Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
File: YmFlv7I92h-YcLJBf0lkhebAinQ.mft (raw, json)
Hash identifier: 2AQkCGlOw1uDYuxJGD4ORmUXvTMVXbUt7Jckg52uws4=
Subject key identifier: 0B:02:D5:8E:A3:4D:5E:55:B1:FA:AC:56:B7:DE:E7:20:46:68:FC:D5
Authority key identifier: 62:61:65:BF:B2:3D:DA:1F:98:70:B2:41:7F:49:64:85:E6:C0:8A:74
Certificate issuer: /CN=626165bfb23dda1f9870b2417f496485e6c08a74
Certificate serial: 01976DAB2A971A444FEFAB91C99EF505D9D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
Manifest number: 031D
Signing time: Sat 14 Jun 2025 09:00:23 +0000
Manifest this update: Sat 14 Jun 2025 09:00:23 +0000
Manifest next update: Sun 15 Jun 2025 09:00:23 +0000
Files and hashes: 1: YmFlv7I92h-YcLJBf0lkhebAinQ.crl (hash: SIDa6mpHjJ2jgSrbj4o7B/fjpZw7v8L0mK2iVzTiy5Q=)
2: sqHnWw_DTKSgc5zNQG4iPku5PBw.roa (hash: w6R1JeMOp3KdC2WjMvic0T8urUWBQwEZKMQrdXTts0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:2a:97:1a:44:4f:ef:ab:91:c9:9e:f5:05:d9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626165bfb23dda1f9870b2417f496485e6c08a74
Validity
Not Before: Jun 14 09:00:23 2025 GMT
Not After : Jun 15 09:00:23 2025 GMT
Subject: CN=0b02d58ea34d5e55b1faac56b7dee7204668fcd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:15:f3:80:06:3b:fb:f9:e9:6f:61:6c:b4:27:
6d:5f:30:94:9f:60:b5:eb:f1:7f:57:ed:25:54:54:
41:1f:ee:52:bb:e4:41:0c:e6:52:0a:6a:07:ad:6b:
c8:c2:12:a8:2b:97:d2:2f:1c:b7:6b:15:32:1d:e1:
ad:21:15:a6:f9:c1:63:fb:96:74:c5:1f:5d:4b:7e:
b6:43:66:fc:ed:1d:ed:62:0d:20:50:bf:23:97:da:
e3:1e:10:05:cb:fd:1c:40:68:f3:a1:29:33:9f:94:
ff:4d:bb:e4:6a:d5:8c:47:cb:be:01:66:78:79:28:
83:46:dc:cf:d8:de:00:5b:35:ee:3d:03:16:c9:8a:
f5:8a:56:95:e0:24:02:80:8b:70:16:6c:e9:6d:a2:
83:d9:61:05:2a:7f:ed:2c:26:a5:ca:1d:42:8b:8c:
60:c9:11:2b:78:85:a8:2e:5a:7d:4e:f0:77:ab:8d:
a8:e8:c1:73:a1:51:22:da:7c:2c:37:49:62:ae:8a:
40:f8:1d:ee:8b:02:d3:6b:8d:b3:db:d8:0d:c1:11:
20:c5:a3:0b:c3:a5:ff:ee:37:e1:a4:c7:93:67:65:
c9:63:21:0b:93:ac:3f:24:3b:a5:ce:ba:45:1f:71:
c5:f8:c3:6a:3f:8f:7d:70:28:d8:1c:24:34:ad:49:
d1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:02:D5:8E:A3:4D:5E:55:B1:FA:AC:56:B7:DE:E7:20:46:68:FC:D5
X509v3 Authority Key Identifier:
keyid:62:61:65:BF:B2:3D:DA:1F:98:70:B2:41:7F:49:64:85:E6:C0:8A:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8d:5a:72:39:65:ff:26:9d:5a:2c:09:d2:01:61:30:00:59:
8f:b0:e6:00:95:29:a2:72:f6:e8:dc:ff:d6:07:16:ca:7c:b5:
0b:33:cc:d4:c6:01:9a:4f:7c:4e:d2:21:14:4c:f1:e0:dd:5b:
be:d0:81:1a:a7:4b:ff:96:36:37:00:04:53:37:81:c5:38:9b:
db:e8:d3:6a:c0:ba:36:89:20:40:71:fd:d4:ff:a4:f8:41:c1:
80:c1:b4:27:66:24:45:dc:57:b5:5e:0a:f7:1b:d1:eb:ed:cc:
fc:cc:a0:8a:f0:4b:56:53:53:c9:dc:f0:15:6c:68:eb:d8:cd:
ee:90:bd:c5:bd:e7:30:35:25:87:d7:37:c8:fd:76:6a:76:9e:
0a:06:ed:09:1d:ac:d3:fc:e3:9c:47:e0:43:ec:d9:3e:58:c3:
38:26:ad:bb:3a:e4:a5:15:5d:25:f2:04:e1:05:c9:f1:1b:11:
70:a0:2c:73:ad:70:30:23:36:62:a8:74:4c:93:6a:12:36:94:
b8:9e:93:e4:b1:94:d0:a6:96:06:d4:a8:d1:50:4c:c7:a8:07:
74:6d:ed:27:8f:7c:74:f4:b5:df:1e:0a:e8:9d:da:d0:28:c8:
dd:ca:77:48:08:cd:c6:8f:33:12:b1:c5:77:d9:6a:67:61:50:
88:57:ca:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:56:44 2025 by rpki-client