Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
File: YuXsnfTdA7n1AKaglH0Ue27SFmY.mft (raw, json)
Hash identifier: nrLb6tHV70u/OAI5a7juBDjm43XOXwgbaVLRdZf2C78=
Subject key identifier: 6D:A3:32:9F:74:EA:8D:FD:57:A2:0D:EB:8C:35:17:D8:00:08:26:E0
Authority key identifier: 62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
Certificate issuer: /CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Certificate serial: 0197B7EA303D8BB6530D17E0B82216D0EF5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
Manifest number: 101C
Signing time: Sat 28 Jun 2025 19:01:07 +0000
Manifest this update: Sat 28 Jun 2025 19:01:07 +0000
Manifest next update: Sun 29 Jun 2025 19:01:07 +0000
Files and hashes: 1: YuXsnfTdA7n1AKaglH0Ue27SFmY.crl (hash: cnsefcuqbp2U9Gj4PjnaZDExAq0F46VyO2JAlHHn6sI=)
2: kJgRBYW8FH_KB9BmG0zuAtDHIt4.roa (hash: bRkMoYbDThsAekovmWN3M4u7dfA1wfKmJ7fIKIUCTN4=)
3: v525Sv1tFND5v2x1n4f6uRe4GHA.roa (hash: 9QaN1qqDjE/05U+XFuEbIUEXZMx4HBelPUj6nwrRoso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:30:3d:8b:b6:53:0d:17:e0:b8:22:16:d0:ef:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Validity
Not Before: Jun 28 19:01:07 2025 GMT
Not After : Jun 29 19:01:07 2025 GMT
Subject: CN=6da3329f74ea8dfd57a20deb8c3517d8000826e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a5:81:92:14:df:c8:14:08:06:9a:e0:64:fa:
67:7d:b0:51:ee:58:b8:de:05:62:c3:fd:a4:aa:68:
a4:31:af:5c:1a:aa:81:26:fa:c4:c5:7f:1c:9b:6b:
21:af:34:6e:0c:a8:74:92:85:2f:cd:ec:1f:c4:43:
2e:45:87:c3:dd:c2:e6:e3:e6:4b:7a:8c:e5:45:2d:
c4:3c:0e:64:53:7b:f8:d3:aa:54:3d:b2:ea:d6:df:
85:c5:15:f4:d3:48:82:c6:c5:d4:53:5f:1d:92:68:
65:fc:27:1d:2c:2b:8d:37:31:3e:c1:57:9e:c0:02:
a3:fb:aa:25:24:8d:18:fe:14:5e:86:8b:f3:e8:4b:
64:34:78:16:40:1f:cb:1c:19:3f:e2:bc:8e:5a:86:
58:6f:4b:bc:e1:14:0d:27:5d:d2:68:04:26:b9:bc:
c9:bb:7f:90:f2:d7:90:8f:33:11:af:6e:ed:76:b2:
06:fc:43:a7:d2:fa:8a:44:97:3c:49:9a:32:c2:58:
96:94:3a:a8:cf:e8:db:2c:36:22:80:f3:93:9d:57:
f2:41:a6:3b:ca:c7:cb:3d:2a:f0:f7:6b:16:14:24:
5c:87:86:92:71:da:bf:94:bb:b1:ac:60:c1:5e:20:
7b:17:b7:0b:de:3e:29:98:a1:d0:b4:ba:3e:f0:ed:
ad:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A3:32:9F:74:EA:8D:FD:57:A2:0D:EB:8C:35:17:D8:00:08:26:E0
X509v3 Authority Key Identifier:
keyid:62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b4:31:ec:fd:26:b6:a5:6d:91:47:b1:7b:1c:5b:c9:27:a8:
49:d6:6f:15:07:b5:24:16:df:5d:58:b4:c1:b6:64:7a:ad:60:
17:bf:de:4f:a4:06:8b:9a:ab:5d:2f:8e:a7:2e:d2:6b:20:92:
d4:d3:bc:b2:b7:11:0c:bc:9a:14:9e:b3:0c:81:e2:f5:e7:ff:
bc:fa:7a:bd:df:89:0f:52:f3:29:4a:69:6f:0f:ad:28:80:5c:
15:c5:44:eb:fc:af:9a:d7:b3:d4:48:51:39:7a:1e:35:ce:bb:
46:b2:6c:e6:fc:f1:b8:59:db:e9:04:fb:bf:5c:a6:04:ff:85:
e8:9d:64:7d:47:f1:8c:33:0b:e9:b2:47:8b:26:7c:8b:ff:70:
63:e0:40:21:a7:79:51:0c:2c:52:34:ce:a0:f9:69:c2:81:31:
6c:18:f2:3b:74:d4:c3:b0:ba:85:80:1d:e3:1e:2c:be:ef:21:
f6:ed:a5:f2:6a:f2:6d:ea:58:0a:bd:ae:9c:53:32:b0:d9:e5:
dc:9b:94:60:60:19:51:c8:83:64:dc:26:d1:43:87:1e:24:34:
fc:e2:17:0f:63:87:74:bc:fd:d4:8b:58:9d:c5:08:c9:6f:c9:
f1:5a:d3:06:38:4f:5d:56:2f:2f:df:cf:d8:30:58:74:29:89:
71:e2:70:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:30 2025 by rpki-client