Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
File: YP9t9Egm-fEGScV46sQWFnBSlCc.mft (raw, json)
Hash identifier: GCLMZ//Nc8gVlmt899XOrtMm5Bv27AyFgx8jGTVPe2U=
Subject key identifier: 45:D2:E9:8F:3D:C9:24:90:57:3A:EC:C7:3D:9D:C7:9E:BD:67:B7:43
Authority key identifier: 60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27
Certificate issuer: /CN=60ff6df44826f9f10649c578eac4161670529427
Certificate serial: 0197B6A04AB0BE880BA2B13FBA6E19FE81DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:00:47 +0000
Manifest this update: Sat 28 Jun 2025 13:00:47 +0000
Manifest next update: Sun 29 Jun 2025 13:00:47 +0000
Files and hashes: 1: YP9t9Egm-fEGScV46sQWFnBSlCc.crl (hash: iZC5sxgV146dCFuV04WNpFkPMvxaEvGwDjp/Fk8ZBqc=)
2: aQpN_AazwsYK521EYwQJi9M2iSk.roa (hash: GQsuDZdcScHpctBuVbdbtj6CCFBXdaH1ubDgAN0EZ6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:4a:b0:be:88:0b:a2:b1:3f:ba:6e:19:fe:81:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ff6df44826f9f10649c578eac4161670529427
Validity
Not Before: Jun 28 13:00:47 2025 GMT
Not After : Jun 29 13:00:47 2025 GMT
Subject: CN=45d2e98f3dc92490573aecc73d9dc79ebd67b743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:59:a4:bb:e1:cf:28:c3:bd:21:9d:53:00:
f0:e3:75:82:e8:b1:4f:2e:bc:54:48:88:55:81:a7:
46:fc:78:f0:08:a2:c3:b3:da:49:53:51:fb:a9:48:
d7:4a:e9:55:ad:c0:b1:09:79:c2:08:99:f7:5a:39:
5d:1e:4c:51:2a:6b:df:53:66:7f:86:02:88:18:be:
a2:4a:c1:c6:dd:41:52:c1:9c:8a:2c:b9:be:8e:bc:
7a:91:3e:89:78:e5:36:a5:1e:80:a5:2e:50:93:eb:
44:83:ba:7c:76:ce:40:dc:92:17:6b:cc:55:f4:2d:
48:8e:ee:68:19:d7:e6:31:40:17:1f:11:a7:ea:f2:
61:d0:4f:a7:c1:97:a8:98:5b:8c:12:72:1d:99:9c:
33:6b:3e:c4:74:6c:8e:28:78:62:01:7d:92:85:1f:
53:dc:78:f7:d9:5f:db:43:3c:f8:54:b5:03:2a:62:
6e:d6:4c:28:2b:64:e1:62:4c:12:3e:bd:6c:56:5e:
67:58:bc:15:26:18:e2:50:bc:91:87:4d:c1:17:1c:
3c:fb:2d:58:11:bf:33:9a:b9:23:c6:5e:be:02:af:
cd:ae:36:8a:e8:05:83:3e:57:72:4a:7f:31:08:f0:
c1:5b:a9:6c:70:30:aa:ff:2f:91:9c:f8:ea:bd:41:
e8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D2:E9:8F:3D:C9:24:90:57:3A:EC:C7:3D:9D:C7:9E:BD:67:B7:43
X509v3 Authority Key Identifier:
keyid:60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:af:e9:53:69:b5:6f:98:4c:48:9c:0a:63:d6:66:5a:5e:69:
81:56:84:2a:98:b9:4a:f0:39:99:3d:09:c3:1d:9b:d3:1d:33:
d6:17:22:0f:27:d3:88:47:f4:04:02:09:a8:cc:db:76:56:bd:
38:74:57:ca:91:d4:9c:df:6d:18:8b:e3:23:9a:d1:5b:f3:4f:
c6:c0:c2:dc:7e:5c:1e:14:e1:f3:9e:1f:0c:5d:03:4d:47:03:
14:8e:a6:4a:10:b3:d6:4a:11:7e:8f:2e:5e:a2:4a:df:88:17:
21:4d:b6:7e:79:a9:00:d1:f4:92:cd:45:05:dd:3b:44:20:e4:
28:f1:12:7c:03:2d:7a:a4:4e:72:40:29:a3:f3:84:4e:73:45:
fe:46:9e:fa:21:92:f3:6b:48:52:5b:25:5a:f8:c8:20:45:63:
26:2a:6d:ca:55:f3:d2:40:8a:a3:dc:51:20:e2:a8:69:36:aa:
1c:e4:50:6c:05:1f:1f:94:b0:fe:04:32:8d:bf:ce:ad:f0:7e:
32:b1:f0:28:6d:a6:1a:c1:a9:73:10:ac:21:95:60:5e:47:67:
91:68:a4:af:f8:a5:b0:2b:7e:f2:d1:51:11:af:a3:88:40:be:
db:0a:d3:9d:a0:78:62:78:de:ab:1f:d6:87:af:3e:9b:08:45:
fb:99:20:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:03:11 2025 by rpki-client