Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
File: YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft (raw, json)
Hash identifier: a3WuIz8qzbDIk9nfFJPYopNQyaZeryFH4BW5MfmY6no=
Subject key identifier: 66:74:CB:3A:C8:95:28:99:0E:8D:9D:3C:76:3C:A7:43:45:81:AA:61
Authority key identifier: 62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50
Certificate issuer: /CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350
Certificate serial: 0197B70EF888E24A9B785E8853F2C3965617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 15:01:40 +0000
Manifest this update: Sat 28 Jun 2025 15:01:40 +0000
Manifest next update: Sun 29 Jun 2025 15:01:40 +0000
Files and hashes: 1: Fd7jj4UgNX8KUEunLGyTOECk2zM.roa (hash: 4ykrgJNWkElQuXhdhPDtDMLnIYLOev4Sm6TYtDwClXU=)
2: YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl (hash: ojcgUZHynmmsjMP760C4+9PKm6DXIdV+6Zb2bWUYsjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f8:88:e2:4a:9b:78:5e:88:53:f2:c3:96:56:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350
Validity
Not Before: Jun 28 15:01:40 2025 GMT
Not After : Jun 29 15:01:40 2025 GMT
Subject: CN=6674cb3ac89528990e8d9d3c763ca7434581aa61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:30:c2:ac:0e:07:85:f2:5a:e1:8f:c4:22:21:
34:f1:51:ca:7f:07:3e:99:ab:bb:17:87:7d:92:9f:
3b:16:05:f4:6e:aa:5e:dd:01:6f:88:48:79:af:a7:
b8:06:70:81:bd:6c:d9:6a:6f:a2:9f:b8:8b:da:2a:
0c:b3:9a:ab:b1:a9:fb:1c:85:43:93:23:c9:5a:e7:
e9:b2:47:df:76:a4:f2:cb:76:ed:84:54:6f:0e:63:
a6:61:81:d6:eb:04:f7:c6:30:5f:ea:f3:dd:5d:a9:
c0:5a:85:6a:5e:19:ac:b4:e4:8d:d1:88:4e:04:a7:
6e:67:14:7e:e2:4d:4c:90:00:72:9b:e0:40:ad:7e:
93:6d:f6:59:0c:89:14:d8:03:40:e9:64:6b:c4:44:
1d:94:fc:d4:d3:16:4d:b6:40:aa:b8:e4:3a:a7:f7:
63:e6:0f:e0:f9:e5:75:ea:80:57:ed:4d:19:76:5d:
a6:1b:c4:3f:af:1b:43:98:20:00:cd:54:7b:bd:8a:
6f:2b:d3:1e:5b:39:21:0b:ce:93:7d:24:b0:ec:ee:
dd:c5:5a:2a:28:f4:05:17:62:32:a3:77:88:67:f6:
ef:89:5c:b1:9d:51:6b:7c:b9:b9:28:0f:eb:5d:e5:
87:70:a4:ee:76:9e:20:d0:95:d9:0c:a8:20:49:a6:
0b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:74:CB:3A:C8:95:28:99:0E:8D:9D:3C:76:3C:A7:43:45:81:AA:61
X509v3 Authority Key Identifier:
keyid:62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:6e:31:71:c9:58:06:98:98:71:5d:e7:13:ae:6a:f0:87:bf:
5e:bc:5e:38:69:05:ea:d2:6f:50:4b:b1:71:3c:72:cd:2c:ab:
8f:b3:28:5a:61:3d:96:fc:c1:dd:94:70:f5:ab:da:29:cc:98:
d1:df:49:e9:ff:cf:2f:60:17:95:c6:fc:2f:6a:73:18:47:f7:
a5:df:c2:da:db:2a:1b:f7:20:1b:c2:ae:d8:40:44:ab:cc:01:
02:d9:3f:99:68:02:3d:79:72:57:0b:81:2d:57:3b:ca:d6:a0:
00:49:55:54:39:a3:8d:27:8e:96:31:c1:81:fd:0e:ba:e1:f7:
29:4a:ac:bf:ba:4f:35:bf:c2:d8:27:a6:a9:e2:39:34:55:33:
ef:43:25:40:4b:17:2b:b5:d2:ec:85:be:57:b0:03:3d:2e:e8:
66:b4:e7:a6:32:96:0a:5f:10:ee:2c:a5:f7:cf:be:a8:3c:6b:
1c:57:de:d5:ec:f2:25:52:96:c3:ca:52:d4:1a:c4:90:76:71:
83:cc:fe:70:37:cb:5f:93:59:38:c6:93:b1:f9:fe:ab:e6:6f:
49:21:19:cd:4f:f6:44:34:20:dd:f5:f9:b0:cf:93:ad:63:c9:
1c:2a:50:20:b2:91:d2:00:87:ef:d1:04:32:c6:02:8e:a9:94:
70:0c:19:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:22 2025 by rpki-client