Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.mft
File: YeVlVi0-P1ZenApBlG6lPUXV1lc.mft (raw, json)
Hash identifier: iKNvfSJooVrGngKLqAXUz0vuKt3Aqa+bdTPR/57h56s=
Subject key identifier: 7B:2D:39:A6:C8:A0:3D:72:FB:C6:B7:8D:67:9F:8E:83:A4:DA:82:BF
Authority key identifier: 61:E5:65:56:2D:3E:3F:56:5E:9C:0A:41:94:6E:A5:3D:45:D5:D6:57
Certificate issuer: /CN=61e565562d3e3f565e9c0a41946ea53d45d5d657
Certificate serial: 01975E6EF823028ABA4A5215B51C3F5333AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YeVlVi0-P1ZenApBlG6lPUXV1lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.mft
Manifest number: 0FBC
Signing time: Wed 11 Jun 2025 10:00:20 +0000
Manifest this update: Wed 11 Jun 2025 10:00:20 +0000
Manifest next update: Thu 12 Jun 2025 10:00:20 +0000
Files and hashes: 1: M9EtDFxlEJ9A-FmeV5HNDDZqAp0.roa (hash: WI4ltzw0D8SzP8YIN3g88mLVBUuOvksyWitDll+8J8M=)
2: YeVlVi0-P1ZenApBlG6lPUXV1lc.crl (hash: 7CkZ5zqLdKJ7QanHIhxz+1hUpettLzwsw18lRAP3kiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YeVlVi0-P1ZenApBlG6lPUXV1lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:6e:f8:23:02:8a:ba:4a:52:15:b5:1c:3f:53:33:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e565562d3e3f565e9c0a41946ea53d45d5d657
Validity
Not Before: Jun 11 10:00:20 2025 GMT
Not After : Jun 12 10:00:20 2025 GMT
Subject: CN=7b2d39a6c8a03d72fbc6b78d679f8e83a4da82bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:43:df:13:77:e7:70:fe:3f:46:ae:62:e7:48:
67:78:e7:80:bf:71:cd:d6:33:75:c4:97:82:43:de:
bc:39:da:81:55:b2:58:6f:28:cf:ca:e1:6f:6b:7c:
7e:54:1c:7e:2c:69:1e:c5:5d:dc:23:51:d3:1b:78:
30:63:65:c8:d4:85:62:42:1c:51:80:e0:dc:79:f1:
22:b6:58:26:64:ea:fd:4f:53:ff:74:f1:95:f2:1b:
1a:8b:b3:75:8b:ef:35:5b:d4:30:85:26:51:e1:74:
8f:a8:c1:cd:30:3f:c0:12:45:89:4a:9a:50:de:5d:
bc:00:e5:1b:53:46:f4:3e:04:e2:70:a2:f3:09:a4:
c8:0b:29:16:40:6b:60:6c:16:cf:e0:62:32:56:29:
f6:bb:8b:e3:6f:4c:d1:d7:ed:0e:43:73:94:ba:06:
9e:96:5b:2f:7d:cf:5c:d2:68:0f:7f:e9:2d:6b:52:
af:90:c7:e2:91:41:06:09:29:bc:c6:6a:64:ad:8f:
da:ca:ae:f4:71:11:d4:a9:6e:d6:d1:0e:a7:4b:51:
39:03:6c:d3:ee:f2:cd:33:0c:78:0a:e9:f1:2f:9f:
de:a5:af:80:a1:32:a3:5b:77:2e:1a:61:f8:5c:63:
43:0f:59:f2:f4:52:29:34:af:59:6f:63:5d:ab:03:
39:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2D:39:A6:C8:A0:3D:72:FB:C6:B7:8D:67:9F:8E:83:A4:DA:82:BF
X509v3 Authority Key Identifier:
keyid:61:E5:65:56:2D:3E:3F:56:5E:9C:0A:41:94:6E:A5:3D:45:D5:D6:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeVlVi0-P1ZenApBlG6lPUXV1lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:11:3b:36:2f:6a:27:77:54:99:90:3b:51:0c:9c:32:ed:d7:
63:49:33:bc:d9:39:1f:60:99:23:25:e6:4d:c8:0f:47:92:46:
3e:79:c2:be:e9:99:9b:14:9a:a8:19:5a:31:51:77:bf:8f:d6:
47:e4:53:c6:6e:ff:7f:25:2f:d5:c1:b9:1c:4e:1d:5d:4f:35:
ba:e8:74:7a:45:5b:4a:4b:60:d5:61:4d:bf:51:9d:d8:2f:f0:
55:13:a0:5a:fc:a2:ba:42:e8:d2:ba:e1:87:5d:dc:5a:82:d5:
b3:76:dc:8c:04:e0:41:8a:eb:8a:55:f5:4a:a7:00:94:62:bb:
8a:27:d3:bc:81:5f:ff:98:8e:1f:b3:14:31:f9:0d:da:19:ab:
18:37:e6:5a:04:15:ac:59:ad:5f:8d:87:74:94:3a:26:68:b1:
95:b4:fc:7e:ac:c8:36:d2:50:47:2d:4d:5d:62:b4:54:fd:2a:
64:65:e6:b3:3e:a1:b5:2b:06:4d:3e:90:15:c1:6d:c2:6e:4a:
47:6f:ec:68:a6:5c:34:8e:9b:b2:17:44:bd:03:4a:c7:d9:dd:
83:3f:7d:c8:50:c8:5c:83:b4:ee:b2:13:56:c9:4f:9c:5f:79:
a0:7b:d7:2f:86:05:3f:8b:89:cb:1f:3b:81:06:da:91:7e:b5:
21:3b:a0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 12:43:25 2025 by rpki-client