Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
File: yhmr64q55jiQoiPC_WulaEmL27o.mft (raw, json)
Hash identifier: 3YpDCsG5wjtaRYuSfgHkuN7QoNYbIl7m67Pbnbs5G68=
Subject key identifier: 60:54:16:5C:68:11:EB:D4:94:20:A8:85:D5:6E:F7:28:5E:B6:7A:98
Authority key identifier: CA:19:AB:EB:8A:B9:E6:38:90:A2:23:C2:FD:6B:A5:68:49:8B:DB:BA
Certificate issuer: /CN=ca19abeb8ab9e63890a223c2fd6ba568498bdbba
Certificate serial: 0197B77C39D183944FB3D63CF0072AFBD063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 17:01:01 +0000
Manifest this update: Sat 28 Jun 2025 17:01:01 +0000
Manifest next update: Sun 29 Jun 2025 17:01:01 +0000
Files and hashes: 1: 4aW2wKCZJHKdaC2dMSiuzWhCfmM.roa (hash: tmaMv+cdlIL60LuV9hVyriQ5fK7vMtVKvDnmNSyFkzU=)
2: yhmr64q55jiQoiPC_WulaEmL27o.crl (hash: v2ncc5438pRcNQuHMT5RPk6N+FWm8AVOVId2HhuY8Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:39:d1:83:94:4f:b3:d6:3c:f0:07:2a:fb:d0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca19abeb8ab9e63890a223c2fd6ba568498bdbba
Validity
Not Before: Jun 28 17:01:01 2025 GMT
Not After : Jun 29 17:01:01 2025 GMT
Subject: CN=6054165c6811ebd49420a885d56ef7285eb67a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e2:7c:31:91:4f:2d:e5:21:11:52:82:1b:aa:
37:59:6e:83:90:f4:ba:9f:1f:91:fb:e4:38:54:86:
1c:bc:3f:31:28:9e:91:7e:0c:f9:06:40:4d:ba:c7:
1c:d3:1e:e7:70:5e:48:fe:06:af:ce:9f:b8:c9:02:
f2:1f:63:fc:52:57:81:20:f2:3d:57:31:6b:16:ef:
23:52:74:6d:18:97:28:aa:5d:b7:ae:c4:4c:65:2c:
b0:dc:de:98:09:3d:04:11:1b:f8:d4:12:ec:57:54:
41:cb:ea:07:05:13:70:cd:b7:f6:ef:3b:b4:1c:c0:
1c:16:c2:7e:29:71:f2:68:c3:d0:44:8a:0c:a7:45:
de:9e:13:27:9d:64:48:e4:49:ad:86:6a:84:3f:d4:
1e:fa:89:3e:8c:9e:a0:bf:29:76:2c:79:a6:52:56:
b1:19:61:a6:b0:65:26:4f:98:02:e0:42:d0:f1:36:
31:46:5f:35:99:31:8d:b7:ab:09:48:55:75:a3:90:
94:73:a7:7d:ff:fd:03:05:bd:1f:f8:f7:2a:7e:f3:
04:e1:4a:af:fd:1b:09:b7:cd:99:35:5b:f7:dc:5b:
af:10:6d:64:55:3b:e9:76:26:69:c0:b3:2c:fa:08:
96:65:bd:5d:f9:39:72:6b:e2:f2:f1:06:3f:4a:0d:
4b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:54:16:5C:68:11:EB:D4:94:20:A8:85:D5:6E:F7:28:5E:B6:7A:98
X509v3 Authority Key Identifier:
keyid:CA:19:AB:EB:8A:B9:E6:38:90:A2:23:C2:FD:6B:A5:68:49:8B:DB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:8d:e0:5f:8f:ac:62:7a:ca:ab:02:41:6d:8e:8d:81:44:4e:
20:32:aa:ee:2d:ab:00:8b:43:65:1e:0b:08:a3:aa:5d:bd:7c:
5f:24:fa:e4:6c:66:b7:78:ff:58:b0:15:af:58:3e:2f:38:df:
62:c7:ab:05:8b:d9:9e:75:4a:61:3c:9f:53:0b:4c:13:81:69:
d3:59:07:73:69:79:c9:1d:24:11:1b:17:da:7c:0c:b3:38:bb:
f4:85:75:5a:8e:ef:ec:83:1d:d7:3a:25:66:71:25:79:ec:d1:
a2:81:b0:2b:43:df:f3:97:f4:ec:b1:ab:e6:ec:79:40:ac:80:
db:7d:46:44:f8:5e:9e:21:12:a3:d6:38:75:fc:5d:13:f7:d1:
70:d0:a4:bc:43:df:bb:f9:48:8d:5c:a0:d2:81:3a:44:7f:79:
74:bc:cc:3c:d6:96:f1:a8:f0:7a:02:11:07:ce:6b:99:5d:47:
82:3d:d7:85:2b:75:6f:41:5b:e8:7a:26:c0:1b:7e:2c:46:8c:
fa:71:de:dd:24:f9:98:d5:f6:10:33:c9:f9:3d:a3:61:02:a6:
a3:ee:63:24:53:d5:b4:2b:37:d0:5c:c4:3b:7c:e1:e8:e1:c3:
d4:4d:1c:60:24:77:0e:67:22:bf:75:f2:74:b1:c3:00:f3:b2:
8c:6d:fe:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:43 2025 by rpki-client