Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
File: YFvAEwOQWABiCsJsFGixQfgHRRQ.mft (raw, json)
Hash identifier: hT+FFgVOnFddz3Zb9JypFo1dsgTMqW2+SABYLcu/BjQ=
Subject key identifier: 14:44:4F:7E:64:3E:18:42:54:F8:0E:F1:B9:AF:14:41:5B:50:32:AF
Authority key identifier: 60:5B:C0:13:03:90:58:00:62:0A:C2:6C:14:68:B1:41:F8:07:45:14
Certificate issuer: /CN=605bc01303905800620ac26c1468b141f8074514
Certificate serial: 0197B7450E93ADAC7B861369DFD316515161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
Manifest number: 0C8B
Signing time: Sat 28 Jun 2025 16:00:45 +0000
Manifest this update: Sat 28 Jun 2025 16:00:45 +0000
Manifest next update: Sun 29 Jun 2025 16:00:45 +0000
Files and hashes: 1: 9c99e7OOCoSsqv05bamuZvrBRAg.roa (hash: gcQqAYS/2mIfyTda9lezITlbdeVA2P8mDvlHBkdo3p0=)
2: YFvAEwOQWABiCsJsFGixQfgHRRQ.crl (hash: L17QrumozMAEb/4+IyPuvU+5PTB8FNnqiKCp5BoJUGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:0e:93:ad:ac:7b:86:13:69:df:d3:16:51:51:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605bc01303905800620ac26c1468b141f8074514
Validity
Not Before: Jun 28 16:00:45 2025 GMT
Not After : Jun 29 16:00:45 2025 GMT
Subject: CN=14444f7e643e184254f80ef1b9af14415b5032af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:62:4e:21:1e:f4:81:a8:68:01:22:2d:b0:98:
17:aa:77:8a:3a:f2:4d:6b:1f:b1:01:66:86:ca:9f:
93:98:d3:09:09:dc:9e:52:1c:af:8f:36:d8:90:ee:
1a:d2:51:be:7f:19:1b:a0:76:ed:29:82:3f:e5:4b:
ae:05:fb:88:c1:36:c3:df:e8:fb:6e:c1:37:de:0c:
73:39:ca:fd:11:c5:a8:21:89:6c:82:6c:f9:8b:7b:
db:90:33:17:35:b9:c5:9c:83:eb:cf:26:cf:36:be:
21:35:6a:ff:3c:57:2f:da:57:b9:3d:37:2c:3a:54:
29:3e:0c:e3:c9:c2:9f:0f:47:c0:d2:a7:ab:71:3b:
0a:06:64:0d:05:3d:41:85:60:d8:0c:21:1e:4e:7b:
35:9a:29:43:b9:4f:77:86:b4:fc:3a:e8:8b:a5:c3:
89:71:97:a8:a5:8f:cd:40:4f:57:cd:9b:c7:c3:c3:
ea:c9:c5:e3:76:78:cb:43:dd:45:c9:80:1b:05:02:
5f:42:6c:9e:ba:cc:00:d6:ab:91:39:76:79:1e:ff:
b8:c5:62:5e:ee:44:99:37:5e:ee:01:63:61:59:4e:
ee:d1:e9:68:95:fb:0e:7b:cd:cb:9c:a4:c0:5b:8b:
bf:c0:84:02:e9:85:46:c8:9c:97:73:c0:d3:6c:b0:
96:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:44:4F:7E:64:3E:18:42:54:F8:0E:F1:B9:AF:14:41:5B:50:32:AF
X509v3 Authority Key Identifier:
keyid:60:5B:C0:13:03:90:58:00:62:0A:C2:6C:14:68:B1:41:F8:07:45:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4d:cd:6b:41:f2:08:c8:63:36:b3:6e:85:b6:ab:76:7a:a5:
85:80:2b:f4:15:bb:e4:8d:02:62:d7:5f:62:50:54:54:40:f6:
56:4d:43:7e:7b:a8:1f:0f:31:6c:c7:4b:4b:25:32:53:78:04:
bd:d8:73:81:6e:23:36:4b:2f:e8:ef:c3:df:17:ba:d2:38:af:
a0:a8:ca:e2:f8:74:6f:8e:bc:17:ea:73:f5:b9:ff:4f:6c:e3:
59:c8:01:85:99:41:ce:cd:95:38:94:ae:d5:a3:0f:d4:fd:c3:
02:92:bc:c2:9b:51:29:f7:34:e6:39:f0:e8:1b:79:ac:33:d7:
5d:82:6b:ff:6c:f0:1d:1f:8a:df:48:a6:7a:e4:02:0e:4d:19:
19:14:40:b9:24:f7:c0:03:fe:b2:32:11:93:b0:46:5e:68:ac:
ae:55:f1:02:ae:fb:5c:72:88:0a:c9:f4:37:31:ed:79:9a:ab:
ad:74:0e:c2:d7:3d:b1:d0:7a:ac:d3:e7:db:08:70:3e:09:bf:
f0:2e:5a:a0:2f:25:b8:17:25:06:db:40:d2:54:bd:28:17:b6:
3e:68:1a:1d:b9:de:b2:25:67:b1:2e:8e:e1:40:f8:0f:90:4b:
4d:fb:d9:e7:cd:90:7f:49:c3:05:2e:b5:03:91:f8:ad:94:cf:
a8:8f:59:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:03 2025 by rpki-client