Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
File: YJ6nq6_FLH_6IKemquSuLSYlIHY.mft (raw, json)
Hash identifier: df2hoghx8GtzAhKxSP1d11MGHV9EZ5xpQsO4AgxDNI0=
Subject key identifier: E1:E2:9C:F4:7A:A9:E3:01:5B:3B:07:90:82:1C:F7:AF:4B:17:64:3C
Authority key identifier: 60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
Certificate issuer: /CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Certificate serial: 0197B70EE461F3B11D3A910F9ED20A495E19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
Manifest number: 23
Signing time: Sat 28 Jun 2025 15:01:35 +0000
Manifest this update: Sat 28 Jun 2025 15:01:35 +0000
Manifest next update: Sun 29 Jun 2025 15:01:35 +0000
Files and hashes: 1: XeHwlV4_nC5T8BptDxih7yIgLeg.roa (hash: SOsMIv7q0cLJ7sDVkddmO8lkJPy7j4qBPOmyU0Pco9g=)
2: YJ6nq6_FLH_6IKemquSuLSYlIHY.crl (hash: cbPEQ9FBJz/4LZDZDSNkzQnCSIJ8zqd2PQc18qUzF/0=)
3: _CP3e0WLgHreGwKUhpdfEeFss0U.roa (hash: QypuSrQ37amqxwFK8xiRJM3wGtIQUHMjSUwWELe4qw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:e4:61:f3:b1:1d:3a:91:0f:9e:d2:0a:49:5e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Validity
Not Before: Jun 28 15:01:35 2025 GMT
Not After : Jun 29 15:01:35 2025 GMT
Subject: CN=e1e29cf47aa9e3015b3b0790821cf7af4b17643c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d2:e0:73:e4:31:ad:4f:0f:ca:0a:28:59:6a:
8a:4f:00:23:68:92:c7:38:a0:e0:42:f8:ef:cd:bb:
1b:c3:e7:7c:64:74:3c:a6:31:41:d1:ce:67:20:17:
fd:f2:1f:c2:2c:f9:36:50:4e:63:4d:ac:92:a9:ef:
50:2d:1e:f9:5a:86:62:b7:34:a9:57:55:2e:9c:3a:
5f:53:14:0b:e3:93:ad:fb:27:e0:29:0e:4e:94:d0:
dd:6e:1e:38:13:0c:85:a5:7a:3e:5f:52:cd:a2:76:
07:7a:b7:57:ae:e8:af:66:d3:6a:be:81:d8:43:be:
45:ce:e8:e9:1a:cf:1c:51:9b:f7:76:ee:a3:71:56:
0e:5e:8f:94:ca:62:17:50:20:6f:92:f9:61:90:04:
53:ce:b8:08:d3:27:87:1c:32:7a:c4:db:60:eb:8e:
5b:a7:00:0e:ae:25:e9:d0:f6:bb:c1:99:74:65:5c:
1e:24:72:bc:6f:01:5b:fa:b6:3f:e8:82:63:a2:25:
3b:71:08:00:b6:01:4e:ca:26:76:cd:07:23:77:08:
88:bb:8b:93:b3:12:e8:56:09:0e:33:75:6f:ac:90:
4e:eb:87:ff:3a:e1:3c:fc:8a:79:83:f9:00:d3:cd:
b0:78:a5:ba:a1:9b:97:1f:18:90:fa:00:7e:f4:ed:
79:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E2:9C:F4:7A:A9:E3:01:5B:3B:07:90:82:1C:F7:AF:4B:17:64:3C
X509v3 Authority Key Identifier:
keyid:60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:60:b8:06:00:ed:d6:af:d5:b2:40:f7:58:54:a6:30:f5:f5:
35:7d:05:fc:22:e5:04:de:ff:d0:f6:a9:e3:20:34:84:13:2a:
2d:62:04:9f:2f:8b:c2:2d:9c:12:c0:91:b3:5f:8a:cb:a8:0c:
c0:2a:36:8a:a0:c2:8c:21:07:83:5c:11:7e:23:7a:ec:e4:9b:
9b:8a:5d:24:40:47:29:88:28:24:fe:04:5b:f5:68:fc:35:8c:
1c:d0:8f:ae:0b:b9:8c:76:73:a2:85:c1:7c:d5:3d:0b:9b:5a:
c7:53:1b:21:59:5b:1c:0c:12:23:1c:75:2a:1a:e9:bf:95:ba:
d5:8f:ce:b3:6a:b0:fd:bc:2c:10:9a:23:af:31:d6:99:f6:4c:
c7:9a:6e:50:cc:13:30:97:33:46:83:5c:58:fe:c2:3c:48:bf:
d6:64:cb:6c:55:f3:5e:41:95:ab:79:d1:f0:aa:b3:21:fd:61:
d0:7e:59:57:aa:7e:2b:7e:c9:1d:a7:dc:7d:1b:88:00:25:8e:
16:99:61:8f:06:a7:5e:3a:db:da:a4:ff:24:d5:e8:49:f3:cd:
52:a0:75:ee:73:2b:c5:cf:b6:b3:d9:82:11:98:22:57:46:3f:
31:32:0f:19:bf:31:6d:b6:29:00:41:81:c2:50:2b:f1:46:8a:
58:52:9a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:48 2025 by rpki-client