Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
File: YAluN0CSzDAL0LsGxBZAky7Pi0k.mft (raw, json)
Hash identifier: qW5snLrQi3UZ9r0JTJqZDwUxz6Y8tv0FKkwVB7huBlk=
Subject key identifier: 6A:0B:38:A4:95:E1:82:51:B8:C8:11:3A:EC:60:8E:2B:BB:A4:D5:C5
Authority key identifier: 60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
Certificate issuer: /CN=60096e374092cc300bd0bb06c41640932ecf8b49
Certificate serial: 0197B6A2297FC3463543E3763A5C92FE6714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 13:02:50 +0000
Manifest this update: Sat 28 Jun 2025 13:02:50 +0000
Manifest next update: Sun 29 Jun 2025 13:02:50 +0000
Files and hashes: 1: 526G98YrX5YRgU8kSVFlOR-68SU.roa (hash: EfmIyH+1frBE08mLPE+N4lUdJCEbw7QSSljLZgrUP1M=)
2: YAluN0CSzDAL0LsGxBZAky7Pi0k.crl (hash: QLwpUPgk9iF9nwbYDEQXH3JxTO4FjALh0iCNKfrAP8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:29:7f:c3:46:35:43:e3:76:3a:5c:92:fe:67:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60096e374092cc300bd0bb06c41640932ecf8b49
Validity
Not Before: Jun 28 13:02:50 2025 GMT
Not After : Jun 29 13:02:50 2025 GMT
Subject: CN=6a0b38a495e18251b8c8113aec608e2bbba4d5c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:75:e1:ba:2b:b4:08:9f:38:12:79:3b:18:68:
66:de:e4:1b:62:6a:cc:3f:71:c6:d6:0b:17:12:9b:
c0:22:29:4c:ad:91:79:84:66:c7:95:82:63:fe:87:
ab:6e:f6:2a:ba:29:39:f4:53:6a:1a:33:40:bd:7e:
46:4e:bd:fe:4c:2c:5d:31:4b:d7:bb:55:ae:20:05:
30:29:32:ef:f9:ee:b6:34:00:71:42:b6:b3:6a:8b:
cf:c1:17:8a:3e:37:a6:2e:41:0f:90:5c:fb:ca:26:
4d:ec:67:f3:dd:49:76:a9:40:84:06:0f:7a:68:79:
83:a6:7a:a3:7a:c2:58:f4:98:a3:f0:cc:3f:f8:2d:
94:e8:cf:57:ce:bb:82:8f:94:97:28:dd:a2:8b:bd:
48:6a:29:41:ca:b8:8e:30:8d:07:41:ad:71:ca:a3:
50:ea:00:c9:8a:96:6d:bc:3a:a8:67:40:9b:8d:d7:
18:7e:04:4b:d1:31:e3:5b:da:97:9a:f4:b1:b1:35:
61:36:b5:2e:f2:5a:ff:14:12:65:b5:66:3e:d5:af:
6a:93:cc:09:e4:c1:9c:da:b6:be:db:a1:00:00:a4:
a8:ec:d2:af:a2:9a:57:2a:a5:26:da:a7:a8:b6:fb:
ec:d9:b3:88:14:26:8f:36:fb:5f:8b:77:57:f6:5f:
0d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0B:38:A4:95:E1:82:51:B8:C8:11:3A:EC:60:8E:2B:BB:A4:D5:C5
X509v3 Authority Key Identifier:
keyid:60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f0:65:d2:e4:7f:94:26:7f:f9:e1:f2:a9:94:3b:b0:66:cd:
23:70:e8:f5:d6:eb:30:27:7a:f7:07:4c:5d:da:bb:dd:c0:e8:
fb:cf:d6:7c:23:22:49:93:3e:4b:1f:02:44:eb:f2:78:4e:75:
11:75:6b:57:f6:a4:7a:69:8d:bd:e0:11:da:df:6e:9d:f3:a4:
b6:78:d6:df:d5:89:26:df:d4:31:85:12:33:21:2b:ee:59:a2:
74:78:39:78:01:ab:7b:a9:74:50:b9:44:69:e0:b4:67:e3:4b:
09:eb:c3:f3:d0:88:40:f5:04:ee:68:a8:0a:9b:15:03:e9:10:
c4:63:7a:b2:d5:46:d5:4d:c3:6a:b0:27:5f:a2:dc:f9:22:26:
b4:53:f1:e5:b8:76:fc:74:a3:df:aa:5f:82:4f:e0:fe:cf:ea:
e5:37:64:50:c2:a8:eb:35:2f:df:46:4f:f3:74:e7:e5:cb:fd:
7d:a6:4b:3a:1c:4d:df:97:6e:a3:e5:3b:5b:5f:bc:cb:ef:63:
f4:93:42:5c:99:51:42:32:6c:22:98:c8:fc:ae:45:eb:2a:68:
2f:2d:eb:aa:c1:9c:83:37:67:80:74:57:b0:e3:65:5e:4c:ed:
07:0d:81:3a:9d:67:da:e5:da:85:0d:bd:1f:c0:84:ab:85:be:
3d:6c:0b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:24 2025 by rpki-client