Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
File: YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft (raw, json)
Hash identifier: hff9cwUrmBtgTVfOzx1fmYtB35Vpy9agFavaTe34aZE=
Subject key identifier: 02:FD:69:5A:E1:A8:69:BF:BD:1C:32:4D:F3:5D:B5:E7:85:EF:79:10
Authority key identifier: 62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
Certificate issuer: /CN=62117a1e6f699c322b6b983494f42c2209127553
Certificate serial: 0197C2DBA6A0B40F6679536D78D171554A07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
Manifest number: 15BB
Signing time: Mon 30 Jun 2025 22:01:04 +0000
Manifest this update: Mon 30 Jun 2025 22:01:04 +0000
Manifest next update: Tue 01 Jul 2025 22:01:04 +0000
Files and hashes: 1: IwNnMumHuRi32I7ksfRxTLj5SGU.roa (hash: CRwLwpZrZ0WbgGxRhGmhgHh8+Fm0a0d8zmfWAizQF84=)
2: X1s8zvuHJ81hdIgP19R2zatnWy0.roa (hash: zIp2gzAGnioL2V7YTZ/nOIwk4pKLhlEEq3/Z8mzK0KQ=)
3: YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl (hash: 0nBvpzhPHlDYFQRk/fxSqqtW0lghGOkGa3QBpy/sIeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:db:a6:a0:b4:0f:66:79:53:6d:78:d1:71:55:4a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62117a1e6f699c322b6b983494f42c2209127553
Validity
Not Before: Jun 30 22:01:04 2025 GMT
Not After : Jul 1 22:01:04 2025 GMT
Subject: CN=02fd695ae1a869bfbd1c324df35db5e785ef7910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:e7:2c:79:83:49:f6:a7:c9:33:c6:e2:1a:
6b:c3:51:70:b0:2a:9c:2b:48:4c:5d:c1:54:fe:2b:
29:db:e6:c9:b4:32:b4:35:3e:95:d1:27:2e:9b:29:
53:c2:36:fd:7b:09:2f:50:1e:5a:e2:44:3c:90:62:
12:27:48:36:6f:a6:cb:53:f4:62:91:fc:a4:c0:2d:
83:a3:44:e0:0b:3f:df:ea:03:f1:71:5d:5d:73:f8:
75:2c:b5:d9:46:c5:a1:fc:be:85:7c:75:72:ce:32:
54:1b:5e:19:e3:b6:19:98:c1:49:c8:f6:e2:7f:e3:
e1:24:e7:2a:b8:42:dd:b3:fc:8c:42:8a:9d:2b:fe:
01:88:de:56:55:b0:c1:82:93:c0:d4:7d:40:94:16:
22:a4:84:cd:db:01:b5:03:ee:0e:53:d3:23:29:a5:
0f:60:d1:8f:50:c8:b5:0f:74:eb:ee:19:aa:21:4b:
8a:16:94:bc:30:d9:20:b8:a4:c6:64:1f:a2:02:ec:
a4:8f:8a:d6:a6:d3:96:54:93:51:58:81:c3:34:55:
9a:0b:4a:35:c8:24:f6:32:5e:4a:79:c2:57:ef:46:
24:45:0c:47:07:54:4c:9a:b3:10:70:89:77:87:d8:
4f:64:f2:a6:ec:45:11:dd:49:e2:41:1c:7d:79:6b:
8e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FD:69:5A:E1:A8:69:BF:BD:1C:32:4D:F3:5D:B5:E7:85:EF:79:10
X509v3 Authority Key Identifier:
keyid:62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:15:e9:d1:49:60:78:22:93:a0:f3:00:7a:25:b3:10:b0:48:
61:1b:c0:45:78:4d:0d:b4:c9:75:3a:1f:26:89:9e:c5:14:78:
86:11:9e:76:92:cf:6a:53:ba:79:e3:cf:1f:cb:48:ff:d5:90:
d0:0d:0f:a3:d9:c9:64:02:f6:a6:90:f6:04:d8:58:da:21:dd:
bc:9a:d4:bc:d9:fa:f1:14:32:47:cf:29:ae:1f:ca:c6:ca:40:
96:13:a3:db:fd:64:22:05:c8:07:f7:ce:69:f5:81:a4:df:b7:
44:0d:31:74:7e:6e:ee:4a:74:3d:ac:c8:92:cf:9d:d1:51:1a:
92:d9:31:44:2c:a6:8e:33:9b:aa:7b:0d:33:2d:6e:9e:7d:f2:
2e:3a:4a:2f:e8:e6:84:e9:11:e1:81:e2:0a:37:e3:b0:d0:22:
8c:38:66:06:28:2d:f3:b1:c3:db:2a:d4:61:55:04:54:5e:59:
2b:5e:8c:75:35:ab:cc:5f:07:9f:60:2a:39:4f:7a:7e:8d:51:
3a:1a:94:9d:40:d4:fa:30:dc:42:bb:6d:95:35:fa:c9:8e:08:
57:3a:5d:15:26:9c:b5:7c:9d:4c:ae:22:35:68:1b:c5:49:b6:
88:0e:7a:73:02:d0:d9:21:be:85:a4:3b:34:e8:58:22:97:96:
e1:99:b7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:59:48 2025 by rpki-client