Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
File: YiJ2252bNM3sJiDHJX3FrUrrgy0.mft (raw, json)
Hash identifier: qVmM3Gv53d5kGvQEIabA71fOsR0Dkhj+zf+ZEYH2GQg=
Subject key identifier: 84:EE:27:4C:EF:ED:FB:60:90:98:D9:5E:A1:71:B3:F4:15:40:E5:55
Authority key identifier: 62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
Certificate issuer: /CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Certificate serial: 0197BB9002B39B105990C5661C4BA5048853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 12:01:06 +0000
Manifest this update: Sun 29 Jun 2025 12:01:06 +0000
Manifest next update: Mon 30 Jun 2025 12:01:06 +0000
Files and hashes: 1: AdTC8zOa60ytbUnvyWrYbz5T-Bk.roa (hash: 6Kj79eLeBWoibWni/+p7vdKVc5LjnECRVHDoIBU87h8=)
2: YiJ2252bNM3sJiDHJX3FrUrrgy0.crl (hash: pkoR7v5+VjZRyKEx9MIL0AeyEErPHdwAGxVFEujgnwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:90:02:b3:9b:10:59:90:c5:66:1c:4b:a5:04:88:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Validity
Not Before: Jun 29 12:01:06 2025 GMT
Not After : Jun 30 12:01:06 2025 GMT
Subject: CN=84ee274cefedfb609098d95ea171b3f41540e555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:24:f7:2d:6c:86:47:fa:a5:59:d5:5b:88:03:
e3:07:52:a9:a6:d8:d5:69:5d:cf:06:76:a2:3b:52:
77:50:c3:e1:3b:c6:f5:95:fd:22:0f:51:0e:92:e9:
98:b5:24:95:51:a7:29:61:9c:b5:cf:ca:bc:cb:19:
ae:21:09:06:2e:87:58:78:27:a3:ae:66:1f:a9:89:
b4:42:ed:1c:e3:eb:74:d3:db:34:ed:39:c9:bc:58:
7a:0f:9c:3e:b5:87:b0:95:87:bd:1c:3a:27:69:0b:
49:1b:10:fd:d4:00:79:9e:86:d4:ed:66:72:90:8a:
be:55:a4:fa:5b:28:47:5c:08:70:9a:1f:0c:e6:65:
de:bc:55:81:c7:4e:e7:a4:4d:0b:56:3c:a4:34:84:
d8:e0:ae:fd:e2:93:83:00:6f:46:7f:bc:67:a8:3e:
15:d8:78:37:6e:51:a4:5e:9b:31:ef:46:b9:e4:6a:
d6:5c:88:1f:8b:34:df:04:c2:57:e6:6b:02:87:8a:
56:04:66:50:9b:45:5f:b5:c4:46:bb:b4:8a:c6:39:
4d:bc:15:53:ba:a8:65:21:88:82:b7:af:bc:0c:a9:
73:63:87:47:0c:5d:0a:89:db:02:92:65:8a:de:f1:
44:97:09:a1:53:eb:d9:24:c8:96:cc:3b:c7:06:61:
22:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EE:27:4C:EF:ED:FB:60:90:98:D9:5E:A1:71:B3:F4:15:40:E5:55
X509v3 Authority Key Identifier:
keyid:62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:6a:3a:76:10:84:76:7a:89:74:22:94:e9:89:48:f5:6e:c3:
18:a1:6e:ca:71:60:37:d1:12:a6:23:ae:f3:76:9f:86:fe:de:
9b:13:6e:68:f8:2e:5b:b4:9e:0f:5e:35:c7:47:41:2e:29:f5:
e1:99:a0:ef:86:e0:9c:06:9f:35:7c:31:20:fa:14:c2:15:d9:
69:6a:ee:ff:45:bb:43:36:32:60:27:68:6a:30:8b:e5:ad:7e:
4f:bd:26:26:d1:42:2f:bb:15:ef:04:3c:80:6a:05:06:03:c5:
e2:30:49:ee:9b:ce:aa:61:52:d3:12:f8:5f:51:a6:52:58:35:
76:65:9c:ec:20:54:82:16:49:83:57:bc:24:7d:89:49:5a:2b:
29:fd:3b:40:6c:5a:0b:b8:54:13:d6:51:69:de:ba:cc:f2:07:
84:7d:ff:a5:c5:c1:a7:ad:7f:05:a5:6c:bd:b5:7d:4b:e8:02:
cd:cd:9e:d8:b3:1c:04:33:0b:19:de:ed:ad:07:a8:fb:f8:05:
fc:a6:0d:09:d2:2d:a9:58:ab:0e:fb:80:b4:c9:ce:31:42:2a:
82:df:24:35:bf:50:dd:bb:d2:b1:14:6d:8b:a4:c2:fd:11:38:
5c:3c:ae:39:0c:3c:98:a4:3b:4c:80:fe:60:97:e5:59:e3:e4:
17:37:01:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:58:26 2025 by rpki-client