Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
File: yzJFVZQK5Rr10fQr1axxWGT6GCk.mft (raw, json)
Hash identifier: ZAuziOet0sLktwJJWd9jM69WZBtImGNnD6g9efZgyNU=
Subject key identifier: 6D:60:08:02:90:FD:D7:17:0B:5B:A6:32:45:A6:4A:35:AF:18:4F:29
Authority key identifier: CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
Certificate issuer: /CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Certificate serial: 0197B77C846E1C1D72FC72584EC5F0AB88E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
Manifest number: 0606
Signing time: Sat 28 Jun 2025 17:01:20 +0000
Manifest this update: Sat 28 Jun 2025 17:01:20 +0000
Manifest next update: Sun 29 Jun 2025 17:01:20 +0000
Files and hashes: 1: ZOtgfqLDYdNWH5fYDhWkm9PND4Y.roa (hash: JwgLkVzCQiB/ULcLxd8PPGsr5tfW+toDKbyYKCvjGSc=)
2: by9kfZ4EbEKUVkVK0jeGqBsmfmk.roa (hash: LEv0S+P2XEMPTW4EvLdn5P/pRRYNUEDyCa7a7Tp2BTY=)
3: yzJFVZQK5Rr10fQr1axxWGT6GCk.crl (hash: INOPTiI2jrX1mf1uIevh76jeNyOg6kq6sIxI3o684V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:84:6e:1c:1d:72:fc:72:58:4e:c5:f0:ab:88:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Validity
Not Before: Jun 28 17:01:20 2025 GMT
Not After : Jun 29 17:01:20 2025 GMT
Subject: CN=6d60080290fdd7170b5ba63245a64a35af184f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:13:a6:00:e3:cf:81:cd:e2:a6:42:c6:91:bc:
c4:5c:38:28:46:9f:46:33:8d:46:48:bf:1d:38:26:
26:a9:12:23:e4:19:1f:dc:c6:bb:5f:65:4c:4f:c5:
9d:ea:dc:ff:22:2b:f3:c7:cb:5b:4b:97:01:29:6d:
c2:48:3c:ae:3a:98:7c:12:a7:8a:b0:79:91:dc:ba:
26:87:b4:c5:48:e4:24:75:3a:66:3d:49:a3:62:db:
33:4c:7c:45:17:5b:e4:f6:bf:8b:4b:03:70:06:da:
17:b0:37:f0:48:1f:7d:3a:47:0d:fe:9c:7f:48:b3:
d5:fd:a1:ef:16:b5:2b:1c:55:33:8e:51:18:74:7e:
8c:de:09:1b:97:13:62:87:23:6e:82:25:60:0c:57:
44:9a:d9:fb:07:6d:ab:03:2f:a7:2a:18:73:7e:7a:
0f:a6:23:e9:e1:f5:79:e2:35:51:7f:fd:c3:67:9b:
5b:70:89:da:46:b6:0e:9a:97:bd:37:cc:1a:b8:67:
f3:81:0a:b2:76:47:fa:43:4b:a0:5a:af:49:80:f0:
83:1b:d3:3c:6c:75:4e:5e:e7:d4:ef:21:9c:39:7c:
fc:b2:ff:52:53:5f:95:55:bd:d0:75:5d:0e:f8:83:
38:67:98:bc:25:9a:56:fe:39:30:d3:b8:92:9e:fe:
e6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:60:08:02:90:FD:D7:17:0B:5B:A6:32:45:A6:4A:35:AF:18:4F:29
X509v3 Authority Key Identifier:
keyid:CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b5:be:3d:b6:78:bc:8c:e7:f9:5d:03:5f:fc:6f:c0:cf:34:
a1:9a:d2:3d:a0:c1:e9:58:b5:14:3a:18:4b:7e:de:a1:68:f9:
cd:f9:ed:de:bd:e8:2b:81:30:0e:34:72:f4:67:78:8c:e5:9a:
69:77:29:89:0b:52:25:b7:77:29:06:7a:19:d6:d9:f4:24:aa:
c2:c9:81:ec:bc:95:9c:42:be:b3:f3:65:1d:d1:83:cc:0e:25:
e0:06:2d:4f:26:f7:5c:f8:3f:49:31:ad:6c:d6:67:90:6f:a7:
52:ae:10:ca:2a:fd:77:7d:64:b4:6e:ac:30:74:bf:03:62:0d:
42:d1:dc:94:77:24:0a:ab:29:6f:6e:0f:94:6c:64:e1:55:dd:
e8:0b:94:06:bb:99:4f:05:9a:76:48:cd:71:73:d1:b8:c2:0d:
82:5b:3c:48:a3:74:3b:3b:00:8a:6b:5b:82:be:cc:36:39:ff:
e1:6b:1c:3c:5e:e1:f5:82:4b:23:c4:ae:33:eb:34:d1:be:e6:
20:e5:10:0a:c1:db:ca:76:28:ef:15:85:8a:f8:4f:f1:56:40:
27:0d:c7:f4:85:31:9e:1d:ed:d3:58:26:b0:36:08:42:cc:45:
49:02:66:d6:ff:48:da:a2:52:d0:9f:a0:af:b8:d3:62:21:cc:
be:2f:76:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:43:07 2025 by rpki-client