Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
File: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft (raw, json)
Hash identifier: KQ225zkuuIIq1yAhza3c/vM7MC1mxkrqSwloMZCAZjQ=
Subject key identifier: F8:54:94:4F:DA:11:43:27:06:71:47:A0:EA:2F:22:A3:12:3C:57:DC
Authority key identifier: 60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
Certificate issuer: /CN=602dc2478a4bdde4c440bb58802410d2340a490e
Certificate serial: 019754C7302D22DD70A6A3FA30AB28A61CC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
Manifest number: 0312
Signing time: Mon 09 Jun 2025 13:00:29 +0000
Manifest this update: Mon 09 Jun 2025 13:00:29 +0000
Manifest next update: Tue 10 Jun 2025 13:00:29 +0000
Files and hashes: 1: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl (hash: XkfIF6z71ykjyoau3ee0AHrbtm4nLEKF6R3QM6Lg61U=)
2: smYq7tWRQmDSDcZOZxN4k09kn3E.roa (hash: 1xSS1KTZCTSL9vZ9IsBObZKtAhuEJnmAaQ1yOo8feWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:c7:30:2d:22:dd:70:a6:a3:fa:30:ab:28:a6:1c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602dc2478a4bdde4c440bb58802410d2340a490e
Validity
Not Before: Jun 9 13:00:29 2025 GMT
Not After : Jun 10 13:00:29 2025 GMT
Subject: CN=f854944fda114327067147a0ea2f22a3123c57dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:70:ce:e9:f0:37:10:fe:2b:2e:30:91:0c:f9:
96:ce:00:65:4b:5b:7e:12:a4:33:51:07:82:30:49:
c5:b6:bd:70:f0:23:1a:2c:c2:a4:f5:cc:44:8a:73:
06:91:65:24:6f:4a:08:dc:2c:a3:28:b0:b4:1a:16:
cb:77:63:cc:ad:20:ae:9f:0f:7b:14:54:8c:be:2b:
77:03:90:5c:00:4b:2f:f9:1c:52:c3:b4:47:26:74:
78:3e:a0:fe:16:97:ab:e2:bb:0a:ce:61:db:76:9b:
98:d2:4f:42:04:3f:b9:9a:61:52:23:b0:dc:ca:a0:
ed:58:d8:a5:7f:ab:ad:cf:31:cc:69:8d:61:25:96:
9f:2e:b2:a4:99:0c:9b:8a:a4:25:6a:dd:b4:62:1a:
6c:ea:77:44:1f:39:85:87:ff:6a:7b:ce:9b:c1:94:
45:b7:21:ac:27:7b:36:fa:51:bc:d9:b9:df:e7:8c:
de:55:ac:3d:15:15:a9:79:f5:3a:33:7f:78:6c:20:
12:61:2b:02:18:86:70:a9:91:4a:62:9d:78:35:cd:
a2:a7:04:78:69:f3:e5:ff:34:ac:15:ef:58:e7:95:
75:53:75:ad:4b:e0:d5:61:0d:28:44:89:ef:7c:68:
ad:64:88:a5:e1:bb:99:59:4a:04:1f:0e:ce:7d:47:
2f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:54:94:4F:DA:11:43:27:06:71:47:A0:EA:2F:22:A3:12:3C:57:DC
X509v3 Authority Key Identifier:
keyid:60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:06:b6:13:18:8b:69:a4:52:4d:83:a0:a0:ef:8c:ab:42:32:
b2:32:47:e2:5e:b0:c1:a8:eb:82:5c:c8:36:a3:d1:9c:d0:db:
97:b3:2e:dd:7e:2b:a8:d1:98:f1:cc:f0:91:20:3b:2c:0a:40:
6e:f2:b5:34:c9:69:77:92:93:8a:ee:20:12:ff:d7:4e:5c:f7:
5f:35:4f:d0:9b:62:d7:57:5d:d7:84:ea:ac:94:9f:cd:98:c1:
97:6c:51:3c:36:14:22:34:06:40:a8:bd:36:bf:26:1e:76:41:
a9:4b:53:6e:30:da:d9:9b:37:c0:46:67:91:5f:b9:d5:89:e9:
be:58:e1:0e:a0:c8:46:6a:90:95:d9:9e:3e:bc:ca:f9:6e:b6:
92:d2:56:fe:c9:4c:61:43:c2:64:e4:53:bd:d4:9f:15:a8:dd:
a5:d0:ec:16:e4:93:d8:90:5b:b4:ea:f9:9f:5b:a0:b8:15:0b:
f9:03:ec:69:ac:88:ac:4c:d9:83:d8:03:24:db:f2:ec:7d:01:
47:87:64:1e:f2:06:d8:90:c5:e5:be:4f:ad:fe:3f:e3:b4:58:
26:07:e7:08:0c:67:78:2e:c0:12:89:25:ad:fc:2d:b1:be:55:
75:ec:3a:fc:1d:75:c9:d9:06:87:bc:e3:50:1f:de:a4:3b:ca:
fa:4f:49:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:05:17 2025 by rpki-client