Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
File: s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft (raw, json)
Hash identifier: DLHjwQpuM4MaJb0W4uq6Y1HtKFTKVWWwNga5t19swkk=
Subject key identifier: 83:99:16:FB:6B:E4:0A:93:76:06:18:14:3E:80:5D:11:6B:56:AF:0C
Authority key identifier: B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
Certificate issuer: /CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Certificate serial: 019748C2EFB63A7B83D569EC421C2B0797EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
Manifest number: 085B
Signing time: Sat 07 Jun 2025 05:00:24 +0000
Manifest this update: Sat 07 Jun 2025 05:00:24 +0000
Manifest next update: Sun 08 Jun 2025 05:00:24 +0000
Files and hashes: 1: MwOTM4NTpYgqtlsKuteambtyY6Q.roa (hash: 15PRhJOGtpjQfaXM28ile3ZgmOfmdwLuAPfdRlgIuMk=)
2: Yn2x7t_9VSdIySXKRiBrfoAkd-g.roa (hash: 5vsDapFH/y4LZ2Hh7KnRvs2tLQL4atDz8jjEX28Quz4=)
3: s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl (hash: gX3r9EHuHQEpzYOa6mXu91PVZ0A5PKJ6LtdACNVjDoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c2:ef:b6:3a:7b:83:d5:69:ec:42:1c:2b:07:97:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Validity
Not Before: Jun 7 05:00:24 2025 GMT
Not After : Jun 8 05:00:24 2025 GMT
Subject: CN=839916fb6be40a93760618143e805d116b56af0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:51:5c:20:07:04:cb:9a:63:c6:aa:42:44:14:
c7:5c:2c:1d:10:7b:2c:82:6f:65:55:fe:9e:b4:e5:
11:ac:ed:6d:21:56:24:b1:26:35:39:fe:de:9d:bd:
8f:ea:1b:82:e7:d5:56:4c:07:77:26:5b:60:06:3a:
d6:e8:7d:bd:79:34:08:9a:fc:e6:ad:fe:0b:41:a0:
eb:75:58:ed:ac:6c:cd:74:1a:ff:6c:a4:79:bd:af:
3b:55:1c:35:2a:fb:d3:f3:cf:9d:97:18:e1:38:3c:
e0:68:fb:1d:1f:31:2b:7c:4e:3d:4b:bb:62:2a:6e:
7c:70:97:a2:0f:a4:56:6b:e0:d3:cd:b5:5d:be:a4:
28:48:6f:d1:96:cf:bc:93:21:03:bf:21:22:d8:5c:
34:7c:ef:1b:f9:68:1a:db:44:1d:1c:01:25:56:1f:
dc:0d:b2:6d:a3:59:30:61:5b:ab:8a:0f:e9:e6:76:
de:76:86:aa:17:3d:d6:c9:6a:2d:7b:d3:59:74:1e:
f8:97:40:41:97:b5:da:f8:7c:4f:78:60:a8:da:c2:
05:40:95:12:f6:b0:53:56:0f:0d:45:81:37:7a:ad:
15:2b:4d:d7:80:a1:0a:a3:a9:0c:cf:fd:50:96:76:
7b:0d:be:ea:51:5a:a4:56:9f:51:58:d0:9d:18:48:
9b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:99:16:FB:6B:E4:0A:93:76:06:18:14:3E:80:5D:11:6B:56:AF:0C
X509v3 Authority Key Identifier:
keyid:B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:9c:86:84:c7:9d:e4:00:51:da:ac:85:da:bc:48:ca:7c:ba:
06:97:f3:48:66:69:bc:02:c9:8a:1a:49:bd:8a:85:64:d9:ca:
2d:6d:1c:10:d2:b2:ac:00:95:68:84:67:76:cc:6a:f0:76:c5:
60:4e:a3:3b:4b:2b:10:fe:ea:a5:78:d6:ac:68:8b:df:f5:e3:
f4:13:de:a7:b5:db:dd:4b:6a:ad:4a:d5:7d:56:38:03:c7:d3:
1f:e8:8b:64:20:15:3a:5d:a8:7d:91:2c:a7:96:3c:04:fc:b9:
38:ba:5a:87:02:a2:44:a6:0d:6d:68:ee:1b:25:87:4a:6e:1d:
2d:b2:ac:31:9a:96:20:e3:73:8f:3d:a4:00:98:de:00:8b:69:
e3:4c:12:41:be:b2:7e:1e:14:38:7b:ad:45:b5:8d:e5:d1:65:
c3:6e:90:5c:93:67:f6:44:2c:77:ed:28:aa:ce:06:57:03:ae:
5d:38:44:79:05:71:0e:eb:ce:a6:4b:65:7b:b3:fc:ee:d7:b3:
e5:40:3a:90:a2:3a:1d:de:e7:de:2b:5c:41:b2:8d:60:e9:23:
57:51:ec:41:31:03:71:d7:fe:ef:63:d3:97:91:56:12:bf:a9:
61:7f:6f:b8:1e:e3:b5:b5:b5:80:40:7b:cd:e8:bb:32:1a:4a:
5c:fb:6c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:15:06 2025 by rpki-client