Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
File: YbHjHAn-gm_k15Ln-ohV4K05NCo.mft (raw, json)
Hash identifier: W/kVtNY9E9d+dWvMP2a/ondXraM84x/8fjnB0HzH2q4=
Subject key identifier: 99:01:81:F8:C3:CB:51:FD:B3:DA:8E:88:8C:28:66:C6:38:4F:1F:91
Authority key identifier: 61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A
Certificate issuer: /CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
Certificate serial: 0197B96A8A429B455427D2E06CBFB58AADC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
Manifest number: 15B4
Signing time: Sun 29 Jun 2025 02:00:56 +0000
Manifest this update: Sun 29 Jun 2025 02:00:56 +0000
Manifest next update: Mon 30 Jun 2025 02:00:56 +0000
Files and hashes: 1: 6NZRnUE5rHquhh6nv9A14s2aRkA.roa (hash: BDIznY+oSrAehNVVW8SN5zZkQxk6NfrwDHMlr9/Gl2o=)
2: YbHjHAn-gm_k15Ln-ohV4K05NCo.crl (hash: oHXEmgXUDT0g+6/VD5wutow16dpeWTpRLuneat99m+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:8a:42:9b:45:54:27:d2:e0:6c:bf:b5:8a:ad:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
Validity
Not Before: Jun 29 02:00:56 2025 GMT
Not After : Jun 30 02:00:56 2025 GMT
Subject: CN=990181f8c3cb51fdb3da8e888c2866c6384f1f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b5:c5:4f:40:10:a5:23:34:ba:b9:32:fe:d0:
f5:8d:1f:80:67:7b:72:a8:f6:73:cf:62:d4:80:09:
a5:40:2b:0e:52:0f:5e:ca:fd:ca:a0:3d:40:23:b6:
7b:41:74:09:b5:bc:45:e3:53:87:46:8c:87:60:46:
e7:f7:f0:82:e3:28:a8:35:e8:5d:f5:10:4e:be:19:
f3:7c:76:39:fb:2b:a7:16:5b:a2:5b:28:46:bb:a9:
70:9f:45:fe:8e:4c:73:7b:7b:27:c2:33:89:d8:c0:
99:38:7f:d6:0f:26:7f:12:4b:d7:01:c7:a5:ca:f1:
31:c2:ae:0d:f7:45:ee:04:02:06:cb:7f:0d:20:c6:
b6:5f:ed:37:1b:d3:84:0c:94:d3:b9:7a:37:07:10:
68:d8:ad:7a:cd:0f:87:49:b0:b8:c7:20:7a:10:54:
0f:c9:39:79:91:8c:88:1a:61:b1:22:16:69:d9:76:
e0:c2:91:ab:01:b9:ec:1c:24:e9:12:ea:1e:e5:a5:
82:09:2f:e5:98:ba:d7:9e:e0:17:8f:9e:99:84:cb:
cb:c6:7a:9b:50:12:a0:c3:48:91:18:3c:08:df:50:
13:1d:bf:a1:c8:11:74:f8:f9:4e:d7:e6:d2:97:60:
fb:72:e3:b5:ab:cc:94:70:20:a2:0b:15:02:e4:d3:
8d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:01:81:F8:C3:CB:51:FD:B3:DA:8E:88:8C:28:66:C6:38:4F:1F:91
X509v3 Authority Key Identifier:
keyid:61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5a:b1:1d:71:af:0a:c3:4c:35:b3:ee:4a:b9:d4:3f:f5:66:
4f:47:b0:e0:3c:c2:61:a2:e8:65:0f:a3:a5:7c:25:6a:cb:02:
2b:84:ba:17:bc:3b:30:18:c0:54:4a:24:c4:9d:02:22:59:ad:
be:82:4b:8e:f3:a0:cf:d9:26:e2:32:bb:8d:b7:e9:44:71:df:
f3:e7:2d:ab:c2:e2:59:cf:c9:6f:d9:20:ac:e2:49:f0:6e:8f:
2f:56:c5:b1:1c:6f:8e:e1:8d:92:ca:f6:c1:b3:3f:ad:1a:02:
2b:a8:2b:22:e0:b4:d4:9f:3f:aa:94:05:a6:98:ed:a0:24:b2:
05:7b:98:6a:72:47:c4:6e:56:4d:59:03:aa:ed:74:03:d7:ea:
87:0a:0d:e2:af:4a:ae:e4:6c:74:78:af:56:83:2c:6b:98:ec:
5a:56:29:33:3d:ae:8b:a9:18:99:42:b6:55:c4:68:e9:29:4c:
e6:45:4f:39:4f:c7:07:43:32:74:d2:10:86:26:fd:7b:66:b7:
db:12:4f:42:6b:7e:db:c8:82:ee:a2:be:64:6a:79:bb:45:ec:
21:b0:7c:99:8d:47:fc:31:7c:78:2d:bd:ab:ad:22:1d:05:6e:
8a:19:c8:5d:7e:fc:c9:55:82:5d:4e:32:60:97:01:0a:35:8d:
0e:2f:c1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:16:36 2025 by rpki-client