Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
File: Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft (raw, json)
Hash identifier: UNvg3jOX8uiDhFrIEUot8ENqfHm6ilUbuEfGvrZZzXY=
Subject key identifier: B2:48:63:5A:F1:22:42:F2:87:1B:72:33:E6:AA:83:41:FE:92:AA:32
Authority key identifier: 62:DD:5A:40:75:42:8A:7F:C9:AC:94:E6:D2:A2:D9:A9:92:EF:48:53
Certificate issuer: /CN=62dd5a4075428a7fc9ac94e6d2a2d9a992ef4853
Certificate serial: 0197B77CBE2C3FCA8241B34AA12EA77AA3F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 17:01:34 +0000
Manifest this update: Sat 28 Jun 2025 17:01:34 +0000
Manifest next update: Sun 29 Jun 2025 17:01:34 +0000
Files and hashes: 1: BLUnMEvzOCDdig3vAOJNkanKcVQ.roa (hash: FOxz1hyJdKlYisYef78m6hR6cwVT1BQH7/wecUVrCqc=)
2: Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl (hash: 5dKdRRuepW1mYHv3hg2x5cLFT7yQ1SSFbtphwraJzig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:be:2c:3f:ca:82:41:b3:4a:a1:2e:a7:7a:a3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62dd5a4075428a7fc9ac94e6d2a2d9a992ef4853
Validity
Not Before: Jun 28 17:01:34 2025 GMT
Not After : Jun 29 17:01:34 2025 GMT
Subject: CN=b248635af12242f2871b7233e6aa8341fe92aa32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0b:0c:16:b5:c4:95:02:c1:50:42:01:f0:9e:
f3:e1:03:57:c3:57:a4:ba:96:14:0b:a5:1b:94:09:
6e:fa:f2:9f:ad:ed:cd:6c:9f:f8:44:0f:e7:5f:a5:
64:4e:5f:d0:6b:2c:31:24:ba:c5:80:dc:34:41:aa:
ec:43:34:51:d4:19:d3:42:cd:8e:e0:2d:a8:84:a4:
a8:a9:84:54:24:88:9c:10:21:2c:3a:18:21:66:bd:
8c:f9:c2:14:59:58:45:13:fe:63:11:cc:e2:5d:cb:
61:5e:eb:1b:4f:e7:5f:26:5a:b8:d3:5f:2f:fb:da:
36:f5:8c:31:fd:2f:37:b1:7c:2e:40:72:c2:c4:3b:
e4:83:39:5d:2f:a5:74:bb:9e:27:9c:6d:e3:bf:00:
59:d3:ce:9e:ef:e4:43:b4:76:a4:17:d8:75:cf:27:
91:47:ae:15:7b:e5:b0:68:1a:1d:5f:23:77:fb:df:
05:83:06:c5:3e:ef:3d:65:76:92:64:cf:6b:b8:d9:
3a:2c:44:05:8b:8e:4a:17:b2:db:12:6f:0d:a6:80:
d5:ad:b9:7c:b2:d9:03:2d:37:08:f9:40:66:37:0f:
58:a7:eb:1a:21:f6:3f:82:43:2d:5b:1b:c6:78:81:
e0:df:7f:ba:40:0d:e9:bd:32:88:b4:b8:b7:11:eb:
41:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:48:63:5A:F1:22:42:F2:87:1B:72:33:E6:AA:83:41:FE:92:AA:32
X509v3 Authority Key Identifier:
keyid:62:DD:5A:40:75:42:8A:7F:C9:AC:94:E6:D2:A2:D9:A9:92:EF:48:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:18:d2:9f:5d:2e:56:92:86:23:68:eb:d9:10:66:a1:9a:90:
f0:9b:d9:b1:cb:d7:2b:29:83:d6:82:8c:90:14:28:11:8e:99:
bc:7b:88:88:14:f8:a2:6b:2d:8c:3f:eb:ec:cf:99:16:f6:f6:
23:c1:b1:bf:8e:de:5a:9a:88:b2:3c:eb:49:a9:06:ed:a8:1d:
e3:f2:7c:4a:e8:b5:56:af:d9:04:88:e8:c9:bd:9a:c3:cd:4d:
4a:7b:46:f1:1c:9d:17:85:ae:5e:5c:43:95:f2:3c:39:de:ba:
5c:77:d8:31:6a:70:c0:95:fd:34:91:aa:6b:d8:2e:29:2b:22:
b7:79:64:d7:a9:6c:b4:2b:21:87:a9:cd:9e:9c:e3:43:96:20:
47:b1:b3:40:5f:a9:95:e4:de:2e:9b:92:2f:f1:ab:a6:43:4b:
9a:a7:a6:a1:27:c7:61:ed:82:69:34:1d:ec:f2:ec:3a:f1:3e:
d4:5f:2e:16:e9:f5:f5:0a:5d:d2:6f:85:bd:20:89:5f:75:cb:
58:e9:26:40:79:35:a7:cf:59:6f:7c:a1:5a:2f:02:42:ee:a6:
90:11:e0:39:2a:5f:39:f6:09:b0:a6:25:15:58:24:af:51:a9:
2c:93:4c:e5:59:5b:69:6e:07:a1:d6:9f:db:d5:b9:8f:53:cb:
2c:b8:75:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:44 2025 by rpki-client