Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
File: YXfFgJJlmeg6tzW6LgT8EId4xEE.mft (raw, json)
Hash identifier: 2w0uSkU8cbLR6/g1R8ELLh/3OaCS7cSyd5jiNmw7Beo=
Subject key identifier: 81:25:01:CD:F9:78:24:69:26:83:82:DC:87:ED:F8:84:84:EA:1D:65
Authority key identifier: 61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41
Certificate issuer: /CN=6177c580926599e83ab735ba2e04fc108778c441
Certificate serial: 01974E581F47FA1DF51F279683F50DABCB76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
Manifest number: 0CD6
Signing time: Sun 08 Jun 2025 07:01:27 +0000
Manifest this update: Sun 08 Jun 2025 07:01:27 +0000
Manifest next update: Mon 09 Jun 2025 07:01:27 +0000
Files and hashes: 1: Gu9ez5zlQGgsXPCgSAa011q3NCY.roa (hash: XMVaMgOJ4WWG4Lp4VxV89GlWKPKFR9zZG9BiqqxMKyA=)
2: YXfFgJJlmeg6tzW6LgT8EId4xEE.crl (hash: qUaG6pAkMtPtpGGPOYlo72HPo0PbJ2k6ikqonqZmThA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:58:1f:47:fa:1d:f5:1f:27:96:83:f5:0d:ab:cb:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6177c580926599e83ab735ba2e04fc108778c441
Validity
Not Before: Jun 8 07:01:27 2025 GMT
Not After : Jun 9 07:01:27 2025 GMT
Subject: CN=812501cdf9782469268382dc87edf88484ea1d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:74:ef:0f:34:45:b7:64:23:5f:fa:b3:50:51:
fa:85:ba:aa:0d:32:fd:9a:bb:fb:69:c1:b1:78:11:
60:37:38:d5:88:a0:53:54:39:8a:bc:ed:9f:a2:f3:
7d:8d:c1:93:9a:da:6f:fb:3c:d4:6d:84:7b:99:25:
f3:a9:6b:0b:7d:97:93:5d:d9:40:c2:02:cc:c4:ae:
8c:3b:d9:8f:88:38:99:2b:77:8a:50:f6:ad:90:14:
4a:17:47:98:4d:06:db:62:20:3d:a2:30:8c:62:2c:
7b:eb:ce:37:93:8c:aa:f5:75:7f:5c:66:3f:0c:c7:
43:05:0d:c6:8f:85:ca:fd:cc:fa:0e:66:66:80:77:
3b:a2:fc:87:f2:d9:b2:d0:a8:d4:38:30:95:e9:bc:
0f:72:89:73:d3:c7:24:2e:db:b3:e1:67:e9:3f:32:
59:0d:ff:f8:d2:5c:f6:1e:d9:cd:fc:90:d4:ce:3e:
b2:09:bb:3e:ad:6b:99:8c:6e:bd:1b:89:33:f9:13:
93:1a:3b:e1:ca:9f:e7:72:15:2e:5a:bd:0e:c3:76:
c7:53:70:b7:06:1a:54:14:23:14:63:80:b4:e4:d5:
13:d6:57:cd:7a:78:7b:2f:19:b2:56:1a:3b:de:41:
be:d9:8c:e6:43:57:16:3c:0c:a3:15:c9:37:85:34:
00:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:25:01:CD:F9:78:24:69:26:83:82:DC:87:ED:F8:84:84:EA:1D:65
X509v3 Authority Key Identifier:
keyid:61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:8b:f2:8b:55:37:cc:14:40:9c:a7:48:af:c7:ce:a1:c2:d4:
5f:75:cb:13:ae:9c:cb:87:0b:04:b2:d4:08:eb:d9:82:8a:a9:
1b:04:11:10:b1:0c:c0:87:69:b5:9b:b1:47:27:b1:e3:cc:c9:
f0:cd:7c:48:75:ce:ee:42:09:e0:28:8e:72:26:85:40:94:cc:
d1:c6:bd:54:8c:f8:18:80:af:d6:b2:ca:6c:04:12:51:fa:74:
f0:23:c2:4e:b7:60:49:fa:16:38:4a:9c:1c:24:20:a4:ec:04:
6f:de:68:01:52:00:cb:f5:4e:72:42:24:87:93:a1:65:6c:9f:
7c:6c:fe:c0:c4:12:04:48:b3:d0:68:6d:b8:70:59:af:70:8e:
a5:31:f8:06:cd:9f:11:98:e2:7d:28:da:a4:f8:b3:8c:27:c2:
e6:ca:1d:23:21:2b:a7:ca:fb:39:2e:41:50:9e:85:9a:ce:e8:
7e:03:53:d4:5e:81:e8:94:cd:25:db:93:59:a7:bb:52:33:96:
9c:8e:49:d4:d7:4a:fc:77:36:db:c8:8b:2c:e5:a9:5a:82:ad:
e7:1d:fc:96:be:78:8a:14:48:43:1e:6d:57:1e:d8:b3:6c:10:
45:7a:3f:75:07:1a:2e:69:7a:48:e7:78:d5:d3:ee:2d:14:79:
46:77:d6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:48:33 2025 by rpki-client