Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
File: YihBc2HBxAaumnJX2qn7BiB4LTU.mft (raw, json)
Hash identifier: IMsPAfWSbTCoQwqc+mfuU3PeR2NytrYGmSuRigAfeJA=
Subject key identifier: FC:2A:31:F2:F3:A8:96:A8:5C:7E:3A:5B:B4:59:26:F0:4D:42:F7:FE
Authority key identifier: 62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35
Certificate issuer: /CN=6228417361c1c406ae9a7257daa9fb0620782d35
Certificate serial: 0197B6A19C9728E2BA5C9DD337EA14F33278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
Manifest number: 0E5A
Signing time: Sat 28 Jun 2025 13:02:14 +0000
Manifest this update: Sat 28 Jun 2025 13:02:14 +0000
Manifest next update: Sun 29 Jun 2025 13:02:14 +0000
Files and hashes: 1: YihBc2HBxAaumnJX2qn7BiB4LTU.crl (hash: WhK+ukQUdVWVt+0zlJn7ZLLbdwgQS9e23rVIMKWXlPs=)
2: orR6QmUobPq58IiNnqewDNf0I7s.roa (hash: cEMGLelbH1U4lpzSE43pcUZRdK2/HRG/uJ16sgFxOVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:9c:97:28:e2:ba:5c:9d:d3:37:ea:14:f3:32:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228417361c1c406ae9a7257daa9fb0620782d35
Validity
Not Before: Jun 28 13:02:14 2025 GMT
Not After : Jun 29 13:02:14 2025 GMT
Subject: CN=fc2a31f2f3a896a85c7e3a5bb45926f04d42f7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c4:45:e8:3a:d0:5b:f8:63:d7:fa:d9:cc:62:
8c:00:49:47:0d:f5:60:00:33:41:88:2c:c6:64:6d:
b4:bd:86:e2:02:65:d1:88:ee:53:a1:6f:04:21:e6:
ed:1e:d3:69:12:dd:93:f7:81:a7:17:f4:73:67:f1:
02:46:80:ab:97:70:60:9d:84:57:18:c9:6b:4a:f5:
e8:fb:d8:10:3c:fb:3f:9c:77:29:cb:b1:1f:1d:e1:
74:dc:57:dd:d7:0a:c8:e1:e5:18:c1:41:3d:7b:7f:
20:42:c1:f8:b1:6d:a3:e6:bd:ea:4c:7e:67:36:7b:
82:59:59:e3:dc:b8:cd:9a:80:9f:a1:e7:ae:5f:a7:
a5:d8:76:fd:37:56:cf:4d:25:fc:a2:58:c5:d6:5b:
92:c3:09:eb:b5:5c:7a:68:b1:95:84:c7:2f:e6:b2:
d7:d7:8a:5a:d7:de:a8:6e:41:41:0a:da:ed:81:fd:
4e:49:c1:5c:59:97:cd:b1:df:8a:34:6e:85:3b:75:
09:d8:7a:5e:ea:70:3c:33:c5:90:e1:1c:ab:79:97:
be:bc:5d:68:2c:e7:df:32:0d:8c:e3:69:80:61:a1:
b3:a7:03:f8:2e:a5:2b:d8:0a:23:dc:60:d0:46:f5:
66:3e:b9:ac:2d:fa:17:06:ec:d3:89:68:2c:05:0c:
79:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2A:31:F2:F3:A8:96:A8:5C:7E:3A:5B:B4:59:26:F0:4D:42:F7:FE
X509v3 Authority Key Identifier:
keyid:62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:95:3b:43:d3:23:2e:84:39:01:69:0b:9d:ff:fe:47:b6:8e:
f8:6a:91:46:8d:50:18:b8:4f:af:a7:fb:1a:4a:d8:76:07:74:
44:6b:1b:76:7c:66:de:11:a1:b6:70:46:c4:e2:d5:ca:d3:a6:
4e:ca:f3:c8:0f:84:9a:cd:45:dd:43:0a:0d:7e:43:44:5a:9d:
50:77:72:a9:92:d2:03:c0:9e:84:0d:e8:63:dd:50:ea:34:8a:
1a:33:51:98:27:37:22:56:7e:13:7d:27:3a:e4:20:8e:6c:90:
ee:74:33:39:f2:59:e0:18:53:7a:1b:3c:c4:95:89:94:4e:2c:
28:ad:c8:95:c4:99:40:0c:f0:92:69:47:66:2b:34:40:e6:33:
ba:f8:d4:23:76:aa:a8:d8:16:56:6d:4c:92:14:29:b7:8e:14:
97:fb:12:78:d1:45:c6:21:8f:15:ec:aa:59:5b:31:ca:0f:74:
aa:23:5c:36:cf:39:32:6d:a7:db:cf:a7:ff:ce:95:0f:fd:08:
c9:32:ce:27:4f:b0:e5:86:96:17:8f:65:7a:ef:34:f4:b0:61:
87:a2:fb:ee:09:69:92:a9:e7:20:a6:71:92:6b:a5:1c:31:af:
56:f5:e1:02:a5:4e:c5:9f:93:2f:e1:15:42:8d:90:c4:dc:1a:
91:75:a9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:09 2025 by rpki-client