Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
File: YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft (raw, json)
Hash identifier: goCB+y17o2I0q3zBOuVu7+Xxvk3mxBcRuhsfZJTh/5M=
Subject key identifier: 78:CF:12:09:4F:3F:F6:DC:65:0B:3B:6B:0D:65:CD:DC:D1:D5:47:83
Authority key identifier: 61:0F:8F:99:FC:A6:9A:A7:3F:88:A5:31:DB:46:D2:28:A7:E2:C3:D3
Certificate issuer: /CN=610f8f99fca69aa73f88a531db46d228a7e2c3d3
Certificate serial: 0197B70F0BA93C7949B64FB195CBBDE8E3D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
Manifest number: 0C7A
Signing time: Sat 28 Jun 2025 15:01:45 +0000
Manifest this update: Sat 28 Jun 2025 15:01:45 +0000
Manifest next update: Sun 29 Jun 2025 15:01:45 +0000
Files and hashes: 1: YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl (hash: +of4cT2PDXvrux9ewf+qADHUkGzKdydWUdx7U81C59U=)
2: tm8Rt7Sc2c1PcYKasPfyO3eBX9M.roa (hash: fWTds4doBQAqbglPwbw6IGwEFIO7de7/7OMc6gbtl08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:0b:a9:3c:79:49:b6:4f:b1:95:cb:bd:e8:e3:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=610f8f99fca69aa73f88a531db46d228a7e2c3d3
Validity
Not Before: Jun 28 15:01:45 2025 GMT
Not After : Jun 29 15:01:45 2025 GMT
Subject: CN=78cf12094f3ff6dc650b3b6b0d65cddcd1d54783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:37:67:0a:8c:8e:ec:e3:82:9d:f6:79:e3:
e0:49:8a:0a:df:55:77:be:e1:92:eb:64:2a:38:e4:
5a:30:fa:3c:44:cb:9d:12:5e:12:2b:5a:0d:f3:31:
33:14:3d:d5:33:ae:e0:53:39:7a:3f:3d:59:54:3b:
eb:3a:32:df:76:b6:65:25:39:84:01:ef:91:47:80:
96:16:ed:39:46:31:5c:1b:a0:d0:81:23:07:e7:ed:
dd:45:e6:1e:5c:88:84:25:dc:ff:8d:73:b4:7e:28:
db:fd:d9:78:00:62:cb:08:49:e2:9e:1c:bd:2c:48:
da:65:c0:61:72:88:06:17:cb:a7:e4:a6:5c:09:1d:
8b:77:09:f3:de:5a:f9:b9:5c:1d:8d:c4:b7:e7:97:
12:45:33:16:39:6e:a5:9f:03:ac:fa:16:36:ac:01:
86:45:a8:a3:3c:43:4c:e1:54:89:0a:43:67:55:69:
4e:c6:c7:73:76:ea:2d:e0:e8:52:b3:36:b1:97:9d:
0c:2a:da:6d:d3:85:29:71:46:35:0f:3b:00:78:a3:
95:27:7f:53:46:b1:d3:04:07:20:82:4b:ee:64:5c:
23:d5:e1:00:d1:31:7d:e0:b1:39:bf:3e:88:31:2b:
48:b6:2a:f7:be:26:f0:8d:4e:92:8d:f2:a4:c0:ea:
36:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CF:12:09:4F:3F:F6:DC:65:0B:3B:6B:0D:65:CD:DC:D1:D5:47:83
X509v3 Authority Key Identifier:
keyid:61:0F:8F:99:FC:A6:9A:A7:3F:88:A5:31:DB:46:D2:28:A7:E2:C3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:cb:82:ae:45:52:1a:3f:ce:26:84:f1:74:14:88:7f:42:5e:
a4:61:2e:4b:7d:4b:2b:ec:00:7c:64:3a:5a:1b:32:ad:ef:52:
2d:b3:50:a0:b8:0a:9c:3d:a6:6e:6c:88:34:af:6e:f4:f5:56:
80:1e:c6:3f:c9:df:d2:40:0f:57:82:6e:91:b9:3c:2c:7c:5a:
5d:45:ae:32:60:84:88:d0:39:dd:43:b7:b3:aa:5b:58:b2:9d:
b2:18:01:1e:53:f7:4f:98:f2:5b:07:29:64:7f:03:43:80:4f:
5c:f1:62:d5:32:1c:da:f4:aa:34:27:74:aa:70:50:36:0e:12:
a1:f2:9a:8e:ca:67:19:04:9b:a4:8d:a2:57:61:e6:ea:97:5e:
9a:ec:ec:1a:05:ba:be:58:2e:8e:e4:16:2f:36:2e:23:c7:d4:
c3:fb:cc:e0:cb:2e:e3:53:0d:ce:89:cc:7e:b8:4f:ee:8e:8d:
ac:04:e5:ae:90:ca:22:2a:3a:1e:a8:c8:00:ec:2d:81:68:68:
68:df:3c:6b:99:38:30:f6:60:90:0e:20:89:b3:dd:f1:db:5d:
ef:5a:fd:54:07:cf:c5:8a:b5:ab:b6:19:3a:bc:e2:1d:05:21:
81:49:e3:b0:24:07:f2:94:e7:17:fd:1c:ea:19:1f:98:30:7f:
fe:5f:0b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:32:50 2025 by rpki-client