Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
File: YAG5U8a-H5GDHWilwBFcIODNf5o.mft (raw, json)
Hash identifier: Km0WMvW1rsECZwPU4a7tmosG87YjvD1MkGgj7blg6Og=
Subject key identifier: 0C:7A:E3:73:99:D2:DB:32:32:D8:C1:8D:1A:E5:76:37:A4:AE:B8:9F
Authority key identifier: 60:01:B9:53:C6:BE:1F:91:83:1D:68:A5:C0:11:5C:20:E0:CD:7F:9A
Certificate issuer: /CN=6001b953c6be1f91831d68a5c0115c20e0cd7f9a
Certificate serial: 0197B5FC1B33C1A10C47617656CCC228889A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAG5U8a-H5GDHWilwBFcIODNf5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
Manifest number: 0598
Signing time: Sat 28 Jun 2025 10:01:27 +0000
Manifest this update: Sat 28 Jun 2025 10:01:27 +0000
Manifest next update: Sun 29 Jun 2025 10:01:27 +0000
Files and hashes: 1: QQlxlfhA9BwLpxAQMkShfHqNuQ8.roa (hash: J1jtN5BQZROl/8dEYO5qeCL3b90fBYd6l0TNzemkVxs=)
2: YAG5U8a-H5GDHWilwBFcIODNf5o.crl (hash: mm2zXFJkqexXgfJ87qxey4Kz9GV93A1BOmCuzvucCEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAG5U8a-H5GDHWilwBFcIODNf5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:1b:33:c1:a1:0c:47:61:76:56:cc:c2:28:88:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6001b953c6be1f91831d68a5c0115c20e0cd7f9a
Validity
Not Before: Jun 28 10:01:27 2025 GMT
Not After : Jun 29 10:01:27 2025 GMT
Subject: CN=0c7ae37399d2db3232d8c18d1ae57637a4aeb89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ab:1d:0a:94:d3:54:51:a7:50:d5:a7:e0:ca:
f4:a8:be:ad:ab:09:84:43:01:60:67:5d:da:b6:af:
67:1a:91:88:aa:95:aa:32:c8:df:15:2e:60:2c:3b:
aa:2b:41:27:a9:9e:6a:6c:b2:8a:b7:7f:2f:72:99:
44:4c:c7:fd:2a:b3:7d:c8:e1:4a:a1:57:66:b3:46:
d6:91:ea:07:fd:4a:01:37:76:0b:3b:57:da:f8:2a:
48:f2:0c:eb:43:94:67:51:42:14:19:4e:bc:59:e3:
a3:43:90:e1:fa:bb:5f:9c:3c:22:25:85:f3:f7:86:
bb:8f:d7:e7:78:22:d3:27:32:99:d7:3b:75:a2:ab:
df:d3:7a:49:ea:89:2f:fd:6a:2f:c6:6f:db:52:b5:
f6:ef:df:a7:62:bd:40:5e:b1:02:8a:71:b2:e9:c5:
32:b2:85:df:a1:38:67:f0:ac:70:ec:79:60:bb:ea:
88:e0:f8:3c:e5:13:3b:58:ee:c6:d9:f2:ea:61:b2:
5e:4a:1e:5d:5e:8b:80:88:eb:38:90:87:3b:60:ad:
a4:bd:c9:7a:cd:9c:f6:a0:bc:2e:b6:12:6f:23:1e:
84:47:b5:77:bb:22:46:eb:7b:e4:8b:6f:6e:5b:02:
d4:37:ff:a1:4b:29:e2:18:ad:15:37:cf:cf:c1:56:
a7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7A:E3:73:99:D2:DB:32:32:D8:C1:8D:1A:E5:76:37:A4:AE:B8:9F
X509v3 Authority Key Identifier:
keyid:60:01:B9:53:C6:BE:1F:91:83:1D:68:A5:C0:11:5C:20:E0:CD:7F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAG5U8a-H5GDHWilwBFcIODNf5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:2d:a1:a8:57:f1:0b:7a:94:30:29:b5:75:2c:59:66:bb:b5:
7a:9b:f8:e8:1d:5b:07:1c:fa:04:60:a4:81:b5:54:4b:58:e9:
e2:95:3a:d8:6c:67:06:64:b3:2c:dc:ba:30:18:85:18:de:6e:
b9:4d:3e:35:75:56:6c:ad:4e:fa:00:78:66:79:1b:88:b0:dd:
a6:cb:c5:65:89:c3:1e:f7:95:d0:a5:bc:9b:ad:36:62:7f:32:
cb:1a:b4:00:db:cb:de:94:d4:7e:5e:69:4a:9d:c4:f5:7c:5c:
4f:cd:45:76:b2:71:11:41:39:8b:5b:8b:1f:c8:14:3a:14:1b:
ab:26:63:a8:90:47:70:19:f0:e4:f7:57:49:42:30:c9:c8:7c:
8c:fa:4e:84:97:7d:b4:19:c1:c5:93:16:59:29:22:3a:1c:44:
e9:0d:da:24:8e:9e:72:8f:9a:75:49:e3:d7:e5:4c:28:ca:fe:
e0:4a:6c:9d:a1:0d:c7:4e:f9:87:e9:fe:2c:e1:16:ca:87:70:
bc:c9:97:37:f1:a1:cf:d0:da:ab:df:89:69:f8:a2:38:b3:ec:
c7:2f:6d:f0:61:a9:34:35:06:be:36:a1:6f:9f:10:cd:9e:a1:
36:44:d8:56:df:a4:86:bf:a3:f6:06:f0:e2:2a:c7:f2:e0:f0:
4e:70:5a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:28 2025 by rpki-client