Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
File: YCGk2qfc9KTLCKxHRzdfaYquhkM.mft (raw, json)
Hash identifier: QRbriORrBEjdI8/XiMijOp09mEJn6QEfQygjTy/Xl/4=
Subject key identifier: AD:B3:18:92:DF:F2:63:E2:43:4C:AB:E3:68:E1:AC:D6:69:81:0A:52
Authority key identifier: 60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43
Certificate issuer: /CN=6021a4daa7dcf4a4cb08ac4747375f698aae8643
Certificate serial: 0197B6D734CBAA252CC9D20C55C77CE67B65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
Manifest number: 0296
Signing time: Sat 28 Jun 2025 14:00:46 +0000
Manifest this update: Sat 28 Jun 2025 14:00:46 +0000
Manifest next update: Sun 29 Jun 2025 14:00:46 +0000
Files and hashes: 1: YCGk2qfc9KTLCKxHRzdfaYquhkM.crl (hash: PVxddR7lbkPfc+GStUtAXoBQQ9M06/R1maCYb58zzRc=)
2: nsWYD62GXvXwJfFUS4kAQcZmYTU.roa (hash: jHcDfB6LIATegfSEiVgq0NQFeMD0sWc8LqYc2Z+2oaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:34:cb:aa:25:2c:c9:d2:0c:55:c7:7c:e6:7b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6021a4daa7dcf4a4cb08ac4747375f698aae8643
Validity
Not Before: Jun 28 14:00:46 2025 GMT
Not After : Jun 29 14:00:46 2025 GMT
Subject: CN=adb31892dff263e2434cabe368e1acd669810a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:8c:2e:b1:ce:7a:13:fa:54:ac:58:6f:dc:
f2:fb:22:ff:eb:31:68:e7:0a:3d:ad:63:19:ba:8c:
20:57:fd:05:2c:85:e5:e7:c0:70:73:2f:61:ad:9a:
f0:10:ac:d0:c9:40:5b:93:97:03:5e:37:0e:a7:a6:
12:50:41:c0:fc:d8:6f:bd:b6:ac:a0:a6:fb:1e:14:
d1:a8:36:87:b8:62:d3:d8:f0:e4:33:2c:c2:52:25:
b8:71:da:44:e1:85:f2:f7:3a:82:a4:85:21:f0:db:
41:f1:c9:7a:1b:55:41:13:f9:f7:a9:08:5d:26:f5:
ea:78:15:67:0d:17:f7:f0:09:b7:32:9d:6c:29:0e:
ad:44:80:18:99:31:f2:ca:c1:f7:71:3e:37:0b:ef:
1d:d2:cb:95:c9:00:42:1b:ec:02:f7:b5:85:98:e6:
5d:3e:33:88:af:46:c3:df:da:17:68:ee:b0:61:26:
31:89:5e:97:48:26:6b:22:6d:3e:76:d2:ed:51:50:
4d:c7:52:7f:9d:c7:25:33:f3:91:9b:72:3d:4d:cc:
21:9b:ed:67:55:cd:38:4f:ea:24:3b:41:34:88:ee:
23:d6:86:6e:be:52:eb:8b:03:a2:db:75:d6:bc:57:
67:f3:ff:ee:ba:7b:b0:b6:d7:bb:4c:4b:70:cb:f5:
6d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B3:18:92:DF:F2:63:E2:43:4C:AB:E3:68:E1:AC:D6:69:81:0A:52
X509v3 Authority Key Identifier:
keyid:60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:55:b8:bc:bf:ce:0b:3a:79:ac:f5:24:1d:e7:1f:ba:98:d7:
f0:84:da:f2:98:89:9a:d2:8b:af:f7:ff:a6:6f:bb:0d:40:54:
cd:3b:7d:72:fa:95:1e:1d:91:a7:aa:31:8a:7c:7c:26:49:a8:
85:0d:7b:2f:23:e5:fd:7d:80:b7:9a:80:18:87:ec:a2:88:13:
35:f6:9b:d2:09:83:fb:81:66:3b:be:95:71:ed:71:60:8e:26:
ab:23:59:e9:8d:df:c5:a8:70:a5:9c:d7:82:97:e5:7a:55:78:
ea:d5:95:3d:ba:95:53:91:ae:0e:97:9e:36:57:08:f0:bf:80:
91:2b:64:5b:a5:17:2d:46:1d:54:a4:b5:9a:8b:69:9e:dc:0a:
40:d1:bc:46:9d:a2:29:93:8f:8a:c2:70:95:bf:d8:cc:e1:58:
79:e3:55:f6:3b:43:49:13:17:4d:1c:c8:2e:41:80:40:fd:da:
68:19:ee:9f:c6:18:7f:f6:18:b1:72:ca:a6:52:da:52:1f:e9:
38:c5:b7:47:c1:8d:12:e9:99:7d:a5:ef:d6:eb:61:28:e9:98:
68:04:11:1e:48:b3:1b:cf:f6:5d:23:e3:05:7d:b4:12:30:99:
32:56:fd:d8:34:2e:82:b8:ab:05:b0:e5:33:e3:d2:81:02:ee:
b6:0b:0e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:12:56 2025 by rpki-client