Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
File: YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft (raw, json)
Hash identifier: wi4xWEKP6EklyGQ7Ezst7XBfBmNs1SkvoDeCpGslLNQ=
Subject key identifier: 33:68:E9:9D:9E:3B:05:D2:97:1A:63:6A:61:BA:B1:CD:58:4F:95:CF
Authority key identifier: 62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
Certificate issuer: /CN=6238410338e21e8eab94119d80e41a3958491de6
Certificate serial: 019757C8B12D8DD6D336DD966563E0697DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
Manifest number: 0B81
Signing time: Tue 10 Jun 2025 03:00:59 +0000
Manifest this update: Tue 10 Jun 2025 03:00:59 +0000
Manifest next update: Wed 11 Jun 2025 03:00:59 +0000
Files and hashes: 1: YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl (hash: +pFT/xOWxkOZVEMroRPvakVZCyktKMuOhII9dhx/QUU=)
2: u6XKWkJxCFpT3xG3nAznfYy70cs.roa (hash: RjT1DRB5vp2FEimDEIdIqCiEf85N8q2cRNXUGa1kwyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:c8:b1:2d:8d:d6:d3:36:dd:96:65:63:e0:69:7d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6238410338e21e8eab94119d80e41a3958491de6
Validity
Not Before: Jun 10 03:00:59 2025 GMT
Not After : Jun 11 03:00:59 2025 GMT
Subject: CN=3368e99d9e3b05d2971a636a61bab1cd584f95cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3e:65:35:10:71:1f:40:0e:8f:a6:f0:6c:a5:
3c:88:72:78:72:ba:eb:17:88:6a:87:a0:01:4f:ad:
80:88:fb:24:8e:63:7b:25:55:c0:b9:ba:39:28:46:
17:dc:18:fa:5c:97:25:d9:01:95:61:7e:71:8d:c2:
20:54:f8:27:06:24:66:64:9f:27:31:64:42:a2:47:
98:af:8f:64:d6:4f:04:e6:b7:df:17:95:fd:6a:0a:
0a:f4:2a:22:d3:2f:5e:18:80:c9:7b:ad:77:a5:eb:
0e:0b:9b:8b:15:f8:47:c1:25:7e:50:7e:1d:2a:af:
9a:5a:4b:e1:4a:04:27:15:c0:7a:05:44:ef:8e:19:
62:ae:fb:05:15:8c:c2:ce:68:ff:66:8c:05:d0:53:
70:2f:2e:9e:be:e8:32:85:ad:57:fa:0a:11:03:76:
42:fc:2f:6e:a7:5e:25:38:e4:93:2e:16:7d:0e:e5:
63:cd:9d:28:06:ce:6c:35:fa:7f:79:aa:53:50:4a:
14:fb:8f:b7:e0:d8:df:11:87:73:3f:1f:de:6e:8c:
2e:c2:79:4e:08:94:e7:e2:0c:92:d5:25:6c:d9:ad:
f3:bc:49:3f:42:ae:b2:1b:bc:1c:87:3a:31:5b:31:
ec:f9:17:4c:6e:70:31:91:00:ac:1d:ad:65:bd:f7:
99:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:68:E9:9D:9E:3B:05:D2:97:1A:63:6A:61:BA:B1:CD:58:4F:95:CF
X509v3 Authority Key Identifier:
keyid:62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:96:6a:c7:d6:1b:1c:2f:4f:52:b8:1b:ca:f4:87:6f:cc:fa:
cc:a7:9d:de:87:bb:bc:be:10:d3:d3:c2:c7:11:c6:42:0e:e9:
81:18:7b:26:95:68:50:89:27:06:81:b3:cf:3d:2c:75:71:f8:
67:b6:8f:39:11:2c:03:10:3f:14:2b:07:bb:9a:89:1b:11:2e:
a0:8a:04:9d:88:16:94:00:8e:7f:17:0b:43:3f:28:ed:f3:1a:
be:f3:68:ce:bf:f4:60:d1:17:7d:f8:a8:25:0b:55:7d:95:f6:
fc:aa:46:39:49:8f:50:8f:4b:ef:85:c2:4a:e1:21:9c:10:09:
c0:ea:a3:05:40:ca:6c:4b:37:53:fb:fc:4d:f3:d8:e2:15:89:
46:fb:d3:6e:80:12:6e:27:f8:50:58:55:1c:e7:a3:76:81:3e:
32:eb:83:99:78:98:a1:d9:57:e5:32:0a:3c:4b:30:f9:ff:11:
03:df:30:86:62:e7:d9:a9:f6:df:3f:1b:2a:c7:83:aa:83:77:
a0:3d:d5:c6:d6:ef:98:5b:4d:d1:77:70:b4:5c:94:2e:1b:16:
3c:7b:d4:ff:b9:b1:18:61:cd:27:5e:65:5d:b1:eb:b8:0a:e8:
7c:40:66:27:05:3c:70:ee:51:f3:85:3b:40:79:2e:19:7c:aa:
69:aa:00:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:03:52 2025 by rpki-client