Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/YTe126q6KK4oyOmpeA-3DCT8kZA.mft
File: YTe126q6KK4oyOmpeA-3DCT8kZA.mft (raw, json)
Hash identifier: YfVMMUWhwu9k5jgd+fZhx0CsPPvDIP7kyPJMHWRQvcs=
Subject key identifier: DD:94:6F:5D:6D:EA:0C:A0:20:13:93:F0:B4:85:B9:CB:66:AB:FB:75
Authority key identifier: 61:37:B5:DB:AA:BA:28:AE:28:C8:E9:A9:78:0F:B7:0C:24:FC:91:90
Certificate issuer: /CN=6137b5dbaaba28ae28c8e9a9780fb70c24fc9190
Certificate serial: 01974DB26001EDC2D18A74D5AB3CDC1E2294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTe126q6KK4oyOmpeA-3DCT8kZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/YTe126q6KK4oyOmpeA-3DCT8kZA.mft
Manifest number: 0BAF
Signing time: Sun 08 Jun 2025 04:00:24 +0000
Manifest this update: Sun 08 Jun 2025 04:00:24 +0000
Manifest next update: Mon 09 Jun 2025 04:00:24 +0000
Files and hashes: 1: YTe126q6KK4oyOmpeA-3DCT8kZA.crl (hash: Qj5wK2WBQbgP/B8Wq4gzpmKwwecuTYNzQbEr7hmWeq8=)
2: y77UWpMS4DRW9Z6BffFmy0sfx48.roa (hash: KSiUNsa6U/vvFkusIhQZvpAT5eNjje7RZN6spA/c4iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/YTe126q6KK4oyOmpeA-3DCT8kZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/YTe126q6KK4oyOmpeA-3DCT8kZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTe126q6KK4oyOmpeA-3DCT8kZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:60:01:ed:c2:d1:8a:74:d5:ab:3c:dc:1e:22:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6137b5dbaaba28ae28c8e9a9780fb70c24fc9190
Validity
Not Before: Jun 8 04:00:24 2025 GMT
Not After : Jun 9 04:00:24 2025 GMT
Subject: CN=dd946f5d6dea0ca0201393f0b485b9cb66abfb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:02:5f:eb:fd:4f:48:3b:b5:7c:7e:52:29:e5:
e7:28:34:f2:8a:81:62:ea:ef:db:e0:ea:04:ff:62:
06:59:d4:5f:16:86:d0:82:4e:80:c9:33:30:87:2e:
14:73:d9:9d:ac:16:ee:5b:1c:d4:6a:5f:b9:c4:e5:
79:ef:f3:49:d4:ae:0f:4e:52:f3:1d:0d:aa:92:92:
a9:de:19:a5:37:07:df:1d:81:e6:d1:3f:29:32:3d:
f9:ca:29:24:09:5d:ca:c4:0e:75:d0:fb:6a:ae:e0:
d7:63:6c:26:dc:83:5c:c4:51:25:5d:35:7f:7f:c9:
ea:f2:14:81:5e:e2:2a:12:ae:02:d5:79:45:c1:40:
b5:f4:a7:ca:d7:5e:33:1e:f6:29:b9:ad:68:53:50:
fb:4e:0c:c8:9c:cb:b5:f2:8b:69:a3:eb:8d:09:99:
02:b0:56:1e:89:0c:a8:aa:f4:00:6f:25:cd:f6:be:
de:c3:92:2f:7a:be:6f:27:a7:29:53:a0:70:3c:48:
56:1c:f5:c7:52:c2:f5:7c:af:14:b1:5b:d1:b1:b1:
be:c8:b4:b1:51:b2:74:48:a0:af:29:e0:25:c1:af:
09:e1:80:35:63:b6:8a:08:ee:f8:a6:b7:23:49:42:
f1:55:1f:d6:34:ff:b2:4e:01:05:62:cf:22:fe:73:
75:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:94:6F:5D:6D:EA:0C:A0:20:13:93:F0:B4:85:B9:CB:66:AB:FB:75
X509v3 Authority Key Identifier:
keyid:61:37:B5:DB:AA:BA:28:AE:28:C8:E9:A9:78:0F:B7:0C:24:FC:91:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTe126q6KK4oyOmpeA-3DCT8kZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/YTe126q6KK4oyOmpeA-3DCT8kZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/YTe126q6KK4oyOmpeA-3DCT8kZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:cf:90:56:b1:ca:e0:0b:10:1c:a5:9d:bb:f0:14:fb:a5:a8:
f0:84:19:11:71:db:34:b5:20:2e:7d:33:cf:11:5e:69:33:73:
58:b4:4e:03:1d:75:1e:b2:c8:3e:c4:98:70:19:85:47:03:89:
f6:ec:32:ea:5f:f5:16:94:9a:00:02:18:39:e4:d3:95:9d:6d:
47:21:12:77:a0:bf:d3:83:af:c7:7a:52:62:70:a5:a5:8b:10:
10:ae:fd:11:8e:de:d1:e0:8e:36:d0:c6:69:83:0c:9f:85:4b:
c6:3c:ce:4f:ff:d3:1e:7c:28:da:bb:01:8b:15:41:86:00:24:
bb:56:f2:55:2c:a1:8d:73:13:15:5d:ae:d5:bd:cd:f8:76:0b:
14:4b:af:99:15:50:f0:ff:0b:c2:ae:67:8f:52:2f:3d:8d:cf:
62:69:9f:b0:cd:4f:30:ed:e5:75:15:0b:be:82:83:59:d0:b2:
50:21:d9:2b:61:fb:c8:b2:94:59:2e:55:9d:6f:ba:44:d9:c5:
0a:e6:e0:91:58:f0:ca:bd:4e:ba:b4:54:c1:de:58:fa:ac:d4:
33:d6:02:00:8a:57:e5:54:23:17:83:8c:e0:a1:6e:a5:d2:db:
26:74:d5:16:98:57:2c:9a:9f:4e:b3:74:88:9f:62:ad:a6:1b:
fa:96:ba:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:41:55 2025 by rpki-client