Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
File: YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft (raw, json)
Hash identifier: KPIar/qLAcY0y5kHNa6fePMNtbkewCGdf6VS483SIoI=
Subject key identifier: 72:9B:36:AF:24:EF:36:6E:22:2D:5C:D0:44:F6:0B:21:F9:34:D2:2A
Authority key identifier: 60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
Certificate issuer: /CN=600e85f581c7513908ea04665fd23726fd70e62b
Certificate serial: 0197B8C5D0F2091969C5B9A57F67C8798955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 23:01:01 +0000
Manifest this update: Sat 28 Jun 2025 23:01:01 +0000
Manifest next update: Sun 29 Jun 2025 23:01:01 +0000
Files and hashes: 1: YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl (hash: QJjPcp6rarGmJrsv0irxpOk64GkuozeJksxvXuYKaBo=)
2: xoPlD0rrBEJIFIvkk6R1R6ePGVo.roa (hash: v5S5OgtFceKc/UtdxN43/f/RbwPnYdlFD8XVOZ+FDEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:d0:f2:09:19:69:c5:b9:a5:7f:67:c8:79:89:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600e85f581c7513908ea04665fd23726fd70e62b
Validity
Not Before: Jun 28 23:01:01 2025 GMT
Not After : Jun 29 23:01:01 2025 GMT
Subject: CN=729b36af24ef366e222d5cd044f60b21f934d22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7a:22:0f:58:c9:5c:d4:68:94:16:2f:6c:10:
f3:96:5b:4e:32:49:8b:77:ce:89:6a:3c:53:b8:6e:
70:fe:4c:f7:4f:0a:1e:7f:4e:90:a3:9a:98:a1:7d:
22:08:ed:3d:90:66:1f:08:88:89:d9:bb:97:4b:60:
27:99:a9:6e:a3:7e:81:c7:b8:5e:86:af:18:1b:aa:
8f:40:19:f8:b0:5f:2a:c6:2b:f3:81:46:dd:d2:f1:
a0:fb:e6:55:b7:55:03:c0:d5:16:4e:37:45:ed:4d:
76:28:fa:e0:12:c9:91:9e:fc:57:3f:46:e1:c0:eb:
48:81:34:9b:f4:49:34:49:5a:d6:0b:f5:f7:bd:88:
e7:ce:c7:23:ff:83:5b:d8:55:c1:44:01:bd:07:09:
1b:de:da:5d:cd:4e:1b:be:0b:42:95:38:88:92:32:
b9:e1:1c:13:0d:31:3b:a3:81:59:e3:d1:6b:5d:ae:
09:ea:ec:3f:34:1e:c7:64:cf:26:2f:73:d2:24:58:
a4:80:79:a5:63:d3:0c:99:ff:ae:85:c7:d2:c8:80:
48:53:a1:66:e0:45:36:8d:85:da:a8:03:86:85:2a:
54:37:15:84:5b:99:ae:98:5a:1a:a5:02:ba:c2:76:
14:fe:30:6a:4e:da:af:97:f1:74:7f:ec:31:18:a4:
8d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9B:36:AF:24:EF:36:6E:22:2D:5C:D0:44:F6:0B:21:F9:34:D2:2A
X509v3 Authority Key Identifier:
keyid:60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8b:28:d7:76:e0:34:ed:60:09:50:13:37:44:0c:3c:fb:49:
9d:9e:2b:65:88:0c:ff:9a:fc:10:8e:17:00:1f:d0:d1:17:ba:
e6:46:ff:0c:80:d5:72:be:32:a0:97:d6:f3:79:62:ea:74:a2:
d5:18:3e:39:18:24:00:7b:18:22:0d:1b:b1:b2:61:dc:78:f0:
c3:63:e1:6a:19:25:bf:d6:e5:ce:b9:76:48:1e:9a:15:17:ad:
37:c0:3a:7a:45:64:60:4f:0a:47:7e:cf:69:1e:93:93:26:29:
de:01:cf:2b:97:21:40:44:d9:89:62:1a:69:1d:d2:a2:bb:c4:
7c:4d:01:22:e4:3b:50:99:c3:3b:14:9e:3b:c1:13:19:fd:3b:
a6:33:aa:1e:17:a9:08:d9:66:5a:48:bd:be:6d:6f:fe:30:34:
16:bd:04:f5:44:41:ab:ab:ff:37:b9:1d:85:9c:83:00:2c:7b:
ee:d9:ed:9b:1c:98:ae:a8:ce:cd:4d:00:25:ff:64:0a:19:87:
79:ac:23:1a:a2:b4:d3:3d:5f:7b:f4:cd:7d:de:7b:f3:2a:a5:
20:8b:78:dd:3a:e7:d2:71:3c:8b:8e:98:9b:57:ed:38:96:51:
03:71:ac:ba:4d:8b:c9:85:97:fb:15:21:e0:a7:d3:c7:4f:d1:
48:18:74:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:48:39 2025 by rpki-client