Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
File: yKS714rzY_pb7uYy6L3Ei2KXNDw.mft (raw, json)
Hash identifier: B/+D8z68ffmdHgm4QU49UZeA2wD4LIfxtgWJ9GV3d78=
Subject key identifier: FA:D9:EA:29:75:28:F6:2F:01:76:C5:A8:04:5C:EB:44:C2:A7:E9:72
Authority key identifier: C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
Certificate issuer: /CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Certificate serial: 0197B6D748DB26CED0EFD421AFAA9A5934CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
Manifest number: 060B
Signing time: Sat 28 Jun 2025 14:00:51 +0000
Manifest this update: Sat 28 Jun 2025 14:00:51 +0000
Manifest next update: Sun 29 Jun 2025 14:00:51 +0000
Files and hashes: 1: d6sgkQbNQYkqYXcedUvxxcDi_RY.roa (hash: qNUbQpwyqYmbMOUJJoCyiXY3LQNxqUvVSzT1Kq6z0rI=)
2: yKS714rzY_pb7uYy6L3Ei2KXNDw.crl (hash: uG/fIfNAnF2VOWTnNqtw49sLkpGlDUgYunZKrK3s6ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:48:db:26:ce:d0:ef:d4:21:af:aa:9a:59:34:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Validity
Not Before: Jun 28 14:00:51 2025 GMT
Not After : Jun 29 14:00:51 2025 GMT
Subject: CN=fad9ea297528f62f0176c5a8045ceb44c2a7e972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:40:91:d9:75:4a:bf:b5:11:dd:1e:08:29:4a:
ea:1c:fd:9f:7b:f9:62:7c:4a:56:21:66:24:62:2b:
8a:95:22:28:28:e0:ac:65:74:4b:e6:ba:e2:57:ad:
e8:cf:3a:b4:16:59:43:39:92:6e:9a:fd:2f:b2:df:
6c:2e:0e:39:cf:91:d8:bc:e2:ab:5c:7b:a0:60:85:
06:af:fc:b0:27:03:23:03:e0:8a:68:2b:33:66:0e:
41:e4:6c:07:19:b2:42:e1:97:cd:f3:ea:c4:5f:4b:
1e:17:9e:3a:d2:db:cd:e0:1d:02:0e:5e:dd:65:2e:
d3:30:c9:5d:83:20:50:b1:0d:d1:f0:47:79:bf:6a:
ae:da:d9:ce:cc:7b:86:50:d4:0f:a4:b9:e0:2f:48:
fa:a2:4a:50:fd:2c:f6:68:41:a7:a6:c0:2a:a4:3d:
26:15:88:17:6b:90:c6:be:f7:d5:5e:5b:a7:bf:90:
da:84:aa:2d:5a:da:e3:53:b2:f9:7d:d1:88:67:13:
a3:23:da:7e:77:58:ef:0b:56:da:75:d8:88:fc:9e:
07:1d:7b:dd:0f:d6:37:03:c1:ea:e3:ce:e6:a2:2e:
c9:c5:58:6b:37:6a:82:ed:bf:bc:09:a6:02:67:17:
45:40:0e:38:8c:3f:96:24:cb:33:0f:0a:60:e7:db:
91:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D9:EA:29:75:28:F6:2F:01:76:C5:A8:04:5C:EB:44:C2:A7:E9:72
X509v3 Authority Key Identifier:
keyid:C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ea:98:88:00:0d:48:90:3d:72:64:b2:76:89:b8:a3:14:70:
71:15:17:a0:e5:25:9d:e3:0e:86:61:86:6e:4f:a1:b3:80:cc:
56:41:db:ad:1f:66:f3:92:35:86:48:df:84:f7:ed:5e:40:b4:
61:db:80:b2:a3:0d:15:15:75:ea:20:56:55:af:42:fb:2f:a3:
c3:90:a7:41:f3:67:6d:bc:cb:b2:3f:ec:7a:c6:b1:50:69:f0:
77:c2:3a:e0:86:5e:c9:36:17:b8:25:57:e5:43:b4:77:8d:ba:
98:0f:74:b6:e8:12:c8:fc:27:1c:2f:3d:47:fa:52:3b:48:7a:
6d:06:60:97:f2:6a:a6:dd:8a:91:59:e8:8e:ca:ad:48:06:24:
ff:43:09:82:d1:e2:ad:54:da:b5:01:42:9d:18:3a:f2:34:12:
35:17:c2:5d:27:c9:d3:c9:1a:f1:3f:1f:5b:4d:82:a3:3b:cc:
9e:68:a7:68:7b:6a:93:42:dc:60:36:12:61:c1:38:0f:9d:01:
16:83:79:ac:9e:65:38:3b:a0:ea:ab:d8:44:c2:60:b1:49:6c:
d5:00:8b:27:73:7f:d5:50:e9:a0:f0:31:ca:d2:9c:51:8e:58:
79:40:3d:82:54:ff:4c:ab:43:a2:c1:1b:8c:da:29:7c:3d:fd:
aa:f3:da:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:34:06 2025 by rpki-client