Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
File: YWeZlkXhW2Umig2TuxTE9RckRRs.mft (raw, json)
Hash identifier: zA2XggViiLgGncx07Laqzka/Q0tF1qQde106qTCUlWM=
Subject key identifier: 57:50:A8:CB:78:14:15:67:99:00:AB:4E:FD:27:42:BB:FF:A2:E3:DB
Authority key identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
Certificate issuer: /CN=6167999645e15b65268a0d93bb14c4f51724451b
Certificate serial: 0197B7EAB6B68B26E2E6F36711BD7B1A3DCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 19:01:42 +0000
Manifest this update: Sat 28 Jun 2025 19:01:42 +0000
Manifest next update: Sun 29 Jun 2025 19:01:42 +0000
Files and hashes: 1: WskaznLEMYwubtusiQFBluw68yw.roa (hash: uh2j/ttzj+A4Z4+a8ZWSmr/34qkzodFFdTgCIu7Q+QU=)
2: YWeZlkXhW2Umig2TuxTE9RckRRs.crl (hash: mqyc7mlyHDgaPW1/5wtQr++PdmoWmdTdvvuheOy/VjM=)
3: nW9JmwgiiGAVB_K1nO2cWSvmKyY.roa (hash: TXBtN/KFQ2Gy96mdP11tBg++FsQ+5qL+BiMyEx1qPZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:b6:b6:8b:26:e2:e6:f3:67:11:bd:7b:1a:3d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6167999645e15b65268a0d93bb14c4f51724451b
Validity
Not Before: Jun 28 19:01:42 2025 GMT
Not After : Jun 29 19:01:42 2025 GMT
Subject: CN=5750a8cb781415679900ab4efd2742bbffa2e3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:45:2d:df:78:7d:2b:04:ca:89:51:e7:50:
01:ae:06:52:3f:2d:20:89:37:90:be:62:80:4c:ad:
ff:24:6a:82:14:11:dd:ab:7b:3c:2d:ea:bc:ea:52:
bc:aa:58:a8:3f:56:27:14:19:cc:b0:e4:b4:c1:32:
2c:5a:2c:a6:26:81:9e:a1:1a:25:8d:ac:18:95:bf:
81:1d:53:29:5f:9c:a1:93:da:53:a1:03:9b:66:d3:
1b:e7:24:3d:e7:4f:f5:37:42:9d:b5:82:bf:1c:b0:
7a:b3:d6:77:9f:1c:72:42:35:8c:52:7f:a6:13:08:
b8:73:a0:8c:ed:bd:2f:dd:3a:57:1b:f3:ca:9e:98:
a8:3a:22:8a:ab:78:08:f0:ec:ed:fe:5a:5c:ef:88:
b0:32:e6:69:df:66:1c:cf:a5:76:fb:1c:71:a9:5f:
94:ab:ec:a2:46:29:9c:db:1a:4e:30:b3:ee:7e:a3:
da:ea:23:39:c1:5b:1c:fa:ff:b5:87:0e:69:b6:d8:
56:c2:86:bd:82:30:0a:2f:d5:bd:cb:dc:0e:d1:30:
d1:b3:bf:79:ff:fd:1c:cc:57:b6:0e:24:3f:ad:6e:
f6:19:b8:b6:82:67:f4:86:be:1d:67:28:b2:85:20:
cd:0f:9e:e9:1e:4c:72:97:29:e6:cd:cd:bc:77:9f:
1b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:50:A8:CB:78:14:15:67:99:00:AB:4E:FD:27:42:BB:FF:A2:E3:DB
X509v3 Authority Key Identifier:
keyid:61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b1:da:76:80:f0:80:7b:c0:be:5e:1f:ab:ac:94:33:e6:8e:
90:74:e0:65:58:50:13:15:77:40:2d:21:9e:3a:d3:12:f3:02:
84:4b:b9:a8:59:f3:a0:72:ca:b6:a0:95:62:6f:1e:5b:f9:f7:
cf:ea:52:4d:c3:a5:c7:bd:63:80:9c:25:c7:c7:c5:28:79:b8:
99:d9:b2:4f:48:be:13:db:86:8d:40:35:7f:a1:be:ae:b9:03:
be:53:b6:d5:a6:d4:18:64:77:fd:65:11:94:46:23:c6:ea:d6:
1b:ef:8d:ac:98:61:1c:a7:dc:c7:dc:f5:0f:1d:24:6f:40:4c:
e4:9f:19:56:6e:65:17:46:5c:a5:08:c4:d0:e1:31:5b:3f:a6:
f1:68:e7:d1:ba:6f:d6:b8:b6:11:3c:c9:de:5e:72:44:22:1b:
58:e8:8d:f1:3e:bf:c4:ce:e7:df:9d:1d:a0:55:9c:1a:32:ea:
4e:ab:03:28:dd:5c:dd:3e:f5:74:59:2e:bc:7a:fd:e0:7d:e2:
e6:61:ab:20:37:00:e4:34:6e:93:05:32:1f:11:32:a9:c8:48:
ce:8f:c5:9d:a3:96:4d:91:00:cd:52:ba:bc:2a:25:a1:b9:b9:
6a:8c:13:20:c6:ae:7c:a7:0d:a4:3c:e5:62:d2:3a:fb:ed:8c:
09:be:d6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:13 2025 by rpki-client