Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
File: YGNeBMNML3ge6YChZR_2blEyvEQ.mft (raw, json)
Hash identifier: SeaNxUQeYIAY0dAeFda0oYvfOVmir33aWZCP2Flg788=
Subject key identifier: 11:1A:8D:5A:06:05:DD:D9:3C:97:29:39:E6:92:4B:D6:48:EA:74:84
Authority key identifier: 60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
Certificate issuer: /CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Certificate serial: 0197B70F41FD552E4FF3E1FC3A0F16B30BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
Manifest number: 0DAC
Signing time: Sat 28 Jun 2025 15:01:59 +0000
Manifest this update: Sat 28 Jun 2025 15:01:59 +0000
Manifest next update: Sun 29 Jun 2025 15:01:59 +0000
Files and hashes: 1: 9f1DS6Cs5mwbsSirLF1iMiPFwB4.roa (hash: laOVozjgpPVLFsRSwM+OxBsO79TXqDgtN3WvmKu3704=)
2: YGNeBMNML3ge6YChZR_2blEyvEQ.crl (hash: bvornUDM+ckyv/59LqBveg8Kxl0ghYX5pSsF5fYBb1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:41:fd:55:2e:4f:f3:e1:fc:3a:0f:16:b3:0b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Validity
Not Before: Jun 28 15:01:59 2025 GMT
Not After : Jun 29 15:01:59 2025 GMT
Subject: CN=111a8d5a0605ddd93c972939e6924bd648ea7484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:91:13:c4:cd:e8:4b:69:83:52:39:da:4d:63:
94:72:8f:d9:2f:b2:51:98:a0:3c:c5:8b:95:80:bc:
e6:33:ea:46:43:95:4c:29:96:03:4d:47:b2:20:b1:
54:09:a3:76:c1:59:b0:dc:d7:57:63:83:41:5b:94:
2b:f3:de:6a:dc:b2:d5:be:d6:59:b2:04:38:02:e9:
5f:d5:89:2b:5d:2e:1f:5e:5c:5c:c1:0a:0a:4e:14:
ea:d1:4a:ea:ad:09:54:cc:7c:67:f4:49:82:df:a4:
16:61:fd:72:b2:c4:df:2b:e3:34:c7:23:0f:ae:72:
f1:f7:13:92:4b:7e:5b:9b:9c:d6:2c:81:e7:20:cc:
12:f4:4f:86:38:e9:63:e1:4c:df:14:4a:f4:59:26:
bc:63:e2:d8:b3:1e:cb:27:2d:d3:2e:1a:8c:50:d2:
92:3c:35:58:65:67:10:11:69:ee:96:04:3a:03:02:
44:cf:b9:fe:53:9f:b9:8d:37:68:1e:77:0e:8d:20:
ae:c9:dc:74:31:66:40:d6:1a:c0:31:87:4f:55:ba:
ea:d5:0e:5f:19:64:57:48:2a:f0:cb:a3:da:2f:22:
9c:d0:70:75:a1:34:02:d5:12:cb:0f:e4:11:1d:f6:
52:54:e2:ec:4b:c3:13:a3:dd:13:0a:cf:57:16:16:
7e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1A:8D:5A:06:05:DD:D9:3C:97:29:39:E6:92:4B:D6:48:EA:74:84
X509v3 Authority Key Identifier:
keyid:60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:1d:53:e9:65:4a:f2:5d:14:44:af:5e:36:6a:7b:a7:b0:10:
1e:f5:68:b6:ff:38:46:69:e1:26:2b:70:cb:9e:1e:49:2f:61:
b8:2a:c7:ce:07:80:8a:c7:44:c0:af:ac:75:67:13:d4:6a:45:
34:b7:e4:52:f9:7e:2f:54:81:81:82:2b:0f:48:e4:c5:1e:f9:
6c:8a:c5:73:12:c7:49:c6:ef:10:0d:66:c2:7d:5e:c5:4f:08:
59:cd:7c:43:22:ba:6a:3d:74:dd:45:ba:ca:a6:bb:4f:bf:96:
6c:72:33:5e:b1:66:0f:f0:be:3d:cf:01:95:e4:47:0b:08:32:
77:b9:cd:c0:76:19:51:57:3f:af:a7:be:e2:31:bc:be:66:e0:
f2:d8:08:51:a0:81:9f:d4:ef:7e:51:69:c8:aa:ea:6c:d3:dd:
2a:58:88:7c:5d:ba:d8:24:7c:c3:65:d0:46:02:a0:ae:0e:8c:
87:10:f8:84:ca:9e:67:b4:47:c0:ad:08:27:44:5a:2b:39:61:
e7:4e:87:a0:51:da:fd:17:7a:e5:a8:79:47:5b:73:ad:e8:4a:
fd:92:7f:b1:90:19:33:65:d6:5f:5c:df:e0:74:40:a5:70:27:
e2:92:74:be:b6:68:f8:18:1d:a7:2c:6e:1f:31:24:02:7c:68:
e6:24:f7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:35 2025 by rpki-client