Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
File: YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft (raw, json)
Hash identifier: uQDp2wTQNNgL0gH4+LUfU/Jd8ukG/mx4L3Iar12e0JI=
Subject key identifier: 32:3B:15:1C:0A:F0:47:49:0B:FD:0B:0E:75:3E:68:51:E0:C9:83:F8
Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25
Certificate serial: 01974AE8FE8F81F710067D23180434E8575E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
Manifest number: 14AA
Signing time: Sat 07 Jun 2025 15:01:12 +0000
Manifest this update: Sat 07 Jun 2025 15:01:12 +0000
Manifest next update: Sun 08 Jun 2025 15:01:12 +0000
Files and hashes: 1: YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl (hash: iP2aSF+6KW+mP3JfouTWbsSx4palSOavctI7JfREto0=)
2: _wocLw8I_D0bWM_gydbHP3YBnWM.roa (hash: ipZCy+v8LxPOj8oL+HxTUZYzmJcHqr9rYLmV463tU+U=)
3: jP1IuFeYqRVYzU2ZxiYcMgwYBwo.roa (hash: 8tUnk9Rc0BoFNUvYX8+NZuDnDdmkv70Pafdtm7lPIM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:fe:8f:81:f7:10:06:7d:23:18:04:34:e8:57:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a14553cacf103274d433e6b268066e01541b25
Validity
Not Before: Jun 7 15:01:12 2025 GMT
Not After : Jun 8 15:01:12 2025 GMT
Subject: CN=323b151c0af047490bfd0b0e753e6851e0c983f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b4:f4:6f:51:0d:9c:78:85:8f:33:2e:bf:bb:
b6:11:1e:d7:cc:d9:ac:57:d0:89:b5:c0:3a:70:75:
46:c1:25:3e:cf:72:ac:b0:6d:5a:88:ae:8c:52:3c:
53:9e:57:40:61:7e:18:ea:df:fc:56:32:bb:59:0d:
0c:4d:0d:f7:9a:10:49:be:f2:78:42:62:75:71:f3:
d4:9c:6c:00:9b:44:02:25:dc:16:9e:de:74:f5:ed:
ab:bc:4a:cf:cc:cb:04:8f:a8:c6:64:c9:3d:9c:d5:
e8:22:7d:07:ce:33:ae:5e:aa:be:25:b9:74:8d:e6:
aa:0f:3a:24:e1:2e:ff:07:11:4c:67:8b:c3:37:4c:
e1:f8:c6:ea:16:bf:9a:09:33:34:60:1f:b4:36:68:
b5:d0:fa:a3:94:3e:54:4f:63:ad:e6:f6:c3:01:6c:
f4:56:bf:65:7c:86:1c:4c:61:52:ab:92:37:fc:02:
6a:28:76:b6:35:a8:ca:be:b7:88:34:b9:76:48:32:
5b:3a:f8:c4:ff:37:ba:61:62:31:e0:86:02:d3:72:
d1:ab:75:b9:30:48:13:cd:65:29:e4:43:de:b4:76:
53:bd:7c:76:6e:48:ca:e8:b1:40:c8:d1:47:88:ab:
f7:99:f9:51:da:55:df:59:9e:04:97:4f:70:5c:31:
3a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3B:15:1C:0A:F0:47:49:0B:FD:0B:0E:75:3E:68:51:E0:C9:83:F8
X509v3 Authority Key Identifier:
keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:6c:97:6a:86:0d:56:75:6a:7a:31:93:9e:ca:03:07:88:5e:
88:67:11:e1:99:7b:42:61:28:3e:2c:1c:cc:1e:cd:80:2a:a1:
53:13:1d:1b:2a:a9:75:5c:2b:e8:95:59:20:04:7e:f5:77:dc:
ad:6a:9f:68:8c:40:25:fc:8d:25:f0:79:65:d7:c6:b3:1b:cb:
3c:2e:34:dd:0f:34:75:9a:ed:37:75:17:f9:7b:dc:e6:3b:6d:
de:7a:d5:72:36:51:38:10:df:9b:21:8c:ae:15:c4:a9:22:cb:
97:68:d8:0a:dc:9d:4a:2f:c1:e8:c8:bd:ff:8e:f7:59:de:ae:
de:b3:70:1b:19:2e:06:08:20:03:1a:ea:be:e0:32:aa:03:96:
04:cc:4b:9d:6e:69:e9:b8:93:5d:d2:3f:df:83:12:e2:82:e3:
d2:9d:ec:78:d9:a9:d1:83:5d:38:0f:10:0c:26:35:0b:db:02:
a9:ea:c0:03:3a:90:1e:d8:89:02:25:69:b0:b6:13:c5:f6:64:
9a:82:e8:e1:99:fc:3c:5d:71:bf:64:1d:21:b5:ad:14:f6:f7:
b8:91:bc:1e:e6:df:9b:51:e1:b2:3a:98:78:d6:5f:d7:38:8c:
4e:9c:35:29:68:34:2c:3f:e2:2b:c8:24:fc:ae:94:02:4b:69:
19:73:90:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:10:37 2025 by rpki-client