Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
File: YHzqbhA6IyXEjBZnqZx7F-s857Y.mft (raw, json)
Hash identifier: WW5K9EdWaS3S7gUNCht5lou5zMn0IvdriHu4eJ4m0R0=
Subject key identifier: 45:C4:3B:B6:BE:85:E6:58:B1:6D:7F:5A:0A:73:E8:36:51:72:5B:85
Authority key identifier: 60:7C:EA:6E:10:3A:23:25:C4:8C:16:67:A9:9C:7B:17:EB:3C:E7:B6
Certificate issuer: /CN=607cea6e103a2325c48c1667a99c7b17eb3ce7b6
Certificate serial: 01974DB2CC5FC8B83C09A1E783C4C1E01963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
Manifest number: 12BC
Signing time: Sun 08 Jun 2025 04:00:52 +0000
Manifest this update: Sun 08 Jun 2025 04:00:52 +0000
Manifest next update: Mon 09 Jun 2025 04:00:52 +0000
Files and hashes: 1: 8tqsaUcyKZIIKG75KzikfFZDjvk.roa (hash: zktR6lve6abwwBFYbdtbK1pvyhA4oW0U5RIxFZXPtoI=)
2: YHzqbhA6IyXEjBZnqZx7F-s857Y.crl (hash: 86acL9TFaLd51MSTSgos0yAPR97kdJYkGQ7NQ/OvAKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:cc:5f:c8:b8:3c:09:a1:e7:83:c4:c1:e0:19:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607cea6e103a2325c48c1667a99c7b17eb3ce7b6
Validity
Not Before: Jun 8 04:00:52 2025 GMT
Not After : Jun 9 04:00:52 2025 GMT
Subject: CN=45c43bb6be85e658b16d7f5a0a73e83651725b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5f:71:9a:78:6f:af:07:5e:d0:dc:4b:8a:7e:
a3:43:e9:8f:8b:a7:94:f3:3b:0d:6c:c8:f5:e7:42:
c8:da:24:fc:96:49:40:9e:81:40:8d:2f:bf:e3:04:
9c:ec:2e:67:a0:3a:14:10:d5:8b:f6:4d:86:e0:cb:
66:a6:71:fd:a5:63:58:a2:03:39:36:be:e8:15:7a:
ef:9b:2c:31:c7:ba:27:b2:88:f5:d0:1e:27:6a:5c:
53:d3:97:af:25:ac:c4:73:8a:c8:49:dd:8b:55:7a:
d2:68:d0:a9:12:6d:c5:5b:ae:8b:9f:38:08:cc:f2:
83:32:56:3a:08:3d:77:3f:80:c7:c0:0d:d4:95:b2:
46:38:cf:3f:97:ea:4d:01:e5:da:67:15:5d:72:9d:
23:87:0a:ef:05:5f:3e:aa:26:47:14:20:4a:9a:55:
53:ad:73:c4:cd:a0:72:27:68:04:e6:50:0e:0c:3b:
91:bc:47:21:01:3a:fe:13:4b:96:24:94:73:9a:1a:
f5:f0:b8:f2:f4:fe:de:10:59:9b:d2:bb:51:59:55:
aa:b5:e1:d1:2e:4b:5c:69:36:98:de:25:c8:a7:7e:
a7:ca:ff:1a:00:37:3f:41:7b:5b:0e:ee:f3:bb:e4:
c6:c0:f7:10:fb:52:64:9f:e3:57:40:ea:29:f8:e3:
af:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C4:3B:B6:BE:85:E6:58:B1:6D:7F:5A:0A:73:E8:36:51:72:5B:85
X509v3 Authority Key Identifier:
keyid:60:7C:EA:6E:10:3A:23:25:C4:8C:16:67:A9:9C:7B:17:EB:3C:E7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:48:9f:f4:f2:76:5e:44:fa:d5:f8:f3:90:38:86:da:1b:5f:
69:ef:8b:9a:d1:4c:fb:a5:b3:39:24:db:3a:fc:2f:b4:ed:1b:
11:5c:31:e8:42:ff:18:43:90:9b:1f:97:71:96:c9:57:37:1a:
55:60:90:7f:fd:b4:01:32:db:74:a4:50:21:58:09:19:6d:15:
77:05:01:3c:47:80:68:59:48:07:86:ab:b4:2e:3d:79:d2:f2:
65:f1:20:ee:0d:a9:82:19:d5:5a:b6:05:e2:e4:10:82:d1:cd:
40:91:ae:39:c4:fb:ee:c6:a2:ac:de:ea:33:1b:c6:5b:2f:02:
e8:3d:78:51:8a:16:2d:7a:ca:36:9f:5a:04:06:eb:51:07:34:
33:50:35:1e:01:8b:d3:41:be:24:e7:dd:84:f7:31:8c:5d:06:
f9:55:e6:75:6b:22:69:2d:c9:f5:f3:ea:25:70:91:5d:5c:0a:
39:55:91:5b:be:bd:42:42:fd:3d:11:91:c5:78:de:21:76:d0:
9b:22:20:31:c2:99:6c:d5:9f:88:59:e9:8a:37:c5:e0:97:ba:
3d:45:8a:7a:d9:6a:80:f6:a9:72:08:78:bb:f7:94:f4:17:20:
db:5a:d1:e0:79:5d:8e:ac:be:da:78:bc:bd:ac:a0:5d:b4:9c:
c4:9a:fb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:17:13 2025 by rpki-client