Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
File: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft (raw, json)
Hash identifier: XIGXGI4KfnbzThppETjFZZOzP8llcTXOuNPRlC6QpDU=
Subject key identifier: 2B:49:85:CD:A4:7F:9F:6A:6E:A0:D9:7C:25:9C:F7:7A:11:92:E8:A1
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Certificate issuer: /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial: 0197B58DB28AF68476492CB09616CFF31CED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
Manifest number: 0DB0
Signing time: Sat 28 Jun 2025 08:00:51 +0000
Manifest this update: Sat 28 Jun 2025 08:00:51 +0000
Manifest next update: Sun 29 Jun 2025 08:00:51 +0000
Files and hashes: 1: CNe8Ce9LX6bIFoae7IEYInIJvX8.roa (hash: vAks/DifGuIDg8MpuhTecKF4JO7GCicanpj2dhKngMI=)
2: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl (hash: fDIU+UgDAeUExJkvn3s9JpUbox3lsw1y51Pgqg2FBMw=)
3: nXfzcpDMArjxgb2F7qR75SrYmPY.roa (hash: 50wVvlHYuRdw/re5wFDGWVBuuEfzzC0RRb8vEvTcySU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:8d:b2:8a:f6:84:76:49:2c:b0:96:16:cf:f3:1c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Validity
Not Before: Jun 28 08:00:51 2025 GMT
Not After : Jun 29 08:00:51 2025 GMT
Subject: CN=2b4985cda47f9f6a6ea0d97c259cf77a1192e8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fe:38:2d:52:91:6e:39:c4:3e:ce:18:7b:a0:
94:df:ea:58:d1:83:05:f6:72:77:65:04:22:53:45:
4d:9a:9c:24:84:2f:61:6b:c2:03:5e:49:ae:5a:e2:
97:e1:ee:57:cd:ce:89:5a:07:30:4d:a2:74:74:3d:
32:90:20:4c:d6:01:24:c4:13:63:58:fb:80:e0:99:
f6:38:ef:e2:79:71:99:5c:fc:bd:55:e5:d0:9d:a0:
91:65:2f:73:a1:4b:32:b8:ca:1f:81:2a:dd:a1:5d:
08:e5:0e:b6:55:ef:f9:d6:24:bf:d5:62:03:5a:c8:
ce:30:a4:ec:04:d5:ed:ce:1b:96:f4:72:51:98:64:
e3:da:6b:8b:7e:60:08:03:57:d7:ab:c0:3d:0b:56:
7c:65:dc:b2:47:37:99:6f:54:ac:18:82:a2:d6:75:
49:99:05:2e:44:fe:ab:42:d8:ec:f1:3e:eb:78:a3:
13:13:af:25:84:18:71:ec:92:c8:85:38:95:b8:99:
0b:1e:6c:fc:fd:e7:06:c6:7a:b6:1a:0e:7f:3d:64:
ca:c4:86:ce:68:f1:6d:53:8c:56:da:13:4a:b9:b6:
6e:db:0d:d1:64:48:1c:43:c2:83:13:33:ec:5a:8e:
5e:7b:29:46:c7:d9:a1:92:f1:c8:b7:8f:c8:2a:64:
ad:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:49:85:CD:A4:7F:9F:6A:6E:A0:D9:7C:25:9C:F7:7A:11:92:E8:A1
X509v3 Authority Key Identifier:
keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:1d:6e:89:03:ff:34:70:cc:3f:8c:11:1e:f7:50:1d:ac:95:
dd:ad:bc:8b:4b:81:f0:78:12:38:7d:82:fc:96:08:50:92:0c:
3d:bb:4f:72:19:96:4e:bc:1c:64:90:f1:4a:7c:c5:3b:66:ee:
e9:35:bd:5a:6e:df:5d:ce:ba:35:74:2a:d4:56:f3:a5:31:a7:
81:24:16:a7:b1:bf:d4:8a:b9:44:9d:55:b7:7a:d3:50:21:d8:
2d:08:16:c6:f7:72:0d:98:14:61:a3:b7:17:66:21:b5:53:66:
f1:ac:c5:f5:8c:da:d0:d1:af:8e:17:9a:37:18:86:15:64:75:
7e:3d:de:3d:70:aa:a3:5b:f0:24:be:fb:a8:cb:e7:f9:b8:76:
c0:b7:58:6d:48:d5:f6:be:3e:2f:b5:e1:de:7e:61:e3:73:90:
1b:ae:b7:ae:69:2e:41:2f:13:9c:9a:9f:8a:6e:92:28:11:c0:
52:39:15:a1:0b:c5:e7:21:33:10:a7:ae:40:f8:a5:f6:11:46:
46:82:75:42:2b:d7:09:7b:5a:e5:dd:d1:31:e2:97:25:3b:c9:
53:de:e6:94:eb:b6:c3:98:46:76:19:da:4a:f6:c8:98:e7:ca:
f2:8c:8d:6b:7e:97:d7:13:1e:3b:1c:20:c9:e2:6a:7a:0e:ed:
cc:7e:99:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:57:25 2025 by rpki-client