Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
File: YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft (raw, json)
Hash identifier: XFJGUCzPGqUvlfLyHe4QS5n84CEYyjItQYLNd7i/zo4=
Subject key identifier: BE:2E:08:46:D1:52:E6:BB:59:AF:05:35:73:97:59:3E:3C:D8:B7:D9
Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25
Certificate serial: 0197B70F24A8C1E5CDEC337FBCF2B6688088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
Manifest number: 14E2
Signing time: Sat 28 Jun 2025 15:01:52 +0000
Manifest this update: Sat 28 Jun 2025 15:01:52 +0000
Manifest next update: Sun 29 Jun 2025 15:01:52 +0000
Files and hashes: 1: YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl (hash: ALjOuYBpPya1CW/T24OjLMOImn2U4bcHTCw6JAFluAo=)
2: _wocLw8I_D0bWM_gydbHP3YBnWM.roa (hash: ipZCy+v8LxPOj8oL+HxTUZYzmJcHqr9rYLmV463tU+U=)
3: jP1IuFeYqRVYzU2ZxiYcMgwYBwo.roa (hash: 8tUnk9Rc0BoFNUvYX8+NZuDnDdmkv70Pafdtm7lPIM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:24:a8:c1:e5:cd:ec:33:7f:bc:f2:b6:68:80:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a14553cacf103274d433e6b268066e01541b25
Validity
Not Before: Jun 28 15:01:52 2025 GMT
Not After : Jun 29 15:01:52 2025 GMT
Subject: CN=be2e0846d152e6bb59af05357397593e3cd8b7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a1:40:f5:66:a4:08:b4:ca:cb:88:7d:2a:b7:
ab:24:1e:cb:49:bf:69:ad:2f:e4:9d:1f:70:32:f8:
d3:38:ee:76:c4:01:01:c4:a4:4d:8a:59:fe:d9:b7:
f0:f2:df:4d:c2:ca:0e:88:69:bc:4e:fb:4b:c1:f0:
6a:0c:80:e7:00:58:be:e4:eb:7d:1d:04:48:60:5a:
1d:48:b3:56:6a:e7:c5:21:62:30:ba:b3:e7:c9:4c:
20:fc:ac:4a:f7:f2:a9:01:b6:5e:b2:4d:13:11:1b:
33:89:53:28:89:e0:79:b0:b0:f4:a8:cb:cb:3a:6f:
11:28:b1:b2:c7:59:82:fc:39:30:1e:19:6d:34:bb:
61:18:e9:3a:a6:a9:9b:fa:0a:a9:71:43:52:35:bb:
9a:86:64:ae:4a:60:63:2a:ff:86:6a:98:27:f2:22:
a9:56:ab:a6:86:54:00:32:28:68:41:11:8e:b5:54:
52:1d:d2:97:79:f8:5b:5f:15:ae:f5:02:62:a7:04:
bc:2a:6a:84:af:55:86:08:fa:b9:99:9e:11:ce:d5:
28:32:64:5a:cf:8c:08:0c:ba:61:f1:d9:75:25:c7:
63:55:fd:a1:7e:02:56:33:58:fa:7f:d4:f6:dd:4f:
15:7a:12:9c:53:ff:8a:9e:5f:2b:94:4c:fc:5b:7f:
98:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2E:08:46:D1:52:E6:BB:59:AF:05:35:73:97:59:3E:3C:D8:B7:D9
X509v3 Authority Key Identifier:
keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:02:67:d7:0d:bb:c7:80:46:e3:8d:80:09:aa:73:c4:95:bd:
a7:95:69:d4:4c:b4:ca:3a:ab:66:56:2c:25:b8:24:d9:01:e6:
6d:0e:39:43:c0:e2:35:c8:07:07:7d:a3:5a:d1:a2:34:ed:41:
5f:12:b6:28:01:60:f4:6b:c0:18:fb:91:06:99:52:6b:d8:3e:
93:d9:c2:8f:dc:c9:e8:aa:b5:e3:9f:c4:85:41:40:d5:e2:43:
c3:7a:0d:1d:b1:24:58:55:20:ea:d1:b1:42:65:0e:bd:53:60:
fd:ec:8c:27:1b:9b:7d:cf:7e:a4:49:1e:15:1a:53:86:01:7d:
e8:3a:2d:34:66:3e:fd:7f:0a:93:d2:08:11:32:80:af:6d:a7:
0b:f4:e1:09:64:f6:05:63:f8:a0:ad:e1:5d:c8:8b:cf:6f:34:
bf:5f:54:29:37:68:f8:12:92:3b:e6:1f:e7:d6:f9:f3:3e:f1:
a5:9c:c8:99:04:da:ef:fd:46:92:5d:05:a9:50:83:4c:38:f6:
eb:9b:88:63:53:1b:f5:1a:d4:a7:e6:a5:8a:1c:6e:61:44:09:
bb:f4:fb:fb:de:ef:70:2f:be:23:a3:17:43:b0:68:65:01:9f:
07:67:55:ee:f3:d3:72:b4:f8:ed:cb:4d:e6:f4:f8:57:ee:86:
0a:6a:1c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:09:39 2025 by rpki-client