
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
File: YLeUkCpc09J4P8wqpLB5H3mld6I.mft (raw, json)
Hash identifier: JxAny8QP5dRIA91bwmEjFTWmCqPfuQsapIzdMd8QSnE=
Subject key identifier: 91:82:23:18:75:72:6E:DB:9B:B8:9D:93:48:A6:88:B1:38:C8:4F:B5
Authority key identifier: 60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2
Certificate issuer: /CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
Certificate serial: 0197B74539616C5A463D994DFBA0178D6C93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
Manifest number: 1560
Signing time: Sat 28 Jun 2025 16:00:56 +0000
Manifest this update: Sat 28 Jun 2025 16:00:56 +0000
Manifest next update: Sun 29 Jun 2025 16:00:56 +0000
Files and hashes: 1: YLeUkCpc09J4P8wqpLB5H3mld6I.crl (hash: PiJfROR+u6Eo6N3uLm68GMSo6yPBKL787wgKXrfHs4I=)
2: bx2zbgFzR2bVaPl_B5ZfOBHYjjw.roa (hash: ud4OsdTxDDqxynACtaERs5qzUlmK1nyDHD7M5p1jW+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:39:61:6c:5a:46:3d:99:4d:fb:a0:17:8d:6c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
Validity
Not Before: Jun 28 16:00:56 2025 GMT
Not After : Jun 29 16:00:56 2025 GMT
Subject: CN=9182231875726edb9bb89d9348a688b138c84fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b8:2f:61:b4:68:2e:aa:bd:39:62:4f:bc:95:
30:6b:08:c1:e6:aa:7e:6e:dc:cf:cd:26:66:f9:fc:
d4:49:8c:51:33:9c:ff:87:40:f2:02:4c:3f:f6:aa:
a2:64:6e:9c:5b:25:a7:d2:67:9c:93:0f:b5:6a:8e:
8c:76:91:52:00:1b:76:4d:91:13:16:9f:45:43:3e:
51:eb:f4:73:12:27:67:cb:16:03:3e:99:b0:cb:16:
85:af:98:25:bf:ca:89:2b:9d:ba:1c:39:08:c0:7c:
c1:41:fc:74:c3:f5:28:20:9a:18:86:43:3d:ac:35:
00:5a:54:29:ec:f1:d7:01:ac:f9:c7:9d:04:b8:03:
92:f8:78:7e:c0:2e:ee:1a:9a:f8:b8:53:6e:f3:15:
c0:bb:b0:8b:87:17:d0:97:92:8d:0c:f6:c8:f1:28:
8c:df:a6:29:a9:45:1f:74:8f:58:a0:68:0a:9a:3a:
e0:2d:6c:91:b5:a2:d7:e3:79:fa:4a:59:60:44:d7:
0b:d6:4f:49:fa:7d:a1:b5:14:97:5e:e2:33:29:4d:
d1:83:b8:32:04:df:4a:84:62:cf:a6:89:46:74:44:
28:e8:98:3f:c0:79:4d:8b:01:ea:58:0a:c6:37:d0:
eb:be:c2:90:b7:ac:a3:54:e1:50:19:ff:97:2b:68:
41:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:82:23:18:75:72:6E:DB:9B:B8:9D:93:48:A6:88:B1:38:C8:4F:B5
X509v3 Authority Key Identifier:
keyid:60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:05:d9:41:6a:a5:e0:60:66:34:9c:81:3e:a9:07:88:35:ad:
96:ae:48:28:ab:87:1f:df:7d:21:b9:20:51:06:03:44:b6:76:
ab:f7:42:41:41:86:7a:65:4d:85:24:61:3d:f6:39:72:d5:0c:
0b:b5:03:2f:e8:70:1e:ec:9c:cf:e1:0c:2d:d4:5e:2a:a0:a0:
45:4b:6b:eb:a6:6c:1e:80:20:dd:f8:f5:6a:a6:73:f9:3e:52:
58:47:e6:1e:fa:51:2f:a8:d3:74:0f:55:45:35:17:8c:02:33:
20:49:81:9c:4b:db:43:55:a1:7e:d6:d9:94:2a:0b:c3:ed:3e:
9a:c6:f2:ea:e5:23:70:db:ac:84:77:1e:43:13:44:c5:02:de:
41:ef:6d:ad:2b:f5:b6:72:2a:c0:a5:4d:0f:cb:c0:a8:7a:81:
82:fe:e4:42:74:f1:01:be:ca:4b:56:be:d7:d7:7c:c2:e6:74:
0d:bb:77:9d:6c:25:3b:bf:18:8a:4b:2b:70:05:62:fe:3c:86:
ec:83:a7:83:dd:c1:7e:48:cc:46:d9:2d:82:33:30:21:77:3b:
a9:e1:ac:84:87:91:01:ab:f4:80:a1:72:62:de:44:23:cb:45:
b0:2e:59:ac:9d:90:bf:c6:77:77:bb:ff:08:a7:f5:48:7d:45:
5d:70:a4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:54 2025 by rpki-client