Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
File: YCGk2qfc9KTLCKxHRzdfaYquhkM.mft (raw, json)
Hash identifier: vNTE/iu8xbkXkWA4EMZlpnRGl3tGfk4AoUZOSa1YGUg=
Subject key identifier: 1D:32:1F:B2:93:4B:69:25:EF:88:0B:29:68:23:2A:DF:02:AE:0B:69
Authority key identifier: 60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43
Certificate issuer: /CN=6021a4daa7dcf4a4cb08ac4747375f698aae8643
Certificate serial: 01974AB17E97F748D5EFBAAC846B3AB2E9DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
Manifest number: 025E
Signing time: Sat 07 Jun 2025 14:00:35 +0000
Manifest this update: Sat 07 Jun 2025 14:00:35 +0000
Manifest next update: Sun 08 Jun 2025 14:00:35 +0000
Files and hashes: 1: YCGk2qfc9KTLCKxHRzdfaYquhkM.crl (hash: KejsaAyBvg9Sju2kLC4nfZsRfGYXpqCzeXjJ9y9d7k4=)
2: nsWYD62GXvXwJfFUS4kAQcZmYTU.roa (hash: jHcDfB6LIATegfSEiVgq0NQFeMD0sWc8LqYc2Z+2oaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:7e:97:f7:48:d5:ef:ba:ac:84:6b:3a:b2:e9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6021a4daa7dcf4a4cb08ac4747375f698aae8643
Validity
Not Before: Jun 7 14:00:35 2025 GMT
Not After : Jun 8 14:00:35 2025 GMT
Subject: CN=1d321fb2934b6925ef880b2968232adf02ae0b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f3:b6:f8:11:4f:22:84:4d:16:d7:1d:0c:74:
ea:ee:2c:b3:94:fa:fe:71:2e:8f:d9:76:c7:24:e5:
e3:eb:30:42:e8:70:ec:b9:30:fb:fb:80:62:f7:c8:
56:61:6a:e9:cb:f7:d4:80:59:6d:cb:d6:a4:43:f4:
94:ad:2c:7e:0b:7a:dc:b6:22:b6:db:f6:ac:0c:a2:
0e:99:9e:3f:b2:1b:51:25:f7:78:6a:94:c8:5f:aa:
6c:1c:d3:8a:2e:13:91:1f:87:97:df:65:5d:7d:fc:
27:15:85:29:26:11:2a:e7:28:d5:d4:9e:61:cf:b4:
8e:23:81:09:fa:29:00:27:1d:34:69:5d:7b:16:a2:
7a:4d:cb:c7:7c:b2:c8:c8:ce:92:f8:73:be:5d:1c:
db:32:8c:98:52:92:7d:34:0e:f6:12:81:68:29:25:
ab:0d:a0:41:89:2e:6d:51:2f:33:c5:90:ed:d8:b3:
20:27:7d:07:6e:b5:d5:a6:b5:53:3a:a9:aa:b4:91:
97:bb:53:ab:57:00:c7:19:d8:6b:72:0d:e0:3c:9e:
3d:54:a6:95:c3:e5:87:28:75:7f:b7:f6:36:80:99:
ee:7b:20:83:6a:c8:43:eb:31:50:8d:41:78:3b:0f:
c9:35:7b:92:39:5c:2a:25:89:fb:53:18:82:5a:a1:
40:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:32:1F:B2:93:4B:69:25:EF:88:0B:29:68:23:2A:DF:02:AE:0B:69
X509v3 Authority Key Identifier:
keyid:60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:30:37:27:71:bf:2a:33:3d:d7:db:dd:f2:f9:f3:77:62:d5:
42:8f:30:2f:a7:af:3a:50:69:63:02:f7:f9:a9:5e:9e:ac:e5:
aa:06:a5:e8:30:e8:69:29:88:d2:12:d9:c0:d4:06:2e:0d:a0:
24:a3:3e:57:e5:24:3a:ec:ef:62:c5:8f:c9:39:cb:e1:7f:bb:
1c:03:89:7f:c1:0d:81:41:56:56:5a:40:6b:02:d5:58:b6:c4:
c7:ff:75:24:90:cc:68:55:c3:1d:0a:3e:b0:d2:f4:00:31:7c:
75:d5:d7:b0:97:b6:b3:79:d7:24:3e:a1:b2:a1:7b:c9:eb:59:
77:c3:0a:e2:68:e3:7e:01:31:29:b5:36:78:fe:bf:4f:41:56:
83:61:72:eb:d9:3e:92:9b:ba:ae:3c:df:fd:e3:5f:c9:e5:0d:
8d:5f:4a:10:7d:43:f1:d2:24:66:fa:c3:ff:2b:d6:9d:c5:29:
cb:9c:6e:f4:43:db:e5:bb:c1:5d:c7:9f:b7:2f:85:78:59:f2:
2d:f5:f3:14:80:ce:71:2c:78:6a:b0:cc:50:46:c1:73:ef:d8:
b1:77:e7:d6:18:fd:71:f7:6e:5c:8a:2c:a1:32:98:7f:7a:a4:
f1:1a:1d:fd:b5:77:cf:5c:67:37:40:85:16:85:97:d7:65:8e:
dd:75:b2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:44:17 2025 by rpki-client