Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
File: YmC2AROb4BNWnr-OG-taaUuch-w.mft (raw, json)
Hash identifier: YKhyvrzEcsl/MsJTxcqiA9HemG2L7vXbm+tI9DDSxp0=
Subject key identifier: 3E:F4:8F:3F:D5:BB:A5:F4:85:53:F5:B1:FE:14:17:38:94:57:7B:29
Authority key identifier: 62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC
Certificate issuer: /CN=6260b601139be013569ebf8e1beb5a694b9c87ec
Certificate serial: 0197B6A0E5689B6A4C1BBFE2A58146B7AB54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
Manifest number: 029D
Signing time: Sat 28 Jun 2025 13:01:27 +0000
Manifest this update: Sat 28 Jun 2025 13:01:27 +0000
Manifest next update: Sun 29 Jun 2025 13:01:27 +0000
Files and hashes: 1: MJiykAn66BwFdDhRkjnr3vy7VBE.roa (hash: tqEplVJJxxtIvLa3DZXrZRwoIF2P6+ZYgv+UgpAXwks=)
2: YmC2AROb4BNWnr-OG-taaUuch-w.crl (hash: 70+BsjjPzT0mfRqwnUXlA7M+KoHbZ55hxw7JHomopSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:e5:68:9b:6a:4c:1b:bf:e2:a5:81:46:b7:ab:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6260b601139be013569ebf8e1beb5a694b9c87ec
Validity
Not Before: Jun 28 13:01:27 2025 GMT
Not After : Jun 29 13:01:27 2025 GMT
Subject: CN=3ef48f3fd5bba5f48553f5b1fe14173894577b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c5:68:aa:1e:31:7c:c7:13:bc:54:c0:20:dc:
2e:1f:6e:a0:07:b8:1e:c4:b8:41:3f:9f:f8:02:2d:
f6:28:48:2f:21:2c:da:0f:35:36:b7:fc:e2:a3:26:
dd:c8:9b:fc:92:8c:9f:91:ba:27:c1:dc:ec:7d:cd:
fc:e4:8c:b5:ab:1e:77:cb:72:2b:e4:0f:b8:d0:69:
44:3f:97:1e:b0:dd:b0:02:2a:eb:ff:0f:f1:f1:e1:
18:73:ce:ae:5c:db:16:8b:33:69:73:a6:ee:27:da:
75:c9:d4:2d:47:e6:66:b6:a9:b3:ee:b5:25:5a:3c:
34:da:b4:ef:5c:b3:66:b1:d9:c4:85:c2:88:2e:19:
a7:78:35:3d:c4:ca:c1:30:83:f1:e6:b6:fd:3c:3b:
08:8e:f2:c6:6d:4d:53:01:33:5a:c4:19:e2:71:7c:
64:be:bf:01:88:06:5b:29:1c:50:30:bf:3c:fe:dd:
9d:df:77:f9:31:f5:97:c5:c3:ce:66:7a:d9:85:a2:
14:36:3f:7c:48:79:39:d7:dc:e5:6f:aa:4d:a9:e6:
9f:64:bc:43:b6:5b:67:b0:80:28:db:ce:9f:34:06:
24:8f:6c:0a:01:4f:df:36:c7:e3:17:15:61:9e:15:
49:5d:d2:81:b3:2e:f8:39:8c:67:37:ce:e3:ba:9b:
19:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F4:8F:3F:D5:BB:A5:F4:85:53:F5:B1:FE:14:17:38:94:57:7B:29
X509v3 Authority Key Identifier:
keyid:62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:52:3a:ef:cb:11:8c:0d:1e:4c:0e:e0:20:30:fc:6c:8f:de:
3d:ae:1e:8d:bc:a0:e0:a9:be:80:61:20:09:84:d3:96:59:ca:
9d:9c:f0:78:69:5a:3f:79:50:22:e1:7e:4f:8a:00:d3:86:90:
31:d5:a1:60:62:14:a5:f4:4c:f2:cd:64:b7:db:ae:5b:ef:f5:
49:6f:c3:c3:92:74:01:e3:d1:f6:4a:ab:f5:71:b2:64:76:8b:
3b:2e:4a:bb:04:57:cd:2b:6b:98:77:ee:80:51:e6:77:c4:66:
4f:ea:59:ed:6c:ef:5f:e3:1b:f0:b5:bd:99:ef:08:95:06:70:
94:d9:88:86:bf:a0:90:36:06:76:f1:08:10:67:7f:f5:4a:fc:
d4:9b:bd:89:7d:9e:d5:ff:49:cb:42:16:64:b9:de:33:4d:cb:
d5:54:8c:42:56:b2:11:74:64:89:27:af:a1:8d:46:b7:b6:d2:
65:42:3f:23:1b:c4:8e:fd:81:dc:b2:d6:df:3c:42:8e:53:c7:
43:1c:a9:04:9e:f1:04:f9:68:10:6d:ba:04:db:6e:79:5a:4d:
e7:8d:ca:09:a6:04:56:46:2e:c1:82:ab:e8:fc:52:81:66:99:
34:32:19:ba:de:fe:44:e9:15:0f:e4:5f:7a:b0:14:f7:40:50:
ad:7a:5f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:55 2025 by rpki-client