Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
File: YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft (raw, json)
Hash identifier: ES5Ynsv9Vo2RlnPZaMwPHLZBTLV1+fj358tZlA2E0MA=
Subject key identifier: 2F:5B:69:4D:89:1E:D0:52:D4:C9:BA:4F:B6:0B:AD:15:FB:4E:B9:B9
Authority key identifier: 60:7C:0E:94:2B:F8:0A:7D:57:49:0C:C7:BB:04:28:5B:02:AE:FF:7A
Certificate issuer: /CN=607c0e942bf80a7d57490cc7bb04285b02aeff7a
Certificate serial: 0197B632819792846A110041F7B7C2AB4CA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 11:00:52 +0000
Manifest this update: Sat 28 Jun 2025 11:00:52 +0000
Manifest next update: Sun 29 Jun 2025 11:00:52 +0000
Files and hashes: 1: YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl (hash: Xkn0Y9qUwaH+fMik4QP41CiZojAx8p40pT/h8rcQVc0=)
2: YP_ojssdziwcanJcHJab_qTOmuY.roa (hash: U3A2fg6Wi6oAAnLmfskViTy7rAEB6sn2k8/iuWaNKoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:81:97:92:84:6a:11:00:41:f7:b7:c2:ab:4c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607c0e942bf80a7d57490cc7bb04285b02aeff7a
Validity
Not Before: Jun 28 11:00:52 2025 GMT
Not After : Jun 29 11:00:52 2025 GMT
Subject: CN=2f5b694d891ed052d4c9ba4fb60bad15fb4eb9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5d:3a:73:97:81:73:bc:33:a7:09:4c:69:f0:
c0:6e:d3:03:8f:17:0a:ca:24:cd:8c:7a:99:c9:cd:
09:5d:3a:1f:0a:fa:53:dd:52:19:d2:fb:24:61:ba:
90:a3:e3:7a:51:6c:ca:3c:b2:50:3d:df:92:b8:9c:
b3:0e:01:01:10:05:18:13:7c:48:2c:d0:92:0d:13:
8c:31:02:88:69:4c:28:b8:18:ed:c1:16:7a:71:fb:
00:84:2f:ae:0f:8c:fa:bf:f9:66:b1:c9:88:85:df:
13:e4:fc:44:ec:07:bc:98:e3:48:58:4a:f5:a9:6b:
e5:fb:42:29:1d:08:73:13:80:d9:bb:e9:af:f2:47:
51:4b:f7:bc:08:26:25:38:39:12:04:f6:9a:39:97:
a5:bd:98:ed:53:85:9c:29:f3:57:1e:5c:36:87:12:
0d:ea:c6:5a:e0:39:f9:98:f1:29:83:69:53:6a:a6:
8b:1e:a2:f7:a5:a9:6a:3e:39:2e:60:a1:2b:4f:7c:
fc:7c:c5:76:44:53:ce:3d:ea:57:a3:3d:3f:e8:75:
4e:5d:ac:b5:e8:e9:76:71:43:d5:e5:bd:3f:76:bb:
e1:ca:9e:78:38:5e:7d:ce:6d:86:05:83:8c:09:c7:
b7:a2:e8:70:e5:dc:c0:4f:00:ff:f6:9a:9c:b3:7f:
36:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5B:69:4D:89:1E:D0:52:D4:C9:BA:4F:B6:0B:AD:15:FB:4E:B9:B9
X509v3 Authority Key Identifier:
keyid:60:7C:0E:94:2B:F8:0A:7D:57:49:0C:C7:BB:04:28:5B:02:AE:FF:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:22:85:18:d2:c3:87:38:d0:9e:fb:79:a0:6d:ac:f5:98:11:
c1:35:fb:8c:ab:45:b0:a1:b2:6c:a0:1b:eb:dc:1b:97:f6:e7:
76:bc:0c:ec:fd:28:94:a9:16:a3:0b:0a:12:cd:ab:8f:36:5c:
a0:72:fc:56:a7:75:54:67:3b:79:92:51:6e:5f:77:33:cb:83:
c5:9b:ea:c1:bb:da:16:e8:16:33:8b:fe:d9:c9:9f:d4:9e:41:
5c:1a:c3:08:e4:91:7a:d5:df:a9:06:df:50:dd:18:16:ec:54:
00:27:f6:11:a2:fb:d8:14:5c:d3:6c:23:8b:31:66:50:13:88:
81:cc:29:6b:60:e0:4d:16:d6:89:f0:19:f2:ec:16:e7:38:b9:
c5:2b:9e:47:64:77:be:ac:89:4c:97:aa:a0:5b:15:77:93:a8:
12:32:a5:ad:64:ba:a3:70:ee:a9:c2:da:45:b5:e6:86:79:d4:
2b:17:97:80:a3:a7:d3:41:91:34:30:01:bc:60:f0:c3:8c:45:
27:b8:1a:cf:b8:5c:c3:44:45:16:a5:88:a1:aa:ee:51:05:b0:
9b:56:30:7c:8c:59:26:f7:07:56:9b:09:3c:53:fa:d2:c0:a9:
75:56:e5:38:e3:74:5d:66:62:76:fb:26:5c:b2:8e:de:91:db:
50:43:4f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:42 2025 by rpki-client