Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
File: YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft (raw, json)
Hash identifier: lLAiEd9ZAaq4RnG5FmAvWdc1e0rbmszG+N+AIZANi0A=
Subject key identifier: 64:58:11:8B:CE:EF:30:B7:F8:56:4B:35:01:F6:15:63:2B:B6:69:CF
Authority key identifier: 62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
Certificate issuer: /CN=6238410338e21e8eab94119d80e41a3958491de6
Certificate serial: 019753EB6686602836A09A3F3882462ABE13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
Manifest number: 0B7F
Signing time: Mon 09 Jun 2025 09:00:25 +0000
Manifest this update: Mon 09 Jun 2025 09:00:25 +0000
Manifest next update: Tue 10 Jun 2025 09:00:25 +0000
Files and hashes: 1: YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl (hash: ML2e3D0oTxLjh3gfJe/7SqzDFbIfQr8NtFM9VPwk8x8=)
2: u6XKWkJxCFpT3xG3nAznfYy70cs.roa (hash: RjT1DRB5vp2FEimDEIdIqCiEf85N8q2cRNXUGa1kwyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:eb:66:86:60:28:36:a0:9a:3f:38:82:46:2a:be:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6238410338e21e8eab94119d80e41a3958491de6
Validity
Not Before: Jun 9 09:00:25 2025 GMT
Not After : Jun 10 09:00:25 2025 GMT
Subject: CN=6458118bceef30b7f8564b3501f615632bb669cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b8:8a:7f:c7:98:94:df:4e:ab:65:45:3b:b4:
a2:96:65:90:eb:bd:ed:13:be:b1:2f:eb:ba:56:3c:
f0:8e:ed:7a:12:0b:84:b1:44:75:c0:8f:ee:73:35:
3a:bc:61:2e:d9:0e:7a:8c:bb:04:13:03:1d:ba:c0:
c6:3c:12:b8:d9:a5:4f:9d:e4:63:a8:d4:b0:98:0f:
6e:30:63:a0:6f:56:3c:47:5f:62:6f:e9:29:3b:3c:
62:21:57:f3:1c:32:8a:15:89:91:79:2b:a2:27:09:
b0:66:7a:19:8c:d3:39:19:aa:09:08:b3:bb:27:76:
c2:fb:01:f0:90:a4:39:13:db:fe:bd:80:7c:1c:7a:
2c:7e:92:bd:50:de:82:c0:a1:8c:dc:79:b5:9b:17:
69:c0:1a:22:81:0d:8c:99:38:1d:76:61:22:c5:c2:
de:9f:4d:66:7f:ee:69:cb:bc:db:66:d8:d3:89:b1:
27:66:85:cb:9c:c4:7e:82:c0:d1:83:d9:7f:69:26:
27:7c:c1:59:44:67:93:f4:4d:cc:56:4e:77:72:64:
d8:e1:d7:65:23:dd:db:87:08:0f:f8:93:f9:f2:c7:
8a:ec:a9:fb:b1:22:89:43:4b:14:d0:54:c4:d8:2d:
30:c1:e9:89:9c:a0:5b:00:de:ff:33:e2:e3:17:f9:
be:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:58:11:8B:CE:EF:30:B7:F8:56:4B:35:01:F6:15:63:2B:B6:69:CF
X509v3 Authority Key Identifier:
keyid:62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:92:82:a2:dc:a3:f8:7e:6b:b2:f9:5c:26:22:1d:82:b2:04:
58:46:88:c5:7a:b1:1a:bf:50:ae:ca:e0:49:ed:72:ed:58:ac:
af:3e:c7:7d:9e:9d:bd:97:19:94:2c:81:f5:1d:b4:2f:db:83:
48:16:6e:08:e4:78:36:67:42:b8:3f:25:93:04:77:9d:90:b6:
2d:1a:58:18:38:51:6f:d0:27:dc:08:a7:00:74:29:d9:72:29:
3c:65:f0:45:0e:12:00:f2:eb:20:9f:7c:a0:20:71:22:18:bc:
4f:53:40:45:1b:70:69:06:45:35:0d:f9:da:0a:22:83:a4:93:
e4:a2:89:92:e9:c0:2a:f1:04:97:4b:71:c3:08:28:c8:7c:d3:
a7:7a:5d:77:1a:bf:16:0b:c8:c6:ad:26:f4:c4:7b:6d:f3:76:
a7:c9:f9:f7:cb:11:09:5d:35:21:2e:ab:b2:14:96:b2:7f:0d:
f3:31:d7:41:02:ee:19:b8:42:f6:a7:5a:45:f0:2e:06:ce:f3:
e9:18:61:17:98:ef:47:54:47:4f:89:50:52:fe:33:cc:18:ce:
f5:f0:fd:13:59:dc:e3:a8:35:7f:5a:83:e4:2c:0d:96:77:c0:
96:43:7a:6a:e0:44:8e:2a:7e:7b:64:99:82:84:ad:61:6c:dc:
30:a8:7d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:39:38 2025 by rpki-client