Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
File: YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft (raw, json)
Hash identifier: zFJeUlmaYLycXDORFs968fbNKfxKp3K1TeiI7Xi+itE=
Subject key identifier: 68:8F:F7:B6:35:DF:BD:EB:06:66:EA:31:CC:27:73:76:B9:00:00:42
Authority key identifier: 62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92
Certificate issuer: /CN=62927b36b138f086358938e3acfda4638e56a792
Certificate serial: 0197417799934E7DAF1D73746899861DDBEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
Manifest number: 12B9
Signing time: Thu 05 Jun 2025 19:00:46 +0000
Manifest this update: Thu 05 Jun 2025 19:00:46 +0000
Manifest next update: Fri 06 Jun 2025 19:00:46 +0000
Files and hashes: 1: 4shZBDKZZPGnSQMfuQiOImBHql8.roa (hash: Jfoq3n1s/kyNKvCWlVGyWbHUx4CSO8/9+CCCYgnc/Us=)
2: FA2h5OHRpegZzdAFMMwkYVBg-BM.roa (hash: 9GzazJbnHKp6+I1Ph8x2q38kHV8Nlnih0rihfAr5aBo=)
3: YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl (hash: XqmtLEyJTq3/YnQUzFTeb4PPMWIUSR9TfttwTM1HhPw=)
4: ZEOW67E73LjGkhRbjT8p8HAuQ7g.roa (hash: 3byQhC85THLNsX/WfVA4T3mVllKuuMpO1Ynx6g/Ksak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:41:77:99:93:4e:7d:af:1d:73:74:68:99:86:1d:db:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62927b36b138f086358938e3acfda4638e56a792
Validity
Not Before: Jun 5 19:00:46 2025 GMT
Not After : Jun 6 19:00:46 2025 GMT
Subject: CN=688ff7b635dfbdeb0666ea31cc277376b9000042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fa:28:f7:20:84:7a:d0:66:71:8a:6d:67:3d:
37:d5:93:7f:f6:ed:1b:96:19:8a:07:6f:f2:d1:dc:
6c:2d:08:98:d4:90:ae:83:19:c1:94:f9:65:7a:19:
39:26:c0:c6:4f:b9:f4:26:c7:bd:68:b5:25:a9:6b:
c8:55:1e:bb:8e:8f:52:b2:13:9a:fb:f3:a2:8a:80:
87:bd:2d:d0:5c:b0:8c:ab:7d:04:4e:19:06:e8:f0:
70:12:33:1c:1c:50:f0:0d:fe:d6:08:c0:75:b3:e7:
d3:7f:68:69:0b:c8:33:7f:97:12:58:fe:e7:be:36:
ac:51:ea:ca:86:88:16:0c:a2:d9:2f:27:de:d6:07:
73:be:06:b7:d7:cb:58:58:d9:c3:f8:18:80:90:0c:
0b:7d:55:65:0e:ab:d0:11:89:06:31:f1:8a:e5:55:
c5:d0:69:92:62:61:51:74:18:7a:75:11:39:e8:da:
c1:d9:14:02:4c:c4:35:cf:03:04:f4:fd:58:db:ce:
fb:1a:ea:ce:f1:bf:bf:e3:89:17:8d:e6:aa:13:2b:
23:0e:8e:1c:80:8a:ec:6a:a8:4d:79:40:98:d3:fb:
57:ca:ee:1c:98:5d:fc:d9:69:35:03:01:a3:8d:af:
79:1d:30:88:2b:59:33:f1:46:88:eb:2e:46:a7:92:
29:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8F:F7:B6:35:DF:BD:EB:06:66:EA:31:CC:27:73:76:B9:00:00:42
X509v3 Authority Key Identifier:
keyid:62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:fe:77:08:79:bf:0f:88:c0:02:1c:83:27:da:9f:73:0c:b1:
12:6f:2b:76:56:12:e0:68:0d:2c:9e:61:c0:c1:9f:a7:3b:4c:
68:11:98:95:a9:ed:d8:72:a4:d6:d5:17:a3:24:97:c0:cb:0b:
18:ca:e5:96:d2:08:a6:74:91:7c:08:d9:0c:a1:1b:cf:7c:50:
6c:f8:1a:cf:16:c2:ae:38:ee:4e:9e:17:20:b7:5e:bf:5e:4d:
60:cc:8a:f7:e7:25:38:fd:ac:0d:76:bc:16:99:8a:2a:da:c1:
19:dc:e3:61:89:ac:f2:3a:33:31:0f:db:cf:e4:30:d7:f0:1f:
51:f1:07:62:3b:39:d0:16:ff:1a:2a:18:1a:2a:58:74:0c:77:
3e:95:f4:a5:cb:d9:0e:93:83:24:7c:62:d6:73:b5:f7:59:84:
dd:c1:84:24:cb:22:59:36:87:67:72:8d:fb:60:2d:e3:e8:e2:
6e:ab:63:bb:96:9c:07:3b:83:b6:e2:0f:c2:bb:f8:c3:cb:3e:
3b:97:44:fb:bc:c0:81:a9:28:a6:23:04:09:ef:40:8d:d1:b7:
af:05:04:01:74:89:ca:fc:04:10:85:1f:a4:e6:47:5d:7d:c2:
bf:f0:4b:26:77:fe:3a:8a:8f:d9:df:2d:cf:2f:8a:53:22:51:
41:10:7d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:42:11 2025 by rpki-client