Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
File: YbGV0TBQ_zxGihSXeHELU1giUdk.mft (raw, json)
Hash identifier: FGiuOMmN0NAUCmpGHepKHTR7gZ6ZxsEsV3NjJYrf1CE=
Subject key identifier: 17:95:69:49:E4:79:52:C5:B8:4C:95:45:4D:C3:CB:1D:70:47:69:E3
Authority key identifier: 61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9
Certificate issuer: /CN=61b195d13050ff3c468a149778710b53582251d9
Certificate serial: 0197B70F35B4513CC8EAC6FC32C492160601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 15:01:56 +0000
Manifest this update: Sat 28 Jun 2025 15:01:56 +0000
Manifest next update: Sun 29 Jun 2025 15:01:56 +0000
Files and hashes: 1: Wt3X3B6NcZ-mxrNPh2fG99PqrRE.roa (hash: q1LYdMsfXSEFkYw+v/2PtBLKm0CXtMVR1H0DEe1ErnY=)
2: YbGV0TBQ_zxGihSXeHELU1giUdk.crl (hash: DLVUmFf996h+H0N7eVnrOlnn+dKQXGBBLYpH/bltU1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:35:b4:51:3c:c8:ea:c6:fc:32:c4:92:16:06:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b195d13050ff3c468a149778710b53582251d9
Validity
Not Before: Jun 28 15:01:56 2025 GMT
Not After : Jun 29 15:01:56 2025 GMT
Subject: CN=17956949e47952c5b84c95454dc3cb1d704769e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:93:1e:96:89:50:48:61:fb:c5:1a:00:f0:bc:
a3:86:15:40:6e:d5:18:dc:1f:4d:53:9f:4a:8d:ac:
c4:8e:91:08:20:f3:9e:bf:15:05:b1:83:5b:f7:ac:
c1:88:45:f4:87:a8:ba:8f:5a:09:43:b4:57:5a:fb:
96:a9:c8:d0:84:e5:18:48:c3:c8:8c:7d:1b:b2:f1:
c2:bc:d5:16:ba:85:d6:48:1a:bd:4d:ab:6d:8b:b0:
13:8c:7f:d5:03:e5:72:bc:9e:d6:20:79:54:e5:74:
a7:76:09:ec:7f:76:8b:74:b0:cd:80:b2:f6:a3:ed:
d3:a0:9d:4f:d7:23:3a:1f:e1:c8:18:e7:81:9b:33:
70:99:fa:7c:19:e6:0f:62:53:25:b4:0e:51:64:20:
fb:4c:25:e2:e5:25:3c:7a:60:68:b1:9e:bc:90:40:
9d:b0:f6:31:00:f3:ed:1e:a0:8d:c5:de:22:80:6d:
ce:c7:cf:6b:f1:6a:d3:76:28:fe:34:e9:93:4d:47:
50:b3:6e:10:b6:ec:e7:e7:63:15:6e:9c:df:7b:20:
14:e6:a9:6a:c6:09:1b:57:57:53:fe:b2:ff:21:42:
9d:81:cd:08:80:b4:5d:70:ad:96:eb:8a:1a:4d:34:
17:60:67:43:c2:bf:3d:43:11:bd:27:88:d7:8b:ba:
af:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:95:69:49:E4:79:52:C5:B8:4C:95:45:4D:C3:CB:1D:70:47:69:E3
X509v3 Authority Key Identifier:
keyid:61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:86:c3:7d:7a:d7:3e:dd:e3:32:3a:19:02:d2:1f:d0:af:43:
50:b5:9c:52:0c:02:e0:ff:3b:5f:86:f5:27:c5:5f:ce:0c:bc:
71:af:d2:c1:e6:2d:e7:f0:d6:f1:95:d7:73:2e:3b:a2:f2:fe:
b3:80:31:ce:37:83:65:c8:00:7c:18:e9:74:98:f9:ef:00:48:
8a:ee:1e:8a:e6:d2:ae:a1:66:e9:94:73:5f:42:ae:ee:bd:35:
16:17:11:c6:e5:cd:57:99:5e:bd:b8:3d:fb:37:0a:dd:bc:22:
38:07:92:66:bb:76:6a:42:57:9a:a8:22:bb:c5:e6:05:2e:60:
72:f6:a7:4b:f7:b3:7c:1d:90:d4:23:01:b9:45:40:33:dc:67:
7a:f4:36:da:03:56:75:ca:d9:c0:5a:42:24:e4:97:53:a4:44:
cf:f2:96:9a:4f:f7:22:48:5f:68:1a:c8:f2:c3:e1:70:a7:e0:
3d:b2:55:4e:84:c5:ee:a6:f7:16:1c:d3:1c:7b:d1:6d:71:eb:
d6:78:5c:f0:3b:46:5e:01:78:dc:29:1e:6f:d2:eb:20:f6:0a:
ea:ea:22:54:4b:e6:0e:48:c9:ba:0c:0c:02:f9:08:c8:34:8f:
5f:6f:17:e8:94:a4:b9:ba:50:3f:2e:39:39:e1:8c:1b:e5:a0:
a2:9a:17:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:43 2025 by rpki-client