Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
File: YEEHLuGhscBoQS37A1XSdZkyxfU.mft (raw, json)
Hash identifier: bkm82/QS/4RgCeD0+ozdCcHy52Dy5G5BMCFepdf4gno=
Subject key identifier: 43:3E:3B:15:43:3D:6A:02:F6:83:A0:07:DB:72:38:5A:E6:BD:D2:8D
Authority key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
Certificate issuer: /CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Certificate serial: 0197B6A1B4308988E62D8EB27E389811FA35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
Manifest number: 0E0F
Signing time: Sat 28 Jun 2025 13:02:20 +0000
Manifest this update: Sat 28 Jun 2025 13:02:20 +0000
Manifest next update: Sun 29 Jun 2025 13:02:20 +0000
Files and hashes: 1: Vfen33v1zrF1U4W1eWwhHEsbqGA.roa (hash: w3PxgtpxD6a285bTjcEiEC6QMtVVhaLBfzodaIOYwng=)
2: YEEHLuGhscBoQS37A1XSdZkyxfU.crl (hash: 852iRHHgsmQupIHjFeftZCciCRkgukYaOcSul7rZX3c=)
3: zDAAlCK7aNqx_xV31r_7I0TLQt8.roa (hash: wCsE2W/8Vmk86XbGn3m0t7wCPnTYvf+LtPGnsGB75Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:b4:30:89:88:e6:2d:8e:b2:7e:38:98:11:fa:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Validity
Not Before: Jun 28 13:02:20 2025 GMT
Not After : Jun 29 13:02:20 2025 GMT
Subject: CN=433e3b15433d6a02f683a007db72385ae6bdd28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d4:f2:63:53:a7:80:df:01:08:03:83:ac:87:
08:16:04:36:b9:a6:84:6a:88:8f:3a:06:61:db:85:
ef:7f:9c:fa:d0:81:6c:01:fa:71:70:f6:f1:a3:fa:
c9:83:d2:96:8d:87:b1:40:7d:b2:44:bd:b4:fb:93:
4a:bf:e0:66:25:5e:8f:6f:24:79:18:fd:16:23:d4:
e3:b7:ac:de:c9:de:e3:84:5e:be:d7:9c:a8:f9:5f:
8f:b5:a9:4a:e4:67:dc:a0:43:83:2f:cd:14:96:83:
42:0a:78:66:f9:88:b1:c9:d0:f9:cd:b6:e9:16:a7:
95:cc:e4:c1:e0:fd:cf:46:af:ed:d0:87:89:64:dd:
41:90:c1:8b:02:3d:1c:7d:a6:04:38:7b:82:4a:f0:
7d:b5:15:14:63:62:c0:4d:f8:3c:74:16:9f:76:aa:
c9:d5:8b:cb:69:46:3a:83:88:dd:5e:01:ed:8c:54:
c6:21:be:2b:3e:25:40:1e:d1:8c:aa:71:2d:b0:d5:
ed:2a:60:fe:9a:97:6c:5b:31:31:2a:ca:a2:f1:44:
34:f7:95:d6:f3:df:38:c3:14:7e:2d:15:1b:83:19:
0d:91:36:a5:ef:17:a0:6a:33:e2:6e:79:07:17:aa:
3b:00:54:28:6f:27:2f:ab:82:38:c3:ee:3b:98:de:
8d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3E:3B:15:43:3D:6A:02:F6:83:A0:07:DB:72:38:5A:E6:BD:D2:8D
X509v3 Authority Key Identifier:
keyid:60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:23:f5:4e:a7:b4:28:05:c4:01:b8:72:52:57:3b:7d:76:91:
e0:1c:73:ac:31:85:ff:f3:ac:d7:0b:dc:f2:2d:fe:44:aa:02:
bb:29:36:60:9d:f6:e6:2c:cf:29:74:ad:69:da:3f:3c:98:06:
8c:4b:98:d0:b3:46:47:26:af:77:33:19:e0:53:0b:c7:d4:e4:
ca:12:4a:fc:ee:62:a4:e8:7d:3c:cd:99:e8:57:9c:9a:4b:4a:
52:74:b9:ae:8a:1f:b1:3f:a4:16:e2:44:0d:05:65:4d:c1:9c:
b0:26:c6:67:9b:e8:2e:18:93:69:39:32:fb:33:4a:c5:61:2b:
50:5c:73:84:ec:7c:ce:70:ef:cc:75:c6:c9:b2:c8:5a:64:11:
88:16:5c:67:67:3c:1c:b4:08:1f:d0:6d:eb:19:19:9c:9c:de:
1b:ff:56:4c:97:98:7f:1f:2e:eb:ce:80:09:f4:29:27:59:b4:
fe:0b:8f:1f:9b:e9:93:a2:9d:20:c4:d6:85:d3:b2:ed:6d:5e:
a3:36:9c:08:e5:75:a2:42:04:df:81:15:fb:ed:75:2b:78:2b:
fd:58:fe:75:2f:3c:39:0b:29:9e:cc:83:08:c8:01:28:f6:01:
01:62:8d:52:ea:70:31:dd:92:65:95:35:ba:b4:4b:e2:49:3b:
59:f3:de:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:40 2025 by rpki-client