Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
File: YPWqx2_mvykTNdGaZY5kiRBbhp8.mft (raw, json)
Hash identifier: RgXiVNCGLmxr+tn5ojlyAVLBianGDpBooQRzE9GsyMY=
Subject key identifier: 4D:81:0F:A7:4F:2C:82:FC:F7:7F:E6:7F:C7:A2:25:53:00:2A:82:65
Authority key identifier: 60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F
Certificate issuer: /CN=60f5aac76fe6bf291335d19a658e6489105b869f
Certificate serial: 0197B6A0C0253FDEB1C02EDA916B1D40E725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
Manifest number: 0187
Signing time: Sat 28 Jun 2025 13:01:17 +0000
Manifest this update: Sat 28 Jun 2025 13:01:17 +0000
Manifest next update: Sun 29 Jun 2025 13:01:17 +0000
Files and hashes: 1: YPWqx2_mvykTNdGaZY5kiRBbhp8.crl (hash: uecCxa3LBgjML/r/3a87Hy73iKXT0WanXocg4JjOJ1Y=)
2: wK5U0OA4so9Bb6LaTOAhvYcrZbw.roa (hash: i3F3Ec/aHEk6lLvyEsCOnZPx8LpXq7mO54DzXI/2qs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:c0:25:3f:de:b1:c0:2e:da:91:6b:1d:40:e7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f5aac76fe6bf291335d19a658e6489105b869f
Validity
Not Before: Jun 28 13:01:17 2025 GMT
Not After : Jun 29 13:01:17 2025 GMT
Subject: CN=4d810fa74f2c82fcf77fe67fc7a22553002a8265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e8:45:f8:9b:5b:82:8c:75:ae:4e:46:b4:13:
70:b0:f4:65:85:40:8c:78:0a:cf:27:db:d2:3a:e0:
93:e3:1c:7e:52:10:29:73:b1:d5:75:b9:76:79:71:
a1:ec:0d:44:0e:cd:19:c8:1a:9f:f5:8d:23:d8:2f:
89:17:b6:4c:aa:db:62:c3:23:a9:11:fb:bf:15:28:
ef:70:0d:79:43:41:66:7c:9d:79:89:3f:de:06:dc:
68:79:8b:3f:10:35:3d:16:14:60:eb:bf:19:ff:24:
96:bd:2a:01:3b:5d:91:aa:cd:2b:49:b3:9e:03:52:
c4:09:3a:19:cc:f9:15:63:a3:5c:f1:37:a3:6f:47:
12:ea:a9:b9:d3:09:f4:6e:44:91:91:79:18:0a:d4:
c1:69:05:d7:5e:d8:d7:c4:eb:68:6f:b4:ed:3a:0f:
2a:80:33:12:12:79:83:1a:da:88:c4:93:9e:67:0a:
86:13:6c:40:18:01:52:25:ff:04:d9:31:39:b4:9b:
4a:8b:33:e8:00:44:54:6f:9f:f6:03:02:41:4d:03:
94:86:9c:a9:2e:23:31:a4:44:a4:14:c4:5e:2d:6c:
53:a3:bd:63:a4:f5:09:f5:aa:10:a8:8d:05:5a:9e:
9a:17:39:7f:7c:0c:18:59:1f:4a:ee:3a:4d:7a:54:
3e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:81:0F:A7:4F:2C:82:FC:F7:7F:E6:7F:C7:A2:25:53:00:2A:82:65
X509v3 Authority Key Identifier:
keyid:60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:6a:14:5f:c1:5b:45:09:8b:12:ff:91:94:20:34:2c:da:6a:
31:8b:c7:93:d0:60:53:93:ae:d9:2a:f2:4b:d8:8e:22:85:1d:
e4:5f:3e:6b:e5:cd:f1:ba:c2:34:a8:14:e3:88:0b:27:a1:66:
3e:29:c4:25:bc:4d:86:0a:bb:b1:1c:6b:27:e7:7c:3e:07:26:
2e:50:d0:d0:f5:e6:42:1f:36:6f:71:9b:1f:11:91:fa:9d:10:
a9:ce:82:f5:db:56:43:e9:7a:dd:89:77:75:ab:7d:79:51:da:
9f:9a:b1:99:ab:98:b5:6f:96:35:32:cf:05:de:b9:de:30:2d:
7e:b8:e9:4d:dc:b7:12:69:05:39:0e:f5:7c:34:48:ac:7f:c7:
bf:03:48:90:f7:94:a8:fd:68:79:f5:5b:02:bb:39:dd:0c:27:
03:7c:cd:b9:00:b2:1e:77:b5:81:72:4d:ec:75:64:71:e5:3c:
80:01:6d:79:59:b2:22:0b:d2:3d:66:0e:dc:35:ea:90:e4:21:
e2:55:0a:c9:60:46:e2:e7:09:ea:e6:50:fd:de:3e:1d:83:0a:
81:8a:82:9a:1a:4d:b3:1e:ee:a4:63:12:8b:96:e9:34:27:bc:
52:b1:26:cf:e0:c2:5b:62:41:c6:16:02:b9:5a:5b:d9:45:a8:
9f:22:11:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:04:49 2025 by rpki-client