Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
File: Yf4ur6ZKzq8fz8-8phUKei01vko.mft (raw, json)
Hash identifier: YPEedLkdwTTW5CGev27fifrwoW+ipDoIIFEN6bUDMHc=
Subject key identifier: 5A:16:F6:E2:4A:D2:D3:44:92:E9:22:4A:65:C3:7A:2B:8B:1B:B0:3D
Authority key identifier: 61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A
Certificate issuer: /CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
Certificate serial: 0197B70F03244412A35509F5FAF4AC14BF90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 15:01:43 +0000
Manifest this update: Sat 28 Jun 2025 15:01:43 +0000
Manifest next update: Sun 29 Jun 2025 15:01:43 +0000
Files and hashes: 1: Yf4ur6ZKzq8fz8-8phUKei01vko.crl (hash: uld4dwFCl02ll5cQDUSd1V6LqaQuEA6iAfk5ZZ1NukM=)
2: wsNRODSlq_nh1GDEKdmia3PTMko.roa (hash: oJgNuBgkHwRy1QBN/xCPFqgneU9FqbAO/DZOxkV4624=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:03:24:44:12:a3:55:09:f5:fa:f4:ac:14:bf:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
Validity
Not Before: Jun 28 15:01:43 2025 GMT
Not After : Jun 29 15:01:43 2025 GMT
Subject: CN=5a16f6e24ad2d34492e9224a65c37a2b8b1bb03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1a:c6:f8:fe:d0:34:95:3a:cb:9d:bd:40:b4:
65:d6:36:2c:06:fb:b5:fb:30:69:76:00:0f:8e:13:
90:5f:eb:73:83:7f:94:e5:3b:dd:84:bc:68:46:12:
02:e4:7b:c5:df:08:7c:8c:74:dc:c0:f7:93:5e:95:
e2:fc:5f:60:e0:81:ab:7e:79:58:19:8f:04:e9:79:
50:fa:6c:a3:ac:12:ed:e4:aa:fe:9e:67:d5:7d:0e:
ee:db:63:0e:f4:f2:ea:7c:a2:0d:5f:db:f6:19:04:
63:48:54:9e:94:84:07:f9:6c:fc:3e:c8:e6:81:46:
77:ad:5d:d9:0b:b3:5f:e2:b9:0d:4d:da:82:e0:83:
a9:7d:6f:17:9f:0c:10:80:f9:50:ae:4e:5e:40:76:
24:e8:c7:35:e9:8a:4a:2a:63:52:da:f2:b2:b5:f1:
9e:6b:b1:04:41:c8:23:2b:9d:27:bb:a8:e2:c9:78:
8b:8a:60:88:8d:85:4b:f5:86:7e:13:51:f7:28:26:
58:95:da:4d:93:00:0d:5e:10:00:2a:18:be:9d:44:
ef:29:d2:e5:62:f2:b2:3d:95:c8:a2:93:fa:a0:b4:
70:50:fa:e1:91:7a:08:ca:f7:92:98:25:4c:0a:6a:
06:da:c1:3f:f8:22:b5:b1:c6:6d:30:a3:cd:c5:27:
9c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:16:F6:E2:4A:D2:D3:44:92:E9:22:4A:65:C3:7A:2B:8B:1B:B0:3D
X509v3 Authority Key Identifier:
keyid:61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d5:dd:71:87:d2:1b:ed:c2:9d:a8:22:cf:10:5c:6e:14:4e:
76:f2:64:87:ee:39:13:9b:c7:ef:66:a5:d5:1f:6b:b9:08:4c:
4f:c9:f0:fb:6f:d5:8c:7a:4f:a6:df:b8:3a:90:77:f0:7b:3c:
b5:fa:f5:06:e2:68:c8:0c:47:1a:88:19:22:25:74:16:94:2d:
ee:76:72:d2:b5:a2:bb:f7:59:d0:62:f9:7b:ef:c1:85:cb:5c:
1b:c4:b3:60:75:39:72:a7:75:88:a6:6d:68:a5:29:8e:39:6e:
98:c5:1e:7e:2f:0a:5f:21:47:5d:11:a2:61:8e:65:91:f1:e0:
77:d9:a4:7b:f5:a0:7f:39:a0:2c:2f:8d:3c:46:9d:cf:53:ab:
5f:0f:8b:d0:7a:10:5f:d8:0c:13:19:6f:75:e7:b4:23:c0:44:
44:3b:f5:07:81:d8:cc:87:f4:2e:c5:cf:98:45:57:22:ed:35:
30:aa:14:72:73:03:29:21:58:6c:5e:cb:43:3f:83:5d:1d:b1:
8e:fe:14:8d:30:62:ed:7f:cf:82:c6:57:93:13:20:d1:79:31:
a5:b3:d5:de:f7:66:03:75:6c:72:69:18:4f:0b:d5:c0:86:e1:
17:c7:94:c1:c1:71:35:fe:24:c5:07:12:b5:6e:b0:74:84:08:
46:ff:e4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:52 2025 by rpki-client