Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
File: YJDN0x06cdoc5KS9hfGYfjyk6vo.mft (raw, json)
Hash identifier: 3HZDjQSpMo/0hvejN6a7WGInAjehtl7eckK1bjSEUX8=
Subject key identifier: 88:20:31:8A:E3:F3:39:A6:81:CC:BE:37:71:67:F7:25:92:B8:30:D7
Authority key identifier: 60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
Certificate issuer: /CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Certificate serial: 0197B7455D71AC6745802D66B447E5B9E46D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
Manifest number: 0DD6
Signing time: Sat 28 Jun 2025 16:01:05 +0000
Manifest this update: Sat 28 Jun 2025 16:01:05 +0000
Manifest next update: Sun 29 Jun 2025 16:01:05 +0000
Files and hashes: 1: YJDN0x06cdoc5KS9hfGYfjyk6vo.crl (hash: 0+7h5hmps6MkoWv8CetSaUl1xBjXsSxVAk2dHUbYcAY=)
2: ffPjrVVu7lFrIrT7aSEeaO2AX6Y.roa (hash: 6A8IWQ2G3JPXavMyiGoa9Wq0l3UDM2Dw7jgy8bn/B9E=)
3: kIZJFU9FE0sowBjI7e7IPS7NRgU.roa (hash: 9Wc+e5T27oPhVr20geXtNISFlzFCv5eieNsW873OfKo=)
4: pDSqiruHTrt5wT6tXenOPgXVrZ8.roa (hash: dRSuxcEHLCbEbcETL0Q2NrXwBwARtdUXwOtoy1/PE/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:5d:71:ac:67:45:80:2d:66:b4:47:e5:b9:e4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Validity
Not Before: Jun 28 16:01:05 2025 GMT
Not After : Jun 29 16:01:05 2025 GMT
Subject: CN=8820318ae3f339a681ccbe377167f72592b830d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9c:7d:e0:34:72:a3:66:7a:67:a8:e7:78:75:
60:cd:a8:79:0d:ee:6b:94:8a:81:e3:e6:84:f7:aa:
ee:4c:e8:c9:c2:c3:5d:4e:9b:5b:cc:3a:60:2e:fb:
d4:36:14:d3:a8:e3:f1:26:b1:42:05:a6:5a:bd:97:
b8:03:14:c3:1e:c5:e9:99:c2:f0:d8:65:7f:ea:6a:
c2:72:cd:fb:52:b3:80:42:f0:8d:a2:af:9a:9d:6c:
a8:66:ff:e5:5b:f5:d3:46:59:b6:2c:f8:97:e1:69:
9a:98:e1:ba:a9:34:27:34:48:a4:cb:cf:6a:ed:9a:
a7:bf:66:de:d5:8b:6f:2b:3c:c1:a1:d7:c1:a3:1a:
a5:76:e4:72:5b:7b:1f:07:52:09:15:04:2e:e2:81:
4a:73:69:63:84:ec:f2:5f:eb:5b:56:4a:a0:c0:c0:
3c:01:21:d1:ef:03:2c:5d:83:ef:b5:1a:d1:93:df:
cf:6e:d1:29:12:38:ad:fc:1c:f5:4b:e7:a9:85:3d:
59:2e:6e:f7:5a:cf:e6:b3:0a:6a:3f:9d:2d:93:0a:
be:d0:a8:ad:64:3e:b4:d0:f6:c7:c4:e8:2a:ff:27:
7f:82:94:87:ac:3c:59:de:15:c4:08:6f:57:bf:76:
b8:c3:38:c3:90:10:d7:f2:93:7d:66:74:c3:49:3b:
b2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:20:31:8A:E3:F3:39:A6:81:CC:BE:37:71:67:F7:25:92:B8:30:D7
X509v3 Authority Key Identifier:
keyid:60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e1:b0:88:a8:73:b5:ec:b9:a0:72:f5:2a:29:8b:43:da:6b:
8a:95:7a:e4:b6:d8:b6:a2:ad:e9:d6:12:9a:74:4a:4e:2b:ea:
59:67:0c:70:f6:b4:8d:2c:ca:5c:c4:2b:02:56:26:0e:c1:2c:
d3:de:b0:aa:e2:f7:14:09:1f:72:bb:cb:b0:0c:f8:4a:99:f9:
82:d0:b8:dc:ef:8c:bc:08:89:b0:ce:d7:2a:6f:0d:de:16:c6:
58:cc:33:5b:69:ed:6c:a5:cc:22:f1:85:d5:6c:58:ed:a1:19:
49:74:81:02:30:67:1b:ed:2f:c8:da:b6:ce:f4:af:5e:3f:a7:
5f:48:ea:e8:84:d8:bf:5f:33:63:39:33:d2:d7:66:17:52:36:
66:28:d7:b2:a7:7c:19:93:42:2a:a7:82:58:a6:3c:42:82:ed:
c6:1b:9c:c8:79:a9:2e:f1:e7:f1:81:b8:92:47:eb:84:93:ea:
80:02:ad:51:ed:22:1d:4d:fe:25:25:12:9d:32:29:e4:cf:ce:
44:0c:21:bd:df:67:dc:7e:8c:9a:45:fc:5b:d0:51:6f:92:88:
4a:9f:bd:06:fc:e4:fe:2c:be:a7:ff:58:98:5f:2b:8b:f9:dd:
27:5d:2f:5d:5b:19:1d:f7:3c:48:40:26:2e:45:31:a3:01:a6:
d6:9a:b8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:23:08 2025 by rpki-client