Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
File: YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft (raw, json)
Hash identifier: l29EPUQaaFlkDXB0VSgk0Ht3EWzfXmOMUXFoVWdH6zQ=
Subject key identifier: F2:6F:11:AC:84:37:8F:0F:57:47:DD:7B:18:C8:64:11:F9:A5:BE:DF
Authority key identifier: 60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A
Certificate issuer: /CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
Certificate serial: 01974AE8DE67DBC69166CEE6AFE74A2AF885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
Manifest number: 1581
Signing time: Sat 07 Jun 2025 15:01:04 +0000
Manifest this update: Sat 07 Jun 2025 15:01:04 +0000
Manifest next update: Sun 08 Jun 2025 15:01:04 +0000
Files and hashes: 1: F-cO8DY5we3ruehpt1DdaGZTJLY.roa (hash: LAS644NvWoPgwtaziFP441ODeculzXhcaX+rYlVwp50=)
2: XXUXKaNBLjG2zXes3zUz4pT_p2E.roa (hash: V04szlA87zJPQWBTLBTTrCqtzJ6gxyAZvxuUSuhQTGs=)
3: YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl (hash: pAnFj9pH3C/PuuKGjYV/mE/3LC8eVQgNI6j/201qaQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:de:67:db:c6:91:66:ce:e6:af:e7:4a:2a:f8:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
Validity
Not Before: Jun 7 15:01:04 2025 GMT
Not After : Jun 8 15:01:04 2025 GMT
Subject: CN=f26f11ac84378f0f5747dd7b18c86411f9a5bedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f2:15:59:81:c7:f7:b2:29:91:87:3c:05:e8:
64:b0:1e:b2:c7:ef:77:1f:90:86:5d:2c:3f:f2:c9:
e5:57:1b:61:e6:20:29:ae:e7:5a:33:c9:9f:98:3e:
13:b1:a0:fa:18:e1:c1:61:8a:5d:31:2b:db:0f:d7:
c7:7c:6f:5a:25:56:74:81:9b:30:4b:09:25:4c:8e:
12:68:93:85:c7:8c:d8:35:10:36:94:7a:83:6b:e6:
a8:5d:a8:46:f8:1a:8d:73:25:8f:f6:f6:bd:85:5c:
5b:b4:e4:6f:82:a9:fa:85:53:29:7f:c5:34:f9:44:
9c:ca:ce:71:c0:3a:cf:50:e9:a4:67:15:02:f2:78:
7e:ee:43:41:7f:d5:ad:49:01:37:8e:27:45:26:cd:
32:6b:24:be:fd:44:0a:30:6a:e2:c0:fd:2e:ed:25:
9a:0c:bb:f8:a2:fb:be:72:f0:9f:2e:6b:91:cd:cf:
06:a2:8c:0e:b5:46:8d:b9:e2:59:75:47:78:77:03:
9f:17:99:f9:af:8b:80:05:a5:a3:5f:0c:a6:04:f2:
79:ba:67:63:f1:17:b3:9d:9e:40:f7:99:3a:4e:2a:
ec:8d:97:b1:2f:b9:e4:7f:5f:91:3d:46:51:3e:68:
f5:61:9d:86:1e:3e:8c:7d:33:61:85:f4:8b:1f:58:
b3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6F:11:AC:84:37:8F:0F:57:47:DD:7B:18:C8:64:11:F9:A5:BE:DF
X509v3 Authority Key Identifier:
keyid:60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a3:d2:77:08:0d:8a:26:49:4c:47:f0:bc:47:7f:33:76:07:
d9:c1:dd:c5:ce:d4:6c:76:44:81:fa:9a:6e:74:3b:39:2d:9c:
ae:f2:ee:69:fd:0f:2c:25:dd:6d:1c:9a:ea:be:78:1e:c4:8c:
e1:89:b9:9e:1c:c8:65:fa:f7:48:f3:ad:1f:78:ed:07:f3:5e:
c6:6a:9d:c0:e2:0d:bc:92:40:f2:0b:d8:41:70:49:9e:df:df:
d0:74:f6:a2:ad:e3:f1:22:01:b1:0d:78:5c:77:53:7c:49:eb:
87:42:c0:0e:e6:9d:91:5e:d4:19:2c:70:e1:27:be:c9:07:80:
bb:7f:e4:88:a8:fc:d7:d6:75:a8:c3:7d:88:f1:0b:17:29:78:
b0:69:ae:ac:cf:f8:a0:41:6f:f8:7c:0d:8b:d6:4a:72:ef:f4:
f3:3c:96:4a:27:2a:dd:35:49:79:f4:39:fd:c2:0c:3a:d9:b1:
56:71:f5:cb:9e:8d:e2:77:0b:da:d3:e8:dd:d2:e2:7f:cc:6b:
55:e6:db:8e:34:dc:20:34:b6:b0:ab:6e:6b:1d:6a:1b:9c:b9:
be:74:98:50:74:9e:d3:f3:b6:25:15:e2:aa:68:76:eb:c8:6c:
5e:2c:29:2b:d7:07:e0:e3:2a:35:e8:6b:97:7a:5f:0c:0b:a4:
05:f6:47:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:42:15 2025 by rpki-client