Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
File: YCmxoIE54dqWQ90EJPXNZFB-N3E.mft (raw, json)
Hash identifier: jEROZhzKvRIHqRjffea79bZReJmsYCk32W/Eja0ZvZA=
Subject key identifier: 47:C8:F3:8E:F9:E4:71:44:15:96:AA:EB:E7:AE:00:68:67:32:42:B8
Authority key identifier: 60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
Certificate issuer: /CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Certificate serial: 0197B6D74E8AF5E533F38EA5F6FC5DA52B01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 14:00:53 +0000
Manifest this update: Sat 28 Jun 2025 14:00:53 +0000
Manifest next update: Sun 29 Jun 2025 14:00:53 +0000
Files and hashes: 1: YCmxoIE54dqWQ90EJPXNZFB-N3E.crl (hash: JYK2epJVQOR9SwkF3X743XBY1lDZS/LfnhL6pA6WweQ=)
2: agnml2BoZnHcte3vAx95htHMxBs.roa (hash: 2HEzDKJFq3kC6T211YFaUksF6gjmrNkAZDecesO3QWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:4e:8a:f5:e5:33:f3:8e:a5:f6:fc:5d:a5:2b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Validity
Not Before: Jun 28 14:00:53 2025 GMT
Not After : Jun 29 14:00:53 2025 GMT
Subject: CN=47c8f38ef9e471441596aaebe7ae0068673242b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cb:a3:2a:e6:95:01:f9:b6:b9:e3:20:36:ff:
6b:51:f1:c7:33:7f:e3:db:24:3a:57:a2:a7:90:03:
a4:8c:01:82:b6:7d:fb:df:09:ee:c2:a5:82:55:d5:
ce:6c:57:5e:96:f2:2b:a3:89:06:e7:76:8f:08:39:
5b:12:fd:43:ca:3f:0c:02:c6:11:0d:74:2d:ba:ec:
3b:c8:0a:c0:8d:2f:d5:43:ee:ac:28:fa:5d:f5:63:
00:cd:ac:91:8a:d6:1a:af:fd:70:ff:d0:52:a8:23:
50:74:b5:c3:e7:98:09:89:9b:ae:f5:fb:0b:b5:6b:
6e:8f:a8:62:8d:a0:cd:8a:77:49:77:a0:b1:6e:c3:
23:d3:63:1e:7f:17:f0:4d:1a:57:83:1f:2d:7b:93:
e8:22:ae:b5:10:55:11:0e:c1:8e:d6:f4:ba:90:29:
f2:1c:06:6e:cc:be:74:9b:f2:7d:fe:01:a1:fc:a1:
14:f1:ae:a9:c6:0b:ff:e2:c0:ac:5c:9f:8c:65:18:
c2:7d:ec:01:b6:ed:42:1a:5c:4e:cb:c5:82:a4:b6:
f3:73:23:03:31:5e:ec:a3:15:c1:b8:18:6f:a8:87:
02:bf:45:01:71:0e:33:11:ab:6d:01:2f:f0:ff:6d:
24:11:fb:5b:42:75:93:7d:a6:2a:c7:e4:ce:9e:a5:
f4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C8:F3:8E:F9:E4:71:44:15:96:AA:EB:E7:AE:00:68:67:32:42:B8
X509v3 Authority Key Identifier:
keyid:60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:b3:ce:16:d0:cc:02:b4:2d:3b:cc:a9:ca:d5:27:b0:5d:5e:
0a:1f:0c:ed:ad:e2:5f:61:f2:be:fc:40:0d:3d:3e:02:df:10:
c9:9b:f8:6c:b7:5c:6a:6f:bc:5a:4f:85:8d:3a:ae:7b:e8:d1:
ff:8b:8c:85:a7:6b:ef:cc:d0:6b:30:25:88:29:b5:5f:44:8f:
33:58:6f:e6:f8:c8:c9:53:13:47:4a:69:4e:09:81:ae:e0:f2:
c9:20:9e:51:88:a0:78:bc:ad:fa:e1:83:17:52:1c:5c:3a:19:
08:80:14:03:43:38:48:7d:d2:81:cb:27:66:86:ed:80:47:14:
40:f3:fe:e5:eb:34:9a:62:49:53:0e:d5:b8:dc:70:67:1f:88:
01:8b:7a:e7:e4:62:30:84:f3:ee:fe:df:f0:e5:97:cd:2c:97:
f6:d4:a0:71:de:85:a1:08:a4:ae:aa:90:6b:3c:eb:9f:09:47:
3c:3f:c5:35:05:d6:92:e9:ba:6b:c4:c1:58:fb:da:78:f5:9a:
d5:17:5e:36:a7:fc:b5:77:0c:6e:12:59:d6:ba:19:0b:15:4f:
52:27:5b:c5:8b:81:e0:8e:a1:8b:2f:e4:bb:5a:a3:de:69:68:
ad:6e:3a:c5:66:7f:79:25:83:06:e2:80:d4:5e:22:71:8c:91:
41:65:b1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:13:58 2025 by rpki-client