Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
File: YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft (raw, json)
Hash identifier: xBvrKgo1jGtoY5Ws8/QS47C7Levu4CRg3+HpHz4Hp5o=
Subject key identifier: A9:60:3D:A2:8F:E1:D3:6C:96:1D:53:4D:1A:37:66:34:01:A9:5F:76
Authority key identifier: 60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
Certificate issuer: /CN=607548c37abebc58b928ed285433d69e95df9c3b
Certificate serial: 0197B745AE46D6519FA1ABB0144DF291AC65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
Manifest number: 097B
Signing time: Sat 28 Jun 2025 16:01:26 +0000
Manifest this update: Sat 28 Jun 2025 16:01:26 +0000
Manifest next update: Sun 29 Jun 2025 16:01:26 +0000
Files and hashes: 1: GvnG-mS30kZsC0VMkjG-9H9bKNc.roa (hash: fCMqeP5mwLekpgJxD7sr/iDT7Y2EP3bkaxbq5G7CFnk=)
2: TmI7Mg0osOv9bcSkbnpna9M6d0g.roa (hash: 1lYpqMce8T6tJ64vHbX2gN5OdLdLTb07QCcWuKyM15g=)
3: YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl (hash: 7PEjOH4yX0Qoya8vBKoYGYgpG/RmKXRj4bqSzDbyx5M=)
4: rDRUKkzZmI7yjCKpqiCtK-fUy7Q.roa (hash: uAeF6E4mouy6Lmf4flTkP1sxauS/RBJXZig4r2f6XkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:ae:46:d6:51:9f:a1:ab:b0:14:4d:f2:91:ac:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607548c37abebc58b928ed285433d69e95df9c3b
Validity
Not Before: Jun 28 16:01:26 2025 GMT
Not After : Jun 29 16:01:26 2025 GMT
Subject: CN=a9603da28fe1d36c961d534d1a37663401a95f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ed:ba:f2:54:3e:28:30:cc:f6:85:f3:04:6a:
c9:39:23:9f:f3:8a:15:ad:26:ae:1c:a5:05:df:4a:
ea:d6:eb:14:6c:66:e1:56:43:f8:c2:ab:96:07:f1:
6c:24:b6:40:e4:42:8b:30:3d:2e:23:54:06:c5:90:
ab:7e:45:b4:34:61:c5:8c:ea:61:0b:6a:38:f0:94:
61:8d:8a:8f:24:53:83:fc:aa:8d:94:af:6e:8c:1f:
55:b1:b1:48:94:09:3d:47:90:d2:e7:4a:f1:67:b5:
22:3c:98:08:f3:1f:fb:00:30:a1:b6:5f:97:1c:63:
43:13:0c:9c:8e:b3:a8:29:3c:d5:6f:62:02:55:b8:
98:74:b2:55:42:d6:b0:17:cf:ce:5d:2a:d9:bb:6d:
67:e4:35:01:76:5d:72:a3:c9:1b:3f:df:39:51:5f:
4c:72:48:23:18:61:f0:f4:00:94:62:43:7d:ad:fb:
f6:97:9e:3a:fd:5c:77:09:ed:28:e4:91:f4:7f:00:
c2:d7:cb:e2:0a:c2:b1:c3:ac:30:9f:a0:68:82:1a:
e9:8f:e0:d6:03:40:81:1c:d0:99:3d:e1:81:71:06:
41:52:79:f2:23:0c:4b:15:a0:8e:95:52:62:5f:a4:
11:99:1c:8f:3d:92:6d:53:7e:b3:d3:da:5e:47:c1:
43:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:60:3D:A2:8F:E1:D3:6C:96:1D:53:4D:1A:37:66:34:01:A9:5F:76
X509v3 Authority Key Identifier:
keyid:60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ac:22:cc:56:78:3c:39:79:a8:f4:9c:7a:ec:e2:f4:78:c9:
b8:15:75:61:7c:c6:c1:87:c1:14:db:24:9c:9f:d3:72:92:d6:
93:d0:49:26:ce:ee:37:9b:ba:23:91:a1:a0:8c:3d:96:77:89:
da:78:1a:e0:f2:a7:1f:90:af:e3:6f:40:b3:57:90:b3:63:7c:
43:b3:8d:ed:45:2d:4e:98:fd:c8:55:23:78:e2:e3:70:05:80:
15:c2:83:68:89:e2:ee:19:56:7c:ff:4f:7f:16:e9:6b:13:e1:
83:09:82:05:7b:eb:5c:85:0f:ac:fb:c3:63:f9:af:3f:52:fe:
2d:8e:16:99:ff:bf:83:5b:6f:aa:8c:2c:8f:e8:c2:7e:ac:4f:
a5:b3:08:a7:38:81:5c:86:09:08:1a:38:40:45:6f:a5:03:4d:
9a:2b:1a:7b:62:75:f0:db:26:e3:3f:cb:a7:0c:77:3e:ec:78:
4b:29:14:0f:82:80:da:78:2c:69:61:db:96:8f:32:58:fa:e5:
0a:fe:05:76:23:5e:54:06:08:7c:de:68:4b:ed:35:4f:96:56:
30:b1:dd:32:4a:f4:b1:7c:5b:05:5b:ae:a6:15:c5:3d:13:bd:
f8:ff:77:26:41:38:1f:d7:2b:64:0f:70:80:c8:de:71:8b:eb:
ef:77:12:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:38 2025 by rpki-client