Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
File: MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft (raw, json)
Hash identifier: rFRxIUvsuxn6NoIRl/DxUz6oW/+hrVyDW0LUn53YsF8=
Subject key identifier: 60:E2:B8:06:A8:44:6C:A6:E2:CB:B7:2F:53:CC:00:6C:B5:72:F9:FE
Authority key identifier: 31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0
Certificate issuer: /CN=31828c99d35cb92e2d53daf128e497e841b63ab0
Certificate serial: 0197B77C736693B4D4AA6CBD48334876AE0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
Manifest number: 0C59
Signing time: Sat 28 Jun 2025 17:01:15 +0000
Manifest this update: Sat 28 Jun 2025 17:01:15 +0000
Manifest next update: Sun 29 Jun 2025 17:01:15 +0000
Files and hashes: 1: 8epfI_mMakP3Lc2UTESKvosKkSQ.roa (hash: TdgdgIhwNAm+SCbAnoUIw15ZVzHOK/dqP386QKWeMpw=)
2: MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl (hash: LE9QKZPaT5suumNBjn1ZKuvumGvC8PD6bfq0/d/9yuw=)
3: QGmT3Sq2OPr697a4jgYrgI5vyvo.roa (hash: cuVDNdIzZEyCh+DXAd1wDhu2rpRcNesepLeBXruUFrc=)
4: wrK5q_yhp6CSYsOOeb2tBzjXlME.roa (hash: GpJJNVkvPjxKFXFwN00ofjrbHt5+9rV8i+MDqv4Rs8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:73:66:93:b4:d4:aa:6c:bd:48:33:48:76:ae:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31828c99d35cb92e2d53daf128e497e841b63ab0
Validity
Not Before: Jun 28 17:01:15 2025 GMT
Not After : Jun 29 17:01:15 2025 GMT
Subject: CN=60e2b806a8446ca6e2cbb72f53cc006cb572f9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cd:21:75:0b:e7:90:98:f1:34:74:01:b4:c1:
36:2f:8b:34:35:d1:62:8d:b1:1f:80:a2:18:9c:b0:
14:18:5a:e2:63:80:0f:70:d8:7e:8f:63:c2:49:8d:
7f:1a:14:f9:9b:c3:e5:44:92:2c:33:b0:0a:f2:69:
98:a3:c4:4f:ea:da:04:72:14:e0:92:ca:5a:99:60:
d6:41:99:4a:7d:e4:4d:a9:f9:ac:89:f2:48:ed:f1:
bc:09:0e:36:33:73:33:9c:28:81:dc:42:34:75:82:
28:55:a2:23:e2:13:4b:a1:64:66:ea:74:9a:a2:36:
c6:c3:ac:54:c0:a6:a9:0c:c3:af:77:f1:38:07:e0:
89:2d:1e:18:2a:fd:ab:0a:f9:df:de:8e:04:9b:61:
90:3f:91:29:28:ca:aa:f1:5f:82:c2:17:55:cc:c8:
11:4f:1a:1b:4e:00:ad:68:ec:f7:6d:e5:3c:32:87:
fc:20:11:bb:02:e3:d6:10:02:6a:7b:2d:07:e7:4b:
d7:63:6e:e1:99:85:bc:41:ac:34:9c:70:c2:d9:b8:
2d:54:a4:7c:08:dc:77:ef:1e:bd:e8:36:49:ed:ab:
05:b6:7d:18:0b:44:25:43:96:1b:3c:81:ba:b4:d4:
dc:f5:69:ee:2f:b5:0d:2f:b3:70:bf:21:16:ef:78:
71:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E2:B8:06:A8:44:6C:A6:E2:CB:B7:2F:53:CC:00:6C:B5:72:F9:FE
X509v3 Authority Key Identifier:
keyid:31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:59:78:73:1c:f8:de:45:3a:1e:22:77:de:69:99:d0:d0:8a:
2c:e0:9f:11:7b:38:94:ee:da:07:12:b6:c4:1a:42:e0:ab:4b:
79:4d:1c:60:db:00:b4:e6:a7:21:a1:18:54:ff:de:ff:01:c2:
14:c0:2c:ea:35:1e:04:14:48:8b:e4:93:4f:da:3b:50:6e:4d:
8f:8d:16:2f:f1:b4:88:ce:20:15:72:b2:e9:f0:3c:25:31:74:
17:42:ee:94:bf:d2:e0:b6:87:f9:10:e9:3f:cf:c9:f8:f1:69:
30:83:c3:71:4f:c5:a2:39:5a:6f:81:d3:4d:70:9d:f0:0a:63:
58:3c:2c:3a:fd:bd:35:47:99:8b:73:25:c8:60:3e:b9:23:66:
01:bb:32:ed:2f:7e:fd:7e:d1:46:04:dd:ab:ed:09:b7:01:c0:
b8:b5:a6:2f:5b:bb:3f:5f:18:aa:2d:e0:b0:48:3c:54:a8:f1:
a5:84:20:1b:84:7a:68:af:69:a4:bf:86:04:77:e4:08:5c:bb:
ce:68:df:d2:58:d7:a5:d8:0d:d9:54:b1:15:39:86:73:2d:f9:
f2:94:fc:72:a5:bc:c0:70:be:ce:cd:39:c2:5e:60:a5:7c:6f:
f8:a4:2a:90:9e:76:bb:55:26:ff:b3:51:d8:15:f3:33:ef:b2:
41:01:56:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:57 2025 by rpki-client