Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
File: YLeUkCpc09J4P8wqpLB5H3mld6I.mft (raw, json)
Hash identifier: oRDx1hgcCgStDJvKT2V8AjFBKeQa7YQp4D5CEZoOYr8=
Subject key identifier: AD:0F:80:6A:CA:5C:4F:BD:2F:57:8F:A1:6C:47:77:4F:06:F1:DF:BF
Authority key identifier: 60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2
Certificate issuer: /CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
Certificate serial: 019749317270FDD5E47761A42E7E02942B9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
Manifest number: 1527
Signing time: Sat 07 Jun 2025 07:01:06 +0000
Manifest this update: Sat 07 Jun 2025 07:01:06 +0000
Manifest next update: Sun 08 Jun 2025 07:01:06 +0000
Files and hashes: 1: YLeUkCpc09J4P8wqpLB5H3mld6I.crl (hash: /7gLQjJeNFR2lPquo0t1+mgm/HIyT6A9bx3OB8xJgaQ=)
2: bx2zbgFzR2bVaPl_B5ZfOBHYjjw.roa (hash: ud4OsdTxDDqxynACtaERs5qzUlmK1nyDHD7M5p1jW+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:72:70:fd:d5:e4:77:61:a4:2e:7e:02:94:2b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
Validity
Not Before: Jun 7 07:01:06 2025 GMT
Not After : Jun 8 07:01:06 2025 GMT
Subject: CN=ad0f806aca5c4fbd2f578fa16c47774f06f1dfbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:17:44:cd:15:7c:60:28:5c:77:ec:9d:b1:70:
64:57:7b:fa:6b:5f:be:41:46:8f:00:f0:fc:c4:58:
ad:03:d9:f9:e2:e2:b4:a0:40:05:2d:03:fc:5e:bc:
d1:95:06:5c:2f:d6:04:de:76:03:f3:af:c2:c0:cc:
b7:b4:42:2f:63:de:a8:01:6b:1f:3c:ef:1f:b2:73:
f2:e1:11:76:cb:87:02:a0:84:2a:e4:d3:61:57:df:
b5:d4:5b:e6:d8:1b:74:56:e8:65:1e:e3:df:43:0b:
93:99:c8:7e:be:f2:bd:b9:f5:b9:3a:68:90:c3:28:
0e:97:28:ec:23:c9:33:d8:84:27:7a:94:45:a1:ac:
5b:81:23:d7:9f:fb:83:46:77:e3:c2:b9:c6:63:1c:
59:06:d2:58:7f:ab:24:3b:06:40:d2:91:d0:d2:de:
15:3f:5e:86:59:ac:6d:81:59:3b:14:24:de:f3:15:
00:4a:4e:d7:82:2c:36:d7:b4:7d:51:7a:9d:da:9b:
76:72:3e:cc:61:ca:ee:a9:eb:10:91:96:1a:2b:0f:
27:6b:4d:f9:0e:94:34:52:da:ab:51:3a:0a:d2:09:
a9:27:37:55:90:54:de:0f:2e:22:52:c2:6a:b9:06:
c4:11:7c:af:c9:1c:85:0c:1b:b7:8c:97:ed:ec:fd:
5b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0F:80:6A:CA:5C:4F:BD:2F:57:8F:A1:6C:47:77:4F:06:F1:DF:BF
X509v3 Authority Key Identifier:
keyid:60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:bb:50:68:2b:f1:fa:a2:ce:5a:d2:51:cd:04:48:c3:9e:75:
7c:9f:64:12:5f:29:f7:79:86:0e:22:ef:1b:74:e9:d5:a8:e7:
7f:3f:03:5a:30:24:12:91:bd:a6:82:88:71:48:e8:c0:c7:1f:
b9:c8:db:dd:0b:0b:3d:0a:f1:63:ac:13:5f:a5:eb:98:ee:d9:
c2:26:48:48:81:c4:48:f9:3c:f7:04:49:39:8b:b1:5c:c1:84:
52:a7:0d:a0:bc:b5:8f:9d:d3:08:0d:13:2d:96:57:c3:e6:a4:
0c:5a:4f:c2:57:f9:22:6e:20:a7:4b:96:22:2b:ca:56:f3:13:
ed:22:91:fa:8c:b0:42:d6:92:88:a6:e2:bb:50:a3:3b:06:be:
c8:2f:d7:fb:96:5d:05:09:ce:40:3a:eb:2c:16:34:96:cb:2e:
23:1e:0d:49:c2:b1:29:b2:6d:26:11:61:6a:88:70:75:f7:be:
a0:6b:c1:56:d6:e8:6c:2e:75:9c:c9:29:fd:da:75:a3:b5:6d:
8b:5a:fa:53:59:28:c9:0e:c1:75:37:4f:43:1e:41:70:35:37:
9d:04:2e:32:97:38:8d:76:9d:77:5f:5a:22:92:ed:41:a1:49:
37:8a:db:a2:ef:16:f3:2b:df:b0:5b:9d:06:fd:77:10:c1:3d:
98:f2:4e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:29:42 2025 by rpki-client