Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
File: YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft (raw, json)
Hash identifier: cWN+MLQdMP6+DZBTGKYUKb51tn5sRMbfOPJqbgzK4Js=
Subject key identifier: B7:35:AF:C3:8A:16:9D:D6:DD:D9:BF:5B:95:C2:BF:A6:F3:B3:DD:0C
Authority key identifier: 61:65:8D:5E:FA:2A:0A:3C:36:C9:23:93:74:25:8A:98:F7:FD:A3:88
Certificate issuer: /CN=61658d5efa2a0a3c36c9239374258a98f7fda388
Certificate serial: 0197B6D75541461FB4FFA45F0D7F3AFEEAB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
Manifest number: 0D3E
Signing time: Sat 28 Jun 2025 14:00:54 +0000
Manifest this update: Sat 28 Jun 2025 14:00:54 +0000
Manifest next update: Sun 29 Jun 2025 14:00:54 +0000
Files and hashes: 1: YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl (hash: LH+3TwGyS/CA0MeVne41/Qrl2DJCCmy262D7nAfKb4g=)
2: dC8gOmayB-chyoQvohvN-0T41MI.roa (hash: CEU2++abo0F1b85LSOtJ8mERuDAvIcX+n86rAzfnRdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:55:41:46:1f:b4:ff:a4:5f:0d:7f:3a:fe:ea:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61658d5efa2a0a3c36c9239374258a98f7fda388
Validity
Not Before: Jun 28 14:00:54 2025 GMT
Not After : Jun 29 14:00:54 2025 GMT
Subject: CN=b735afc38a169dd6ddd9bf5b95c2bfa6f3b3dd0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ea:04:42:50:4e:22:27:42:d1:b1:1b:d1:36:
18:5d:61:90:32:1d:64:ed:e5:68:f2:4f:9b:18:af:
42:79:36:e1:9d:fb:e1:43:e7:b4:f9:9a:34:84:22:
7c:d2:52:36:1a:d0:c6:a7:f5:bb:52:af:bb:78:8a:
1f:de:d7:d6:b8:43:c7:8b:2b:45:23:6f:74:cb:e8:
7c:73:69:42:61:5e:ac:70:26:d7:b6:cd:b2:3e:ef:
72:5e:62:8a:17:5a:89:c9:73:c7:be:dc:91:1a:d6:
08:90:6b:fd:20:a5:9f:e1:b2:dd:d3:3a:67:c1:b5:
23:78:1b:91:d8:ae:0e:54:93:58:db:be:31:e9:17:
07:d3:5e:5b:2d:60:c3:99:09:3b:08:9a:3c:7b:18:
4f:a4:f3:ae:b9:c3:84:c6:2d:a7:bc:a3:48:9a:18:
b8:02:63:5b:1e:46:23:7f:17:14:78:87:61:5c:ce:
6c:70:7b:12:88:ce:c9:f9:96:89:9c:d9:8b:5b:ae:
bd:86:17:4d:92:01:a4:96:45:0d:14:f2:37:5a:21:
97:aa:f3:92:9d:a1:61:1e:9b:b4:82:be:f3:77:c5:
d4:36:1c:1e:54:23:22:dc:ec:b7:f0:f9:06:15:d0:
aa:0c:6f:11:c0:41:cb:b1:a4:3e:3b:d9:8f:37:55:
82:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:35:AF:C3:8A:16:9D:D6:DD:D9:BF:5B:95:C2:BF:A6:F3:B3:DD:0C
X509v3 Authority Key Identifier:
keyid:61:65:8D:5E:FA:2A:0A:3C:36:C9:23:93:74:25:8A:98:F7:FD:A3:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:a1:aa:b9:16:b2:94:ad:0d:78:93:b1:14:c2:7a:f6:9c:88:
9e:48:68:58:68:14:4b:e4:4f:a2:aa:de:bb:d6:ca:a5:a2:44:
3b:60:98:0c:30:1c:78:5d:12:59:f8:66:c6:ad:0f:75:3f:fd:
4f:fb:41:19:87:c9:df:f6:e7:87:d2:fb:b7:c0:b8:71:6f:af:
f7:76:a2:0c:6f:12:ba:0e:50:a5:9d:ce:d9:56:4f:33:37:79:
01:1a:67:4a:69:07:64:99:ff:70:e0:0b:16:b3:1a:ee:66:ac:
b7:2f:5c:69:1e:24:0d:fd:89:d2:49:f2:3b:71:35:c3:16:9f:
49:da:b2:eb:14:a7:56:4b:63:39:16:04:db:0b:fa:7b:b5:2f:
44:2d:3c:d3:a2:5c:65:ce:db:54:5f:0d:9a:81:53:a8:08:62:
aa:f2:83:2d:87:30:24:7b:5d:b7:24:df:d3:61:e9:5a:00:20:
e9:64:63:28:46:7e:5c:10:e0:c5:b7:9d:15:e0:87:c8:10:fa:
bf:e2:fa:40:cb:dc:61:e6:5a:e3:4d:56:d9:44:d8:1a:3d:0b:
99:06:bf:1f:81:f4:aa:7d:8f:f1:80:46:13:3b:b9:6d:ad:5b:
58:ae:f6:5e:c2:b8:c7:68:7e:c3:eb:9a:8c:76:d5:e3:b6:85:
03:f6:b3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:02:38 2025 by rpki-client