Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
File: YDJcIdL6_nQzmNweVXRDMoARBGk.mft (raw, json)
Hash identifier: ZBQz1hCaS1SF6fbLl4oNmj0zUGHPvfNDWUFrtRTlhU4=
Subject key identifier: 0B:98:88:75:66:01:A6:3F:A6:D5:C2:2F:EE:DC:8B:4E:96:6E:E7:12
Authority key identifier: 60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
Certificate issuer: /CN=60325c21d2fafe743398dc1e5574433280110469
Certificate serial: 0197B632986D9639E4B8B6546C1C57BB2677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
Manifest number: 1466
Signing time: Sat 28 Jun 2025 11:00:58 +0000
Manifest this update: Sat 28 Jun 2025 11:00:58 +0000
Manifest next update: Sun 29 Jun 2025 11:00:58 +0000
Files and hashes: 1: 47Lsjeq5DX4wkpatXUE_-iIQY9Q.roa (hash: 4K/nWKrcsaLST8bPt6ayJw8vMIxal4U4+r8J15AVgP8=)
2: IM8VWz4L8uTjG3ZXrmr-hQCDEpU.roa (hash: mPn7wlOGgWBcgNZKFj/CLgGSvVpk3XUPtLV9M7i6VUo=)
3: YDJcIdL6_nQzmNweVXRDMoARBGk.crl (hash: fXVBGYQ/ED8K4UFJ/KRsIcB21MvOSHAIfi8DSM2FSF8=)
4: dbiwvrIUEB3DJnzikNFfso5iId8.roa (hash: iE+EP1DWoHf3NMKkX22W/jzavybl3y9slyLbgbFYb6M=)
5: sP5nildmZqp3srG2whATaK4yFJ0.roa (hash: 8RcLa/XNj+cj8Nd5KnP9mKP7qKdpC46YG8NrNsESEAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:98:6d:96:39:e4:b8:b6:54:6c:1c:57:bb:26:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60325c21d2fafe743398dc1e5574433280110469
Validity
Not Before: Jun 28 11:00:58 2025 GMT
Not After : Jun 29 11:00:58 2025 GMT
Subject: CN=0b9888756601a63fa6d5c22feedc8b4e966ee712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f5:75:0a:8c:9b:4b:18:cf:59:13:ff:79:bf:
49:71:ca:80:60:a3:43:24:ab:d6:97:88:f1:a4:64:
a5:d8:f2:67:e7:a2:dc:c6:aa:d6:51:67:f1:40:57:
4c:b2:13:8b:ba:d0:c5:8a:b2:18:2f:d4:26:37:8b:
02:8b:a6:5e:d0:64:20:03:0f:2f:fe:ef:96:ff:33:
3d:d4:91:67:94:07:28:0e:04:c3:60:44:5f:ba:0c:
9d:25:72:d2:e3:71:3e:b9:b8:05:f4:ce:ed:ed:8d:
c0:a3:0a:4d:ec:34:8c:ce:b8:1b:d1:d4:4a:9c:6c:
c6:25:20:ff:ba:77:dd:99:ab:8b:39:2a:ce:d9:f2:
63:5c:ea:ef:3a:d6:6d:11:7e:a0:5a:60:c4:81:b3:
3a:5b:9e:8b:9a:ba:4d:0f:41:48:b2:bb:ce:ae:81:
a2:87:f3:57:5a:c8:30:44:89:3b:80:2c:00:77:88:
98:c0:bf:53:ea:6a:f0:f1:88:f5:59:34:f6:5d:0b:
08:f9:a4:36:46:5b:c7:8a:1f:dc:a8:cf:59:2c:7d:
7f:9f:ae:3b:08:2e:0a:27:39:70:b2:4a:f9:ad:8b:
d0:81:b4:9e:d9:1f:1a:f1:e2:d8:d9:6a:89:05:2b:
92:73:54:ce:15:3b:98:4e:41:83:a9:86:4b:dd:e2:
cc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:98:88:75:66:01:A6:3F:A6:D5:C2:2F:EE:DC:8B:4E:96:6E:E7:12
X509v3 Authority Key Identifier:
keyid:60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e9:fa:60:aa:e9:3f:31:8a:54:d1:19:7e:d1:9d:3e:db:ed:
43:4a:fc:6d:04:bb:12:ea:17:8d:77:e2:c6:e9:db:9e:05:5d:
ae:32:14:ea:1e:5c:01:94:f7:c1:e2:69:37:71:7f:a8:57:04:
a1:08:e9:43:0b:f3:5b:ea:68:f5:bd:e3:a5:60:7b:de:2c:d2:
c6:af:82:ea:00:b2:78:0c:22:04:b6:64:3b:91:74:b7:3c:1c:
25:cd:76:00:fb:a6:b1:f0:f4:84:38:e1:b8:e5:7b:ab:83:fe:
94:2d:4e:f5:0f:41:e0:62:76:39:51:1c:0d:02:62:7d:bf:4a:
0d:0a:4d:fd:b9:e9:b0:ab:db:ce:f4:17:4c:7c:f6:0d:cb:72:
e8:d7:2a:d3:28:ca:0e:d3:ab:66:4e:9a:f0:e4:e3:5d:be:66:
34:bb:ae:e3:06:e0:5b:b6:71:ff:b7:8a:0c:8f:39:28:a9:fc:
b7:db:de:42:8b:f7:6a:5e:80:8a:c0:a8:71:7c:14:6e:d6:10:
3c:9b:e5:ba:54:8e:25:ff:d2:91:89:76:c5:7f:1d:ec:9d:ae:
91:df:94:a4:37:2d:48:b6:d4:cc:86:18:b3:33:08:96:d1:ad:
dc:79:95:e1:80:6d:7b:74:c0:be:f6:f1:f1:6d:6e:e3:e8:e1:
f5:b7:2a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:22 2025 by rpki-client