Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
File: YFUi433iaw1WiVrBirB9fHhKuTw.mft (raw, json)
Hash identifier: bYqmNMxeLxcQabBEO7opAhMyRQV4gjuNopDCiizIjBA=
Subject key identifier: 02:69:1E:1D:45:54:03:CB:91:4D:1D:4D:B3:65:F9:43:B8:3C:C4:51
Authority key identifier: 60:55:22:E3:7D:E2:6B:0D:56:89:5A:C1:8A:B0:7D:7C:78:4A:B9:3C
Certificate issuer: /CN=605522e37de26b0d56895ac18ab07d7c784ab93c
Certificate serial: 019747E7309393B0BAE6A9B49645580EC2DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
Manifest number: 0E2C
Signing time: Sat 07 Jun 2025 01:00:22 +0000
Manifest this update: Sat 07 Jun 2025 01:00:22 +0000
Manifest next update: Sun 08 Jun 2025 01:00:22 +0000
Files and hashes: 1: YFUi433iaw1WiVrBirB9fHhKuTw.crl (hash: 8+L1al5AtCDgmwt4+8znm3HK6sCHsOk/slgIy9IKtjk=)
2: v4bbx4Tyrv4mjtMYql77jSIvfEA.roa (hash: A4gl29evMU8HAtsdqZFfkRY14UgWdfJ98W4DA9n97zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:30:93:93:b0:ba:e6:a9:b4:96:45:58:0e:c2:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605522e37de26b0d56895ac18ab07d7c784ab93c
Validity
Not Before: Jun 7 01:00:22 2025 GMT
Not After : Jun 8 01:00:22 2025 GMT
Subject: CN=02691e1d455403cb914d1d4db365f943b83cc451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:47:29:e4:12:8b:4f:8d:1a:b0:79:16:a1:8a:
9a:f9:d6:b5:17:59:14:4b:8f:7e:a3:94:73:24:81:
5a:54:77:e8:e8:af:d5:98:fc:a0:c3:46:9a:ef:d9:
cb:0d:29:2f:aa:ad:5b:26:1d:d8:86:3c:3d:75:ff:
59:b4:c7:eb:8b:57:d5:5f:60:9b:33:c8:ac:1d:8f:
54:14:63:02:01:26:3a:9f:85:61:1d:98:50:90:10:
cb:19:fd:94:48:60:df:73:81:bf:74:db:3f:39:a6:
05:83:47:51:34:41:1b:e2:26:78:f2:70:f5:3a:48:
f0:79:12:3a:e1:47:26:0b:41:66:74:2f:51:61:b0:
05:26:56:7f:f7:93:01:3b:21:af:67:43:2c:63:cd:
5b:9f:a5:dc:b8:38:e7:21:f6:3e:7a:64:77:0b:3b:
40:6c:84:6a:5c:b0:88:24:02:6c:29:86:dc:c1:ef:
49:f5:d4:13:64:2b:2d:f2:98:23:16:65:71:73:9e:
d2:4e:24:43:0f:1c:04:46:7e:48:9f:23:d3:2a:2d:
1d:17:7f:7f:2c:8c:14:08:1e:4d:09:59:75:5d:98:
17:e4:cc:ba:05:85:55:32:46:ba:53:6a:0d:c1:47:
d9:b4:07:e9:8e:86:75:7d:cc:c0:36:45:02:d1:4f:
f2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:69:1E:1D:45:54:03:CB:91:4D:1D:4D:B3:65:F9:43:B8:3C:C4:51
X509v3 Authority Key Identifier:
keyid:60:55:22:E3:7D:E2:6B:0D:56:89:5A:C1:8A:B0:7D:7C:78:4A:B9:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ae:92:d7:d9:e6:08:00:2b:af:32:42:15:9d:4e:f3:cc:49:
d6:1f:48:56:e6:1d:2c:a7:6c:60:15:94:3a:7f:6f:83:ef:27:
7f:a5:f7:6a:75:5f:e5:0d:8e:0d:b0:24:24:35:4a:85:31:a4:
02:f4:03:97:05:47:02:52:80:00:f8:7b:1c:75:0b:a0:90:9b:
b1:05:5c:95:ed:e0:50:19:12:df:1f:e6:66:3f:4d:83:90:cc:
d7:97:f6:9c:4a:98:b9:38:51:01:33:d2:83:a0:dc:f3:5b:fd:
96:3a:b3:3e:f9:13:99:0a:f6:38:da:c1:c1:a5:c2:6b:4d:0d:
32:d8:bf:66:ac:2c:a6:31:9d:b0:2c:f2:43:9a:0c:c3:19:6b:
6e:46:57:06:02:a6:14:ca:14:3a:ea:93:c4:fb:ef:f5:6c:d9:
69:9f:b8:49:40:be:b3:7e:0b:64:cc:79:c9:16:b7:62:3f:f3:
bc:98:ef:5c:a6:5b:91:7e:03:ab:f1:a1:b0:17:14:1a:49:1f:
51:ca:aa:0d:40:82:c1:0d:92:85:d5:ef:df:7b:fe:6c:95:72:
eb:69:f0:5b:e1:b8:4f:df:b6:f8:d0:59:5f:1c:d4:41:1b:5f:
8d:b7:cf:99:3e:a7:3a:fc:d9:66:93:0c:dc:5d:df:96:f3:67:
b3:9d:c3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:14:49 2025 by rpki-client