Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
File: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft (raw, json)
Hash identifier: b8beTFArFKu3T3vN7lH4csPzS5vqeJJic9cFpfRTa2A=
Subject key identifier: 59:06:83:C7:7B:37:DB:3E:07:FE:2D:38:CE:92:3A:DD:7B:92:54:A0
Authority key identifier: 60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
Certificate issuer: /CN=601331eccd96d02c1035734cd00a390e8311d942
Certificate serial: 0197B632D0CD7028878123AB272FB1C256AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
Manifest number: 13FC
Signing time: Sat 28 Jun 2025 11:01:12 +0000
Manifest this update: Sat 28 Jun 2025 11:01:12 +0000
Manifest next update: Sun 29 Jun 2025 11:01:12 +0000
Files and hashes: 1: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl (hash: jpqjpGEO5w3eLw+XWCUsgU0nKHTJQxM4xrEk+WB3ciQ=)
2: c7MGsEbypq7HQmSi7CA8wcLve5E.roa (hash: qY1ylvNOSUvOO34D9YGb2Z/M9yHjYdSK25iwWmwBxOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:d0:cd:70:28:87:81:23:ab:27:2f:b1:c2:56:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601331eccd96d02c1035734cd00a390e8311d942
Validity
Not Before: Jun 28 11:01:12 2025 GMT
Not After : Jun 29 11:01:12 2025 GMT
Subject: CN=590683c77b37db3e07fe2d38ce923add7b9254a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:da:80:94:56:67:e4:c7:00:5d:b3:a4:45:d0:
3c:c0:dd:03:52:f8:ec:97:06:3b:4f:90:6e:96:0a:
ff:76:f0:7a:fa:2f:43:04:ec:58:66:56:20:1a:aa:
db:bb:d1:71:78:f2:4d:51:c3:1c:25:9f:7d:2a:f6:
fc:79:f3:88:78:98:69:3e:84:d3:58:68:85:07:11:
b4:b7:cf:0f:aa:17:e5:8b:f4:02:bb:27:2b:6f:95:
8f:ff:03:7e:8c:62:e9:b2:79:24:91:bb:bf:a8:fe:
2a:43:75:3e:2d:1f:1a:e1:4e:ec:4b:c1:04:b6:f1:
4b:16:e7:74:1f:b7:10:ac:28:36:93:55:4f:6d:cf:
8e:de:29:eb:8c:64:a4:ae:94:c0:68:44:83:a5:f4:
b9:cc:d4:0e:26:66:68:da:3b:59:08:8e:e1:18:b2:
0a:be:b9:11:52:13:19:27:14:3c:4e:7a:be:0d:0f:
75:a2:0f:65:1b:0b:ca:44:a4:bd:1c:f5:bb:74:80:
86:bc:bc:c1:df:4d:d1:61:2c:4c:ab:cc:a7:16:a5:
5a:09:6f:86:e2:56:92:88:8f:71:7d:84:0e:8b:84:
92:5c:64:1a:80:cf:0c:d1:37:0a:2e:3d:89:d5:0e:
04:6f:3b:82:3c:ee:f5:18:25:28:1c:e6:84:01:2f:
61:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:06:83:C7:7B:37:DB:3E:07:FE:2D:38:CE:92:3A:DD:7B:92:54:A0
X509v3 Authority Key Identifier:
keyid:60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:e1:0e:1c:76:fc:0a:54:d8:5d:1b:cd:dd:d6:ab:e3:d7:c2:
9b:68:1b:04:8f:70:d1:ec:14:30:89:cf:a0:99:7f:61:39:3e:
f0:c5:fd:fa:7a:42:54:33:bd:e3:fe:eb:a9:2c:7d:30:ae:69:
4d:b6:b1:97:d6:59:2d:ba:3a:8e:81:a1:77:8f:27:aa:92:bf:
c8:94:53:8a:c9:ad:cb:a4:84:90:a2:b6:e5:0c:27:96:9b:b1:
b7:e7:53:3a:60:7c:c9:6b:06:ac:a2:27:ee:01:19:ab:33:0d:
00:fd:10:c4:aa:2b:8f:93:c4:3a:0b:0c:1b:ee:be:1f:99:5f:
86:e0:dc:14:dd:48:9e:44:ca:0e:92:14:f6:c9:85:7f:d7:e6:
14:49:42:a0:4b:83:88:23:9f:89:eb:f2:63:80:70:dc:e2:24:
4c:fd:a0:37:09:8e:e3:81:6e:53:49:f1:7d:04:dd:7d:ec:b5:
a1:67:93:87:77:f9:dd:6d:90:1c:5c:c4:e9:01:62:dd:19:53:
aa:fa:35:10:97:42:69:eb:be:a4:89:0c:6c:eb:25:fb:54:04:
5d:17:ae:81:7b:e7:e7:c7:10:97:a5:ae:60:49:ae:d1:45:fc:
ba:50:37:7b:dc:7c:33:2b:f6:2d:86:31:1c:77:3d:78:dd:39:
a9:9d:4c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:07:27 2025 by rpki-client