Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
File: YTeJ5zx1yrbYOradoyj8Lf-8kII.mft (raw, json)
Hash identifier: /JpgcuYotj0antC5tlkvBt9jkZxiRHjdwefvEmxLLp8=
Subject key identifier: DC:B6:91:40:E1:C8:61:B6:0C:B4:C3:81:2A:EC:CD:31:F5:0A:8E:A8
Authority key identifier: 61:37:89:E7:3C:75:CA:B6:D8:3A:B6:9D:A3:28:FC:2D:FF:BC:90:82
Certificate issuer: /CN=613789e73c75cab6d83ab69da328fc2dffbc9082
Certificate serial: 019760CBC5B69D0C96FC6FC6597BC136B949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
Manifest number: 128A
Signing time: Wed 11 Jun 2025 21:00:56 +0000
Manifest this update: Wed 11 Jun 2025 21:00:56 +0000
Manifest next update: Thu 12 Jun 2025 21:00:56 +0000
Files and hashes: 1: YTeJ5zx1yrbYOradoyj8Lf-8kII.crl (hash: jMPU1W1mpAkmvJlr7TGPafNd4iec1g8xa8l1usHE6zw=)
2: ZrBT-LTKncMhVmd9eNZtlw1O86k.roa (hash: tAbiS/EvHuSlDvoKxib2aD63z2PVHysvpp62xqOjuZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:cb:c5:b6:9d:0c:96:fc:6f:c6:59:7b:c1:36:b9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613789e73c75cab6d83ab69da328fc2dffbc9082
Validity
Not Before: Jun 11 21:00:56 2025 GMT
Not After : Jun 12 21:00:56 2025 GMT
Subject: CN=dcb69140e1c861b60cb4c3812aeccd31f50a8ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:58:b3:99:a9:0c:5d:17:57:3b:18:1f:af:
77:f4:f2:6a:28:42:55:b8:1e:f4:c6:36:eb:ca:61:
b0:4b:67:c4:1f:b5:84:c8:5b:9c:11:3c:84:9f:04:
3b:8b:eb:52:01:96:c2:bc:cd:67:35:78:d7:a1:49:
24:b7:e0:64:14:10:3c:b4:3f:6c:d7:ff:d5:88:53:
e2:60:7c:6d:47:f0:98:46:2f:3c:d2:77:d9:00:61:
84:91:76:5d:91:19:04:e7:69:a2:21:0c:c3:6a:dd:
38:9a:5f:21:83:9f:77:42:6b:04:f3:c2:59:87:dc:
5c:c6:44:b0:a2:3f:3c:13:97:51:bb:76:6e:2a:bb:
0f:1c:fc:c1:ff:15:bb:f5:6f:62:19:38:dd:55:3f:
8a:a4:24:51:d2:8d:96:46:6e:4c:1f:0f:a9:d0:85:
90:a9:16:c1:42:40:b7:aa:c4:c1:6e:df:08:9e:ba:
f7:37:f3:3b:eb:a0:22:ea:58:f4:84:01:9d:ed:29:
4a:78:cc:03:56:91:73:04:76:d4:9f:4f:05:22:f0:
90:60:be:33:57:50:07:c2:fc:72:37:c7:71:9a:42:
9e:cb:7e:21:a3:4f:d4:4f:56:40:26:80:6f:78:f0:
eb:9d:d0:58:71:cd:44:08:cb:81:dc:ce:7d:db:c9:
da:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B6:91:40:E1:C8:61:B6:0C:B4:C3:81:2A:EC:CD:31:F5:0A:8E:A8
X509v3 Authority Key Identifier:
keyid:61:37:89:E7:3C:75:CA:B6:D8:3A:B6:9D:A3:28:FC:2D:FF:BC:90:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0e:ee:92:47:13:e9:25:72:fe:14:fa:5f:ad:52:a5:63:96:
06:7a:b2:3c:49:15:05:6b:ce:33:df:d7:e9:73:95:a2:bd:c4:
fe:54:58:21:70:5e:36:f3:b4:43:47:a3:67:98:ab:d7:93:0b:
19:ea:3e:07:55:af:c8:e8:35:8f:f2:2c:83:ff:59:c3:75:c2:
17:52:86:2a:f0:f2:84:5c:e9:13:2f:46:9a:c2:6a:ed:44:40:
d9:45:4a:5a:35:1d:2c:c6:2c:84:2a:34:b8:07:c3:bc:a3:de:
ee:fd:fe:48:b6:50:13:be:a4:19:79:cf:42:ec:92:ff:21:af:
e5:ac:6b:2d:95:06:b7:ed:48:99:30:98:09:cd:4f:a6:01:4e:
83:99:b5:f7:0b:4e:d6:d4:46:3e:99:77:45:82:d5:18:4a:4e:
38:dc:ec:02:96:3e:4d:fb:ca:bb:5f:c5:70:ef:89:cb:a0:91:
4d:75:fb:a6:07:f1:7f:a2:f6:52:63:ee:ce:c2:75:3b:e4:36:
f8:6c:93:e8:32:1c:4e:50:61:26:a0:a4:c2:df:bc:e2:2c:41:
82:44:ed:ff:3c:ee:2d:1b:78:c9:49:69:cf:a3:87:f0:a2:72:
3c:55:f9:7b:75:53:9f:bd:4b:2e:67:c6:99:c3:4d:81:d1:91:
df:ac:98:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 05:02:32 2025 by rpki-client