Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
File: YHzqbhA6IyXEjBZnqZx7F-s857Y.mft (raw, json)
Hash identifier: dtEuSLIr1elLcojTg/eEXmKKd4Dr/ZjUvHozhpUW1Ho=
Subject key identifier: 2F:2C:0B:22:AF:2F:C4:E5:DE:6D:D2:2C:4C:15:DA:FC:07:78:84:48
Authority key identifier: 60:7C:EA:6E:10:3A:23:25:C4:8C:16:67:A9:9C:7B:17:EB:3C:E7:B6
Certificate issuer: /CN=607cea6e103a2325c48c1667a99c7b17eb3ce7b6
Certificate serial: 0197B5FBE892D3C7B1A00FE244769A19A510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
Manifest number: 12F2
Signing time: Sat 28 Jun 2025 10:01:14 +0000
Manifest this update: Sat 28 Jun 2025 10:01:14 +0000
Manifest next update: Sun 29 Jun 2025 10:01:14 +0000
Files and hashes: 1: 8tqsaUcyKZIIKG75KzikfFZDjvk.roa (hash: zktR6lve6abwwBFYbdtbK1pvyhA4oW0U5RIxFZXPtoI=)
2: YHzqbhA6IyXEjBZnqZx7F-s857Y.crl (hash: sHTthQLYX5+Y9kGgvOyLZTWxauXq7HAZWg3lIBl86Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:e8:92:d3:c7:b1:a0:0f:e2:44:76:9a:19:a5:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607cea6e103a2325c48c1667a99c7b17eb3ce7b6
Validity
Not Before: Jun 28 10:01:14 2025 GMT
Not After : Jun 29 10:01:14 2025 GMT
Subject: CN=2f2c0b22af2fc4e5de6dd22c4c15dafc07788448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:17:39:9c:ea:a1:94:02:94:e6:4f:ba:7f:d6:
97:e2:50:3d:66:d6:c3:ec:ec:31:6e:02:da:7c:81:
49:44:0d:77:83:64:18:bb:31:cf:eb:9d:21:48:59:
64:4f:12:44:20:44:fe:ce:bc:28:47:ff:32:7a:d1:
51:f2:a8:61:be:85:f9:7f:b2:60:33:04:49:0d:8e:
04:9c:91:63:ce:cb:a0:a3:83:16:54:b4:d8:8a:45:
93:08:3e:24:bf:5d:98:c0:12:3f:b0:86:f7:9c:4d:
8a:31:34:03:1f:6d:23:25:13:2d:81:97:7d:7e:9f:
fc:b4:25:24:a2:48:7f:70:20:68:49:d4:2e:c4:75:
86:04:39:59:97:46:84:95:47:7f:c2:da:25:a7:b4:
55:30:3e:3a:03:cb:42:77:a6:e6:bf:5a:4f:94:57:
43:02:ed:70:70:2c:6d:94:2d:4c:96:b3:f1:20:9e:
92:a1:fe:44:e2:64:f0:75:3a:7a:9a:d9:66:ca:c0:
33:07:32:db:a7:7f:50:36:b8:68:c9:0f:03:b1:5f:
8f:df:02:d5:de:ca:c9:79:36:8b:3a:a1:33:49:37:
be:88:be:03:56:40:67:35:ef:1a:61:12:2e:20:45:
0c:4d:b9:45:b8:2e:dc:c4:5f:d0:2f:54:b3:02:8d:
76:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2C:0B:22:AF:2F:C4:E5:DE:6D:D2:2C:4C:15:DA:FC:07:78:84:48
X509v3 Authority Key Identifier:
keyid:60:7C:EA:6E:10:3A:23:25:C4:8C:16:67:A9:9C:7B:17:EB:3C:E7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:92:f9:cf:ed:c0:a9:32:0b:3a:f6:db:5d:30:6c:87:1d:54:
67:fe:5c:25:c4:44:54:00:fb:d0:81:dc:4d:2e:eb:0f:bb:7e:
3c:a1:5a:fd:01:2b:d7:f0:0f:0d:a9:2a:67:9a:56:2e:a6:09:
c2:5c:88:a3:3c:74:ce:53:00:96:88:be:49:81:9e:08:80:b7:
2c:cf:8b:f6:31:73:74:18:92:fb:b2:c8:0a:7f:03:b6:bd:61:
62:cc:77:20:9e:ce:07:f7:7c:42:33:83:a0:30:7a:17:a7:88:
74:fd:37:dd:a1:c0:c6:4e:fd:b0:61:f6:65:39:56:89:c3:09:
25:2d:d2:ca:dc:70:9c:f6:b6:92:3b:70:fa:c1:5b:78:4c:d5:
2f:41:44:29:d6:f9:d7:b4:d3:18:99:9b:80:fb:79:21:a7:b3:
41:3b:16:0d:18:d4:b7:b7:a3:52:d9:27:13:cc:1b:fa:c5:42:
a5:f6:ee:93:15:6e:94:58:88:fd:0c:fa:fc:d6:a7:00:8d:a6:
7e:a2:af:00:8e:8a:d3:76:b5:87:be:97:89:1e:d9:00:2b:c9:
b9:46:32:9b:7c:6d:48:4c:ad:90:a2:76:4c:97:91:d1:19:eb:
44:a4:61:75:f7:20:a7:d3:07:f4:0d:58:36:db:e3:29:9a:33:
3c:23:0b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:38 2025 by rpki-client