Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
File: YNxaADaNiuH7qZVDHwOkExrdipo.mft (raw, json)
Hash identifier: Vbbt7sEPkBMN0fsMwv1PoHJidDxhW6a2O8a77F+y0Eo=
Subject key identifier: 5F:53:0A:B6:8D:84:39:20:59:23:0B:0C:D4:CF:97:D4:F8:77:B2:51
Authority key identifier: 60:DC:5A:00:36:8D:8A:E1:FB:A9:95:43:1F:03:A4:13:1A:DD:8A:9A
Certificate issuer: /CN=60dc5a00368d8ae1fba995431f03a4131add8a9a
Certificate serial: 019748FA37B25CDF5F8E220637A3C147AB06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
Manifest number: 0728
Signing time: Sat 07 Jun 2025 06:00:47 +0000
Manifest this update: Sat 07 Jun 2025 06:00:47 +0000
Manifest next update: Sun 08 Jun 2025 06:00:47 +0000
Files and hashes: 1: 2eWTXc6MdHH3SvAeJM9n6ydZI5Y.roa (hash: XnJT5JSjqE4Adj+ylm025sl/JK+1c1iwTV7Ra2tEO8w=)
2: YNxaADaNiuH7qZVDHwOkExrdipo.crl (hash: eOH7CXpDkKCl9CNjfxhSrc5Z0G/kdFum2XThuw+S4UA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:37:b2:5c:df:5f:8e:22:06:37:a3:c1:47:ab:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60dc5a00368d8ae1fba995431f03a4131add8a9a
Validity
Not Before: Jun 7 06:00:47 2025 GMT
Not After : Jun 8 06:00:47 2025 GMT
Subject: CN=5f530ab68d84392059230b0cd4cf97d4f877b251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:80:b9:27:f1:79:a5:34:33:ea:7c:79:87:61:
9e:34:d9:42:82:7e:1b:d1:b6:2c:eb:dc:de:12:4e:
af:f9:0e:11:b8:73:8d:88:28:19:51:33:3f:dd:cc:
7e:f2:6c:2c:b3:1a:b8:33:f4:72:b4:e5:ea:9b:36:
55:73:11:70:1f:ec:6a:90:5a:5f:b4:eb:16:d3:2b:
cf:ca:6d:76:e6:53:e2:81:f8:b1:a4:56:14:ee:14:
c9:f4:47:ed:b3:69:ab:f8:f9:dd:0d:57:9f:50:3f:
f5:11:0f:94:ce:32:a3:48:df:25:74:b1:d5:c9:91:
2e:9d:76:bc:0e:e8:69:f8:f7:9c:c1:f1:94:16:ea:
89:97:c8:ac:b2:c6:35:e7:60:d5:10:38:c5:83:94:
93:e3:a3:80:9d:23:20:3f:30:0e:bc:6f:1e:f5:48:
c9:56:b8:fa:ef:2a:e9:26:e9:9d:9e:0f:f5:f4:f1:
19:07:af:96:48:1b:97:b7:c3:80:3e:c9:bf:0e:39:
a9:a8:77:d7:79:7f:03:93:a6:ad:5f:35:8a:fd:68:
23:67:e2:e9:d9:d2:90:78:04:85:64:66:f1:78:03:
7b:ac:ac:94:fe:5c:75:41:15:98:c8:54:3a:1b:4c:
05:54:b1:c1:91:e3:a3:f0:d6:6e:b9:7c:ee:df:56:
54:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:53:0A:B6:8D:84:39:20:59:23:0B:0C:D4:CF:97:D4:F8:77:B2:51
X509v3 Authority Key Identifier:
keyid:60:DC:5A:00:36:8D:8A:E1:FB:A9:95:43:1F:03:A4:13:1A:DD:8A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3a:e8:8b:e4:18:12:36:d4:57:58:51:0a:e4:d3:5c:8f:39:
5d:5a:d6:f6:8d:b3:4a:b2:ef:88:15:3f:94:85:49:1d:33:29:
59:fa:fb:4c:81:56:66:77:16:55:a5:ff:2c:cc:4e:f0:9b:74:
52:31:19:65:a2:57:aa:27:e1:a7:78:be:7a:f0:54:a8:07:15:
53:67:d9:13:9c:00:2d:f0:57:be:d5:bc:fe:31:bc:90:47:66:
12:80:b3:56:4b:7f:b6:8c:38:f8:88:05:f8:45:f9:af:fd:15:
31:5a:81:81:dc:a6:ca:66:e4:35:29:02:1f:5b:1f:1c:05:6a:
06:f1:1c:9d:7b:5c:16:30:06:a9:3a:52:f1:17:e0:2e:37:78:
b1:5e:bc:18:9a:db:30:72:69:4c:71:5f:80:a2:95:2e:bf:84:
78:0b:a3:b3:9f:60:5b:33:3b:39:1d:a2:44:7e:d9:37:fd:91:
34:a0:25:cb:6d:46:d9:ff:a4:7a:32:f4:9f:5e:86:85:60:4b:
31:74:0b:88:64:91:11:b3:25:8b:5c:3f:75:02:98:78:1e:32:
e8:d2:c6:74:a1:91:ab:c6:63:9c:c2:12:fd:cf:58:5e:cd:ee:
72:50:3e:5f:c2:44:c3:80:48:bc:3f:51:1a:b1:33:d5:6a:5e:
1c:a0:f5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:02:54 2025 by rpki-client