Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft
File: YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft (raw, json)
Hash identifier: R9ou5gs2tZDxSn6fptY2m3RnQI/vJBsUq+c8IzmYmHo=
Subject key identifier: 11:4B:26:A0:85:4E:A3:6E:8E:14:65:3F:51:39:0B:D7:07:51:08:98
Authority key identifier: 60:34:56:1C:03:9A:C6:45:0B:EC:8F:D5:95:C1:48:CC:77:0A:A0:36
Certificate issuer: /CN=6034561c039ac6450bec8fd595c148cc770aa036
Certificate serial: 0197B820CF7C21D3B738A6B50C2D64B5D5C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDRWHAOaxkUL7I_VlcFIzHcKoDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft
Manifest number: 0294
Signing time: Sat 28 Jun 2025 20:00:47 +0000
Manifest this update: Sat 28 Jun 2025 20:00:47 +0000
Manifest next update: Sun 29 Jun 2025 20:00:47 +0000
Files and hashes: 1: 7xDyuzwf2JBogicNs1WCGieFUKo.roa (hash: KauAldM8NLiLBGjbpKvhWpk4brd0+mLiraKkETNshfA=)
2: YDRWHAOaxkUL7I_VlcFIzHcKoDY.crl (hash: B8H1+duHj4yG2Je+CTKWb0QeoWeSnHDQe69xEEbNB00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDRWHAOaxkUL7I_VlcFIzHcKoDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:cf:7c:21:d3:b7:38:a6:b5:0c:2d:64:b5:d5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6034561c039ac6450bec8fd595c148cc770aa036
Validity
Not Before: Jun 28 20:00:47 2025 GMT
Not After : Jun 29 20:00:47 2025 GMT
Subject: CN=114b26a0854ea36e8e14653f51390bd707510898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bf:f6:06:04:c3:e8:4f:df:b9:b5:0d:1e:77:
63:cf:8b:3c:ae:66:c0:9b:6e:3b:93:bd:df:10:1d:
14:8a:46:51:cd:b3:c5:68:ca:02:80:ee:be:c8:70:
e9:93:2f:77:5f:1e:c3:e8:13:f5:83:9a:f8:91:77:
b1:ed:c8:75:c5:e7:b9:6b:b3:9a:ba:d4:64:56:60:
7f:c4:85:7d:e2:55:b3:5f:9f:3e:af:fc:41:4b:1f:
5a:62:a4:56:16:7f:ff:06:be:90:d6:0b:8c:d2:19:
26:2e:bd:9a:c7:ed:72:82:4a:0f:db:65:51:a6:ec:
03:30:65:b9:83:84:fb:de:9a:09:83:9e:7c:1a:d6:
62:e3:4c:8d:6b:88:66:21:f7:39:7b:17:5e:f0:5c:
31:f0:7a:dc:48:c6:3c:68:75:1e:9c:cf:7a:72:54:
56:e5:6a:bc:1b:7b:6b:4c:33:24:f5:d9:de:54:c0:
ca:0e:09:2c:de:42:af:f3:75:22:4d:3c:1f:2c:55:
73:9a:ad:e9:2e:7c:f5:e5:57:11:19:bf:c6:a8:09:
d9:76:7c:1d:05:cd:02:86:fa:0b:9d:2d:9c:c7:36:
2a:b1:97:85:97:49:d8:19:79:54:fc:02:58:f6:7e:
ba:b8:6b:bb:66:16:58:e6:91:24:7b:33:99:34:e9:
ae:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4B:26:A0:85:4E:A3:6E:8E:14:65:3F:51:39:0B:D7:07:51:08:98
X509v3 Authority Key Identifier:
keyid:60:34:56:1C:03:9A:C6:45:0B:EC:8F:D5:95:C1:48:CC:77:0A:A0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDRWHAOaxkUL7I_VlcFIzHcKoDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:be:cf:32:1e:fc:96:93:01:21:4f:8e:c0:ad:e7:b7:59:06:
a1:6e:f7:30:99:72:23:7f:69:e7:e3:6b:30:bd:8f:31:00:06:
6a:9f:f2:9c:1b:ec:53:1f:54:df:1e:b7:ef:ef:16:53:2a:a7:
89:ce:8b:6e:5e:e8:bc:a0:ed:12:8e:52:b3:b3:dd:85:16:62:
8c:2b:dc:66:a0:cc:ea:80:d4:26:8b:cf:0e:5e:95:58:5c:a0:
09:b9:fe:44:33:1f:fc:23:ac:62:cb:10:05:03:3c:72:a8:68:
c6:75:3d:22:13:b4:a1:11:ea:c8:f8:53:24:7f:3a:96:46:9a:
be:74:24:6f:42:78:a9:3c:b2:63:33:ed:86:0a:d0:49:3c:cd:
39:c8:1f:ce:26:27:0a:97:79:6e:45:4b:8b:63:5a:8b:f9:b7:
b1:0e:df:e1:1b:7f:3f:96:5d:e2:33:25:44:45:33:ce:81:a1:
cc:71:90:54:38:f4:fc:df:1d:cb:00:9d:bb:99:a8:b1:55:73:
de:e5:ea:9d:2f:29:30:31:31:c6:6b:53:de:3f:0c:d6:b0:81:
33:9e:b5:32:f9:5b:4e:f4:f7:4f:a1:27:c5:7c:ea:c0:6b:81:
50:ab:a2:34:16:38:0c:b7:7f:0a:f8:6c:45:fc:a7:66:6e:cb:
b8:4f:cc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:20:43 2025 by rpki-client