Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
File: YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft (raw, json)
Hash identifier: 5mYfU6lH9OLhCO82Vxlq5QqQQYPEgLkn84tNKJOM8Nw=
Subject key identifier: 5B:1F:58:48:CC:A0:91:CC:95:1D:AD:CE:E3:FC:1D:13:8E:6C:B1:9E
Authority key identifier: 60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
Certificate issuer: /CN=6050099e335409db03ac1133d164f02a0d5dc66f
Certificate serial: 01974DE96C63F9761D2B4468AB0D14688073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
Manifest number: 0A28
Signing time: Sun 08 Jun 2025 05:00:32 +0000
Manifest this update: Sun 08 Jun 2025 05:00:32 +0000
Manifest next update: Mon 09 Jun 2025 05:00:32 +0000
Files and hashes: 1: YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl (hash: N4pjIzzqJUgdkb+Wqqqd61P8oukil1Fqq3Gbtr0ofi8=)
2: _1S8ifFC66PXKfy6coz8hf3gqnE.roa (hash: OwgGsWr1GQctqMIeUtgkReMkIUwARG+Gbc9mT88WrC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:6c:63:f9:76:1d:2b:44:68:ab:0d:14:68:80:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6050099e335409db03ac1133d164f02a0d5dc66f
Validity
Not Before: Jun 8 05:00:32 2025 GMT
Not After : Jun 9 05:00:32 2025 GMT
Subject: CN=5b1f5848cca091cc951dadcee3fc1d138e6cb19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e9:fe:4c:fd:f6:44:21:8b:34:bb:43:d9:76:
b8:0c:e3:00:b3:c0:f4:cd:d0:28:fb:72:23:f0:78:
03:be:2f:e8:7c:11:c6:b8:1e:e1:9d:ee:17:ec:d7:
f9:07:01:9d:fe:ce:cc:df:c2:db:dc:9f:9c:43:4a:
14:6c:a9:de:75:60:4e:19:ef:ad:c0:3c:81:33:45:
e9:31:5c:7f:c7:a8:83:68:71:ec:c9:40:e8:5f:4f:
99:9b:3e:06:01:77:26:e8:9c:99:5a:4f:97:c2:b0:
af:47:20:dd:92:42:89:b3:53:a3:c0:94:de:c4:c8:
0d:74:28:9f:ef:7a:fc:82:2d:05:d6:fb:86:5a:6d:
03:08:f7:c1:34:5f:40:2a:7c:c4:1f:c2:a9:f2:9f:
57:25:3c:d2:94:a6:72:a1:69:56:f9:16:f6:31:fc:
7f:b3:89:62:80:e4:b3:ad:52:dc:07:4e:57:46:fb:
c7:d5:2e:32:7f:7e:2e:07:72:44:b7:5e:67:db:5e:
f2:f5:52:41:e9:c5:8e:40:9c:6d:01:10:1c:17:1a:
df:ae:80:f0:3e:56:af:88:09:29:09:c8:f9:46:05:
7b:d4:e8:02:42:e9:22:36:e4:e2:6b:2b:db:0b:06:
2f:97:13:5f:b8:15:63:3c:98:51:d9:a6:a1:3b:f6:
70:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1F:58:48:CC:A0:91:CC:95:1D:AD:CE:E3:FC:1D:13:8E:6C:B1:9E
X509v3 Authority Key Identifier:
keyid:60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:af:47:05:60:1e:c1:c7:82:e8:1e:21:82:05:4e:31:c0:c8:
b5:a2:cf:af:9a:3b:30:6d:db:cc:98:d2:76:d3:20:02:de:bd:
e9:53:00:a8:fe:bc:9d:8c:30:c3:3a:43:c8:fe:9b:5a:d3:f6:
45:d0:17:fc:45:4c:ea:ab:3b:21:78:fc:e7:fc:98:a2:7f:a6:
f8:47:f2:10:c6:89:2b:89:69:56:89:c7:2a:89:bb:ab:62:92:
02:4e:96:52:54:fe:13:f4:ed:43:ce:7b:3d:c0:d4:1a:ff:cf:
68:9b:80:89:70:aa:d8:d9:90:9b:24:b1:1e:c6:2c:c3:d7:88:
d9:c5:04:ff:16:63:6d:71:5b:13:1d:27:5e:58:ad:98:b1:40:
11:f5:67:d6:e8:b5:67:7e:61:f4:b8:52:3a:6d:3d:28:d9:2a:
4a:96:fd:55:d5:93:b2:4c:43:ae:2a:e3:f3:69:b5:b2:2e:a0:
6a:52:bf:a0:d1:61:63:6d:3c:0e:39:77:c6:3e:c7:8a:ab:64:
1c:33:7f:e2:bc:6a:87:cb:a9:fb:c7:b0:21:e9:e0:9c:aa:5e:
0f:4a:27:93:c2:93:00:1b:f2:64:fc:21:90:b3:5c:89:25:ea:
42:6a:09:7c:8f:d6:07:59:91:38:38:2f:a5:c4:ce:82:b7:20:
ea:bd:6a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:40:42 2025 by rpki-client