Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft
File: YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft (raw, json)
Hash identifier: R5uf/ZvFCcC1FdAOpbV7Wmjv/t0Y36lkDD6RR+AinPM=
Subject key identifier: D1:2C:90:84:52:1A:E0:BC:89:21:3F:98:00:BB:41:BD:99:DD:4E:74
Authority key identifier: 60:34:56:1C:03:9A:C6:45:0B:EC:8F:D5:95:C1:48:CC:77:0A:A0:36
Certificate issuer: /CN=6034561c039ac6450bec8fd595c148cc770aa036
Certificate serial: 01974A0CE4AE0FC5D3AFD27D184B3103FD53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDRWHAOaxkUL7I_VlcFIzHcKoDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft
Manifest number: 025B
Signing time: Sat 07 Jun 2025 11:00:48 +0000
Manifest this update: Sat 07 Jun 2025 11:00:48 +0000
Manifest next update: Sun 08 Jun 2025 11:00:48 +0000
Files and hashes: 1: 7xDyuzwf2JBogicNs1WCGieFUKo.roa (hash: KauAldM8NLiLBGjbpKvhWpk4brd0+mLiraKkETNshfA=)
2: YDRWHAOaxkUL7I_VlcFIzHcKoDY.crl (hash: JT3QcLUCMb22scnw8dfxUJLbX7OZD9oCpilMkCYpVds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDRWHAOaxkUL7I_VlcFIzHcKoDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:e4:ae:0f:c5:d3:af:d2:7d:18:4b:31:03:fd:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6034561c039ac6450bec8fd595c148cc770aa036
Validity
Not Before: Jun 7 11:00:48 2025 GMT
Not After : Jun 8 11:00:48 2025 GMT
Subject: CN=d12c9084521ae0bc89213f9800bb41bd99dd4e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:74:8b:22:89:f7:06:67:4c:49:5a:b9:2b:05:
89:88:7e:ae:f5:e4:bc:91:5b:a7:5b:17:1a:e3:b0:
d3:e7:e0:54:8f:f1:0c:cd:d2:2d:3b:bc:32:ab:45:
91:1a:58:0a:dc:b7:53:61:57:b4:7b:16:4d:cb:4e:
94:52:f7:92:dd:5c:0e:1d:7b:81:84:3b:36:92:20:
64:4f:ad:bb:88:7c:80:dd:ca:93:6b:ff:89:4a:53:
5c:88:2d:f1:24:fb:d1:aa:fa:37:15:e0:e5:04:06:
dd:66:60:81:dd:a0:d3:fd:66:3e:f2:b6:08:fa:40:
26:26:b0:8f:e5:99:10:a0:c1:54:42:be:68:29:15:
40:a3:e3:1b:1d:26:4d:79:c6:19:63:4a:e8:d7:fb:
44:05:90:5f:69:d5:4c:bd:1f:07:63:61:4c:5c:d4:
5f:ca:a8:e8:9d:29:e8:1b:91:98:b8:b6:3f:7b:94:
62:62:f9:6c:70:1b:86:3b:66:b5:18:52:10:86:8e:
12:ce:1e:a3:be:95:f6:5a:7c:46:cf:f2:4a:b9:a8:
a6:5d:11:e6:2c:e0:36:b2:ae:da:8c:27:36:aa:b9:
d3:37:a9:33:9b:e0:a2:58:ca:db:af:82:ce:f3:0b:
34:2f:6f:ec:d6:43:35:20:31:b0:da:da:85:0b:e8:
74:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2C:90:84:52:1A:E0:BC:89:21:3F:98:00:BB:41:BD:99:DD:4E:74
X509v3 Authority Key Identifier:
keyid:60:34:56:1C:03:9A:C6:45:0B:EC:8F:D5:95:C1:48:CC:77:0A:A0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDRWHAOaxkUL7I_VlcFIzHcKoDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c5:f6:e6:45:4b:21:2b:43:b4:fa:1f:62:e0:31:58:ce:0d:
37:e5:bf:f4:aa:d2:ec:ab:87:f5:e4:c1:81:5b:7e:b6:ef:37:
cf:f1:8e:ef:aa:38:b5:54:0b:f2:be:d2:f4:3c:c6:84:1b:da:
00:52:dc:20:a6:56:3d:ad:a3:35:f9:10:ff:fa:c6:22:bb:6d:
7c:23:d2:8a:96:e0:5f:64:88:11:51:4f:08:30:f4:db:0d:02:
cc:16:f1:ad:67:f2:9f:ae:20:79:47:8a:62:8a:e6:03:0a:43:
bb:aa:fb:bb:b3:bf:de:9c:36:41:7a:ca:31:54:b9:9e:ee:45:
a5:a4:ca:d5:e0:da:14:6f:5f:2a:b5:2b:96:b2:5d:f7:cf:f2:
3d:d8:0e:1a:08:0f:57:e6:40:d7:b6:85:1f:0d:dd:a5:87:73:
97:93:fd:49:93:ab:83:d4:f3:e1:7e:98:5d:d2:54:2b:2f:21:
b6:df:54:73:68:b0:70:17:5f:a5:17:19:a0:bb:3a:49:7a:b6:
62:d2:21:94:2c:1a:4e:08:a1:cc:38:83:8b:dc:f3:f6:b3:6b:
ba:2b:ca:6c:d3:3a:b9:bc:87:88:9f:cd:a4:2f:7a:83:5b:da:
98:f8:45:d8:3a:e9:50:f5:90:86:de:90:43:95:9b:9c:83:38:
ac:50:13:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:19:53 2025 by rpki-client