Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
File: YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft (raw, json)
Hash identifier: xVHbdQZQ3igmpfECRW7JKS1C8EsgcOWOmBnUB3I5/yM=
Subject key identifier: 57:3D:47:19:0C:B2:CE:B4:A3:95:BC:21:AD:5A:19:6D:9A:17:FF:5C
Authority key identifier: 60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A
Certificate issuer: /CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
Certificate serial: 0197B70E5CF33C076E27989709764168F221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 15:01:01 +0000
Manifest this update: Sat 28 Jun 2025 15:01:01 +0000
Manifest next update: Sun 29 Jun 2025 15:01:01 +0000
Files and hashes: 1: F-cO8DY5we3ruehpt1DdaGZTJLY.roa (hash: LAS644NvWoPgwtaziFP441ODeculzXhcaX+rYlVwp50=)
2: XXUXKaNBLjG2zXes3zUz4pT_p2E.roa (hash: V04szlA87zJPQWBTLBTTrCqtzJ6gxyAZvxuUSuhQTGs=)
3: YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl (hash: cgPHYXLMED306TCb417MVAMu9rqq+tcM5mw+YF3WPt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:5c:f3:3c:07:6e:27:98:97:09:76:41:68:f2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
Validity
Not Before: Jun 28 15:01:01 2025 GMT
Not After : Jun 29 15:01:01 2025 GMT
Subject: CN=573d47190cb2ceb4a395bc21ad5a196d9a17ff5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:1e:0c:08:49:29:d2:b3:df:09:d6:eb:57:
1e:3b:ca:36:f3:4a:32:54:bf:0b:36:f4:70:7b:ab:
78:69:e0:45:96:24:0d:0e:43:58:43:c1:e5:6b:44:
e7:bd:2e:0d:60:da:81:77:55:56:2d:e7:dc:4a:2f:
87:76:8b:1a:98:84:75:42:7f:d2:c4:93:5e:ec:0f:
71:64:6e:af:36:28:a9:50:0f:d2:ae:de:b3:3e:34:
4d:a8:ab:4b:6f:36:8a:89:6e:d9:22:82:0a:14:76:
6d:1c:28:7f:a1:8f:a5:b1:0d:4b:ad:de:44:5e:2f:
e9:9d:a3:bd:4e:45:f3:a9:19:aa:01:44:bb:a9:a7:
7b:b3:9c:bd:4d:5e:1a:25:08:f6:bb:60:55:bc:b6:
ba:78:24:4c:4e:58:89:27:f1:ab:9a:6d:00:8d:c6:
39:d6:72:e9:81:93:4f:9c:35:7f:0c:3c:45:a5:23:
7a:0d:01:35:90:4f:cf:12:ca:ca:7b:7d:5d:f1:73:
86:47:cc:33:1c:49:50:f2:34:00:18:1c:18:14:21:
cb:0a:da:23:2c:be:41:49:d1:f9:02:f4:bd:f1:bf:
6f:b7:a4:8e:b1:ec:25:fc:5d:55:2a:cd:4e:25:49:
41:14:c3:f7:b8:7f:76:f8:83:ea:40:56:2c:95:a7:
a3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3D:47:19:0C:B2:CE:B4:A3:95:BC:21:AD:5A:19:6D:9A:17:FF:5C
X509v3 Authority Key Identifier:
keyid:60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:30:bf:17:f1:10:77:e4:9c:03:d9:ee:7a:72:cb:3f:a6:b1:
0a:17:25:88:40:ac:08:07:cb:8c:63:11:3f:f5:08:3a:f9:1a:
2f:dc:22:5e:5d:f4:e7:22:b8:06:a9:3a:d9:81:3b:14:62:43:
54:e6:90:af:76:a7:f8:92:21:dc:a3:6e:ca:74:fc:5f:43:13:
92:2d:a8:8e:b5:2e:2a:0e:6c:07:b0:15:89:ca:e5:42:11:ec:
9f:95:b6:5c:63:af:bf:c3:20:8f:0b:7c:cf:b8:fb:9b:81:91:
36:ca:72:8d:a4:4a:98:6e:5c:64:11:24:57:8c:f4:e0:9a:0b:
e3:da:84:90:cd:32:4a:22:12:e4:d1:51:e3:7d:4d:d3:96:8c:
b6:8e:66:43:50:1d:d5:d2:b9:b6:cc:98:7e:5b:6e:77:c1:17:
e0:21:b3:a5:8e:23:a5:fe:ae:74:74:48:5b:29:aa:9b:92:fb:
07:ba:e0:cb:4b:87:c0:d5:7d:f6:a1:fa:6f:10:d3:65:26:db:
47:cb:54:2c:8d:fc:3f:98:a8:5e:a6:fe:77:57:ac:95:25:b6:
3c:7c:26:f5:ad:1e:66:6e:d5:c9:9c:7a:c8:cb:a3:fb:96:eb:
e7:77:7e:98:18:92:a5:db:a6:d1:34:d6:2e:f9:00:a5:cd:39:
dc:6b:b2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:00 2025 by rpki-client