Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
File: YGVg4D7ogzLu-_ppROvRA4rg6rg.mft (raw, json)
Hash identifier: iEOt/VDbKdwlbVriQh3ZHGJW74uuPitE4ZvKtLonBV4=
Subject key identifier: D4:93:E6:75:AC:25:55:E3:44:C3:C1:FB:05:27:61:63:1C:B5:AE:93
Authority key identifier: 60:65:60:E0:3E:E8:83:32:EE:FB:FA:69:44:EB:D1:03:8A:E0:EA:B8
Certificate issuer: /CN=606560e03ee88332eefbfa6944ebd1038ae0eab8
Certificate serial: 0197B6A0B518F5F90C40A3965F0FAC7CE6DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
Manifest number: 0D8E
Signing time: Sat 28 Jun 2025 13:01:14 +0000
Manifest this update: Sat 28 Jun 2025 13:01:14 +0000
Manifest next update: Sun 29 Jun 2025 13:01:14 +0000
Files and hashes: 1: 6He2HCHOgYmFWCnJx-CHnw1DNw4.roa (hash: R/op20lcuNNKjtAV2ZxOf6+gcTn27jdjTjhCIstJEzU=)
2: YGVg4D7ogzLu-_ppROvRA4rg6rg.crl (hash: 45qK9wC6YpH7xAXL4xGF3phVwmIO8NmLG81ID4zCbyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:b5:18:f5:f9:0c:40:a3:96:5f:0f:ac:7c:e6:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606560e03ee88332eefbfa6944ebd1038ae0eab8
Validity
Not Before: Jun 28 13:01:14 2025 GMT
Not After : Jun 29 13:01:14 2025 GMT
Subject: CN=d493e675ac2555e344c3c1fb052761631cb5ae93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4d:94:51:e1:4e:8a:53:3a:75:4f:96:57:31:
a1:a6:92:50:31:66:9b:15:2e:0d:76:bd:a6:9f:74:
04:6e:12:d2:c0:19:b0:f6:c7:68:11:6b:86:13:36:
83:36:00:7e:ab:6c:40:ce:6b:10:3c:a2:bc:18:8f:
cd:94:76:70:81:5a:01:fc:c1:09:f5:55:9b:c5:60:
2f:c6:e3:f5:ba:c6:71:3b:8a:e8:4b:73:95:d6:bb:
02:0b:55:55:fc:86:49:00:f8:b8:a4:0b:af:93:ee:
2a:01:07:63:10:d4:22:bd:76:53:dd:e1:08:0c:e5:
52:09:2f:e2:94:15:05:28:c9:52:eb:c3:b4:81:72:
96:f3:7f:b6:13:d7:00:82:db:4a:1c:9a:53:61:2e:
a5:35:99:b7:4a:53:55:ff:44:99:53:be:28:da:31:
8e:7c:e6:af:cf:5a:f9:17:b9:6f:43:d0:c8:91:0c:
c6:ab:e9:23:6b:4f:b4:bf:8f:f2:a6:c7:11:fa:68:
65:7d:a6:44:24:cc:b3:d1:3f:7c:b3:f2:40:d7:42:
3b:04:b7:3a:ae:ca:cd:e9:b5:b4:9a:68:01:e9:66:
c5:8c:61:a6:06:e0:05:cb:81:11:5b:68:28:5e:37:
3a:93:51:ec:ac:7f:f1:08:6a:f7:b0:4c:e0:29:10:
82:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:93:E6:75:AC:25:55:E3:44:C3:C1:FB:05:27:61:63:1C:B5:AE:93
X509v3 Authority Key Identifier:
keyid:60:65:60:E0:3E:E8:83:32:EE:FB:FA:69:44:EB:D1:03:8A:E0:EA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:6c:8d:09:45:39:ed:aa:c2:45:7e:cf:a1:c0:5e:89:10:78:
03:78:4b:a0:3d:1b:a9:8d:b0:65:7e:38:d7:b4:d7:10:87:63:
24:cf:d9:90:49:61:66:58:43:f8:fb:d7:0e:12:ef:53:ff:e0:
f9:57:f2:49:b1:52:34:00:9a:9a:df:06:5d:5d:0d:86:bb:be:
b1:e9:02:ce:af:00:6b:67:cf:04:ae:52:99:e1:0f:22:c5:3f:
f6:b5:64:cf:7f:f0:23:8f:a8:66:75:e3:f2:82:db:83:74:11:
2e:9a:de:0e:10:34:f0:53:a4:49:27:ce:45:a4:64:91:31:62:
57:82:e1:a6:b3:ef:04:a0:92:b1:f4:2c:3a:bb:ae:ca:fd:83:
dd:61:5a:5d:49:b7:7d:96:c0:30:46:36:3a:7c:01:61:e7:38:
65:df:44:37:b5:4c:d3:c2:ca:fa:38:79:fe:a2:01:32:58:7c:
9e:14:d6:f8:6e:a9:d0:72:eb:ac:56:75:31:4c:9f:39:73:5f:
62:63:0d:e3:a3:59:c4:b4:bc:db:e9:61:49:5c:27:5d:4c:12:
30:fa:d4:db:f9:dc:82:10:a9:10:03:7b:6b:81:6e:66:b3:5b:
a6:0e:06:eb:a7:20:36:12:ee:9e:fd:8e:f2:31:73:68:f8:1c:
07:1b:0c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:33 2025 by rpki-client