:ba:62:ff:65:5a:b5:86:6d:fd:5b:1a:
7d:84:98:8e:a3:01:0e:b8:f3:b3:66:9b:bc:2a:a3:
b5:51:13:a1:c9:4a:bd:aa:68:62:38:1b:ec:8b:e0:
2d:75:03:ce:91:ee:a0:fe:d4:ce:a2:75:d2:dd:27:
fc:09:9b:a0:63:cf:a4:d2:85:66:78:9a:0c:a7:3f:
f1:79:a4:83:e4:a5:a2:9d:ce:bf:39:57:58:a7:50:
85:eb:d8:51:c9:84:9f:d9:61:8b:6c:ae:b0:c9:d2:
75:c9:0c:71:f7:70:ca:de:ec:9e:96:24:ac:48:6b:
6a:a2:a2:ab:5d:01:97:34:20:5f:bf:c9:d6:1b:f4:
dd:29:96:83:a1:91:22:5f:a2:13:f8:02:16:f2:c4:
44:ab:5e:cb:23:4d:a9:43:97:33:59:d8:71:33:ba:
d2:c6:df:dd:ce:75:3b:6c:a5:d8:e9:bb:cd:2a:b8:
98:51:2f:2c:69:f9:b9:06:c2:71:69:b4:8d:fa:ae:
58:b7:c3:57:8b:3f:55:62:7e:11:84:3d:ec:71:fa:
ae:13:b6:9f:4e:18:e3:1a:a6:2b:89:aa:5f:82:a2:
65:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:99:81:06:A8:AA:F9:E3:91:22:70:BB:90:3D:4F:3A:B8:77:6A:BE
X509v3 Authority Key Identifier:
keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a7:4f:fc:15:4f:3f:2f:8b:86:00:68:55:2d:f5:84:99:d8:
dc:5d:f3:58:c7:61:b1:3e:e0:5c:42:1d:a2:73:e4:55:ef:e2:
e4:e8:2c:6e:24:56:08:5b:d9:66:13:cb:d6:42:16:97:71:2a:
12:a4:1c:21:fc:e7:cc:1a:9a:c6:16:4b:ad:e2:4b:5e:95:5f:
b7:ef:95:98:0d:80:e2:85:b2:a9:dc:03:83:a6:bb:41:e7:fb:
ad:f5:3e:ba:a3:fe:8d:15:2a:76:1b:44:37:07:ab:4b:ca:8d:
96:41:12:f4:11:44:ee:21:c3:94:97:a0:f9:75:5a:eb:26:a5:
62:25:9a:bd:1d:bd:d9:c8:b3:1a:27:e1:45:c6:bb:e7:f1:63:
14:69:e7:ae:ca:c0:81:20:e9:18:42:42:06:35:fb:49:6b:de:
35:94:34:9f:fc:0d:a8:99:cf:5e:f4:9d:0a:db:da:99:f4:8f:
f6:0b:cb:d8:2f:4a:e8:08:e7:76:92:1b:e4:1c:17:fd:11:eb:
61:0c:b4:2d:cf:8e:1f:94:c2:7d:74:8f:e0:5e:f1:bf:08:6b:
d1:1d:53:24:27:2f:78:f2:70:a1:b7:4f:25:fa:79:25:2c:25:
97:a1:f0:b4:2e:01:db:a5:3e:1b:e5:98:35:10:cb:df:43:6f:
9f:54:e0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:12:36 2025 by rpki-client