Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
File: YKzX2WuVbeXbA2c80dHjo3uN2d0.mft (raw, json)
Hash identifier: O4cO6e9kpNkrUiK5Dbk2S+gg7ZVMrYdlxN6sMAitKtE=
Subject key identifier: 44:48:88:1C:7D:71:EC:D1:64:43:12:46:84:16:F8:36:EE:59:14:89
Authority key identifier: 60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
Certificate issuer: /CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Certificate serial: 01976515EB45250920EF85D82779E16BB285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
Manifest number: 04DC
Signing time: Thu 12 Jun 2025 17:00:24 +0000
Manifest this update: Thu 12 Jun 2025 17:00:24 +0000
Manifest next update: Fri 13 Jun 2025 17:00:24 +0000
Files and hashes: 1: WR90m5DgvTuhngQTVt_A_5zUod0.roa (hash: FY/boCiP1n6kQ8OnKj08oNsixb1HE3QlDcsMak5j0Lc=)
2: YKzX2WuVbeXbA2c80dHjo3uN2d0.crl (hash: fLmYlrZko8VMMbrpiIufuDqOgfHSLKFIzKeUjpWKDO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:15:eb:45:25:09:20:ef:85:d8:27:79:e1:6b:b2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Validity
Not Before: Jun 12 17:00:24 2025 GMT
Not After : Jun 13 17:00:24 2025 GMT
Subject: CN=4448881c7d71ecd1644312468416f836ee591489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6a:d4:58:6c:8a:75:39:1b:94:f9:1c:81:96:
6b:b7:25:48:40:10:27:67:41:e9:00:e7:1a:e1:95:
3b:c0:5a:97:17:e6:bb:a1:1b:00:4b:fc:a0:3a:7d:
ab:5e:9a:d3:af:30:2c:ef:2e:ea:85:49:0c:d0:ae:
27:ba:81:78:69:37:6a:94:69:9a:61:58:c6:0c:0c:
dc:bf:bb:62:3c:88:e8:df:37:d3:dc:1d:2d:c6:b1:
4a:ec:b4:9b:21:c7:62:b8:72:d8:e3:de:2a:a3:47:
b4:9f:6d:00:6c:07:15:7c:cf:ed:28:18:a8:7f:23:
69:02:f2:09:ea:7d:9d:b3:7e:98:83:dd:e8:43:93:
36:d3:11:91:1b:1a:eb:ac:95:2e:f5:69:d1:e1:18:
51:6b:d1:1a:04:7e:e4:4e:63:0b:01:13:17:c0:d2:
db:45:00:4b:db:f5:ad:c4:b2:c9:4a:95:58:19:1c:
26:ee:88:99:2c:cd:5f:b2:1f:e4:f8:11:22:f0:9a:
3c:73:c6:db:36:20:1c:bd:2d:41:ce:f1:9b:ba:ee:
22:c6:5f:9f:3b:75:7d:5a:03:72:fb:cf:8f:d7:86:
b2:24:72:9a:af:74:cc:00:b6:86:30:38:ec:af:59:
c7:85:a0:13:1c:f2:d4:c0:21:1f:ed:f7:b2:0c:bd:
e0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:48:88:1C:7D:71:EC:D1:64:43:12:46:84:16:F8:36:EE:59:14:89
X509v3 Authority Key Identifier:
keyid:60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:c3:44:4d:2d:92:70:e2:eb:9e:ce:be:4a:f4:b7:2d:6c:49:
26:ad:c0:81:d9:12:5c:7c:b9:b9:8b:5e:cc:46:6f:5e:88:91:
7e:32:46:4e:54:ee:bc:09:f9:a0:aa:76:8b:97:33:72:4d:f9:
9e:7e:d1:0c:54:24:c5:19:ac:b5:95:c1:73:6d:39:11:be:6b:
84:7f:2d:15:28:35:93:31:c0:e0:9e:e9:8e:1d:78:c5:39:67:
9f:93:ac:14:e1:3c:6a:76:a6:bc:34:b4:3c:8d:71:65:01:82:
75:89:a6:aa:2a:0b:77:30:7e:f0:03:2a:6b:92:58:93:c8:3e:
b0:f3:9a:31:f7:01:92:b5:d4:f4:d5:31:86:45:d8:6f:1b:a9:
94:0e:eb:01:2d:66:0f:7d:e1:fc:4d:24:2b:31:24:c1:ee:bc:
68:97:c3:72:ad:91:d1:fe:e9:f7:b1:58:9f:5c:e4:59:e7:c1:
39:55:0e:41:39:28:9d:cb:49:40:79:fc:d1:1b:f9:ef:bf:94:
68:22:51:97:9f:9a:a6:72:9f:0d:43:5c:7f:5a:74:3a:6d:59:
71:2f:df:b4:bf:7b:98:ed:78:09:8e:fa:40:a3:ae:bd:70:9a:
92:32:a6:68:6d:1a:9f:a2:62:01:fa:a2:ed:47:be:fa:c7:f2:
01:35:ad:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 23:09:38 2025 by rpki-client