Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
File: YGVg4D7ogzLu-_ppROvRA4rg6rg.mft (raw, json)
Hash identifier: 2GboxU9fvzDupf/4HowZByxr850fRuhA77+5R0HJ2ro=
Subject key identifier: A7:D7:61:37:AD:56:B4:69:65:E6:7B:DC:59:CC:80:5B:93:AA:DC:DE
Authority key identifier: 60:65:60:E0:3E:E8:83:32:EE:FB:FA:69:44:EB:D1:03:8A:E0:EA:B8
Certificate issuer: /CN=606560e03ee88332eefbfa6944ebd1038ae0eab8
Certificate serial: 019748551D40B7B7852F189316BA29E7D283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
Manifest number: 0D55
Signing time: Sat 07 Jun 2025 03:00:26 +0000
Manifest this update: Sat 07 Jun 2025 03:00:26 +0000
Manifest next update: Sun 08 Jun 2025 03:00:26 +0000
Files and hashes: 1: 6He2HCHOgYmFWCnJx-CHnw1DNw4.roa (hash: R/op20lcuNNKjtAV2ZxOf6+gcTn27jdjTjhCIstJEzU=)
2: YGVg4D7ogzLu-_ppROvRA4rg6rg.crl (hash: u5D4cxSLTeEdl97z9JmFTV9YZ4QBqjhX8gVTFkJSvmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:1d:40:b7:b7:85:2f:18:93:16:ba:29:e7:d2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606560e03ee88332eefbfa6944ebd1038ae0eab8
Validity
Not Before: Jun 7 03:00:26 2025 GMT
Not After : Jun 8 03:00:26 2025 GMT
Subject: CN=a7d76137ad56b46965e67bdc59cc805b93aadcde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ce:fa:85:90:6b:65:dc:62:97:a6:91:10:7a:
cd:fb:a3:a6:67:d4:ed:c3:9b:ca:81:17:ac:a3:d8:
94:bc:1e:55:fa:3f:eb:4e:d1:2e:a5:87:2e:13:76:
97:6c:bd:bf:ad:43:0e:0a:a4:e4:5e:83:29:4e:28:
55:af:5c:5b:21:f7:4d:1e:21:06:96:aa:ba:87:a5:
25:24:74:16:47:88:dc:16:a2:b8:0f:6d:09:7d:64:
de:02:54:9c:90:a2:f8:4a:12:47:78:cb:43:3e:cb:
12:02:77:d8:90:91:27:be:8a:14:14:5c:50:87:f6:
1c:1f:3c:88:af:f9:c1:ac:cc:7c:8e:9d:ca:15:75:
e1:cb:f5:fd:01:59:4c:4e:d8:87:12:73:13:4f:ec:
7c:25:6b:b6:b9:ee:a5:2d:5b:fa:25:51:a5:46:fd:
a7:d8:0e:b9:24:9b:76:e6:36:9a:03:7c:db:e0:3a:
cf:51:12:aa:d5:4f:9e:a1:2e:b2:b1:c1:7a:19:9d:
04:3c:d6:45:a8:a1:d9:29:c5:dc:cf:67:66:3f:00:
bc:c4:a9:87:bb:e3:3e:dc:8c:61:aa:6d:b0:4b:f5:
e5:4b:70:44:67:78:73:51:19:59:42:2e:72:d8:07:
8c:bf:74:3b:14:ff:b5:b2:52:31:8c:63:12:6a:16:
e1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D7:61:37:AD:56:B4:69:65:E6:7B:DC:59:CC:80:5B:93:AA:DC:DE
X509v3 Authority Key Identifier:
keyid:60:65:60:E0:3E:E8:83:32:EE:FB:FA:69:44:EB:D1:03:8A:E0:EA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:bb:db:03:a3:3a:1c:13:df:1d:e2:45:d0:1b:96:be:af:10:
2f:9d:a5:f4:71:d5:cd:a7:c9:b2:0a:80:87:26:64:78:fa:04:
f0:db:dd:d4:71:0b:24:19:91:19:6a:2d:eb:a3:19:a4:92:1d:
ae:3d:ff:54:83:8d:64:57:c3:e7:ac:05:9a:c6:c4:16:4e:e8:
56:c3:1f:30:05:e3:a6:9d:ae:7c:c3:3b:c9:01:a8:96:91:b7:
47:54:ea:f3:e4:e0:7a:b7:be:02:ee:91:37:08:5a:4b:28:8a:
e0:13:99:7a:9e:38:d9:3f:cd:ef:1a:38:a9:c6:f4:29:2e:48:
30:08:66:be:a4:29:c1:25:c4:1c:de:63:ba:e6:45:76:df:d0:
9c:38:e5:e5:c1:b5:e7:28:66:9b:dc:a8:36:6f:bb:71:9e:d7:
0f:21:48:d1:e5:20:27:ec:88:fd:37:c4:48:cf:80:1d:ba:62:
82:34:2b:30:f2:57:10:71:1e:47:60:0b:a9:4e:34:86:2a:79:
6b:91:f3:05:c5:26:af:24:2c:36:86:e7:39:da:b7:ad:98:d6:
3a:a1:6a:52:c0:5b:9f:8f:de:72:bb:49:fc:cd:06:ae:4d:d2:
85:c7:4c:00:8a:ef:de:03:7f:92:03:87:0c:d2:45:3c:75:85:
c3:ce:01:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:24:14 2025 by rpki-client