Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
File: YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft (raw, json)
Hash identifier: Hmq/1CCv6H9psbgCU87ETduGH2J2/uASOSjE99SajPE=
Subject key identifier: 82:ED:33:43:7A:D4:47:C6:C8:62:80:6A:4F:FE:3D:41:6B:74:7B:54
Authority key identifier: 61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF
Certificate issuer: /CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
Certificate serial: 0197B6A05CD09CAA8F39D79E2E7723E79BB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
Manifest number: 035A
Signing time: Sat 28 Jun 2025 13:00:52 +0000
Manifest this update: Sat 28 Jun 2025 13:00:52 +0000
Manifest next update: Sun 29 Jun 2025 13:00:52 +0000
Files and hashes: 1: YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl (hash: ARmX1z4iJQhVyW3q8E9mpP21ifRsqMyMoGWJZTKWEjI=)
2: x91LhsukgPAqfQYj3W2LlNBbAek.roa (hash: F7uoWwJ/vYjK+zrUfHWPZS/ilKp/egTCjRgAcB55Dx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:5c:d0:9c:aa:8f:39:d7:9e:2e:77:23:e7:9b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
Validity
Not Before: Jun 28 13:00:52 2025 GMT
Not After : Jun 29 13:00:52 2025 GMT
Subject: CN=82ed33437ad447c6c862806a4ffe3d416b747b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:14:6a:85:6f:4c:b9:7a:8f:dd:9e:82:a4:f5:
7e:1e:61:79:06:6a:46:d8:c3:a0:46:36:8b:09:7c:
89:20:e3:78:10:85:6b:03:8c:2a:03:25:94:51:1c:
eb:93:e9:9e:28:ea:d8:26:de:be:76:8f:88:62:30:
b1:ca:f7:d2:fd:22:29:ce:d9:00:62:b5:2d:49:1b:
6f:49:2d:20:83:16:e8:f7:e0:fa:21:18:22:9e:bd:
2f:72:4c:c8:18:df:fc:1d:c1:08:d2:f9:e1:67:75:
85:16:0f:6e:ae:1b:fa:66:1e:cc:48:e9:18:72:e1:
da:ba:29:80:a4:a8:76:80:09:ac:eb:01:12:3e:21:
32:91:33:f5:25:bb:27:dc:82:e5:11:26:82:cb:0e:
e8:5f:70:4e:11:61:0a:17:12:8f:7e:e2:bc:95:e0:
76:57:c1:4b:37:14:a9:12:92:3d:3e:bd:4f:a0:9c:
00:74:ef:5d:cf:7e:7d:0e:d1:7f:a6:60:d6:8f:54:
64:12:5b:ba:53:ad:82:45:ef:b4:60:1f:a4:e6:f5:
a9:73:cf:db:d1:72:77:65:82:6e:68:fc:eb:a7:13:
e5:67:bf:fb:3a:b8:5a:be:2a:45:53:7a:42:7b:f4:
16:d1:be:1b:0f:26:a4:e3:73:f1:06:57:aa:e7:a9:
9a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:ED:33:43:7A:D4:47:C6:C8:62:80:6A:4F:FE:3D:41:6B:74:7B:54
X509v3 Authority Key Identifier:
keyid:61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:07:7b:12:78:b6:c5:f9:02:26:7d:b5:83:f8:cb:4e:b4:ba:
60:28:91:0f:e6:cd:e9:7a:c2:df:f7:99:3b:3c:f0:89:1a:58:
a9:68:ad:fd:e6:43:76:b9:8c:da:e0:df:91:06:1d:cb:14:84:
d5:15:ab:99:68:28:a2:7f:bc:9d:66:64:3b:94:44:9f:ca:18:
19:74:5c:b3:0f:ed:b4:02:cf:b7:82:24:58:26:fb:40:81:28:
f4:59:8d:8b:9c:22:b1:50:b9:62:e6:ad:ce:2a:1f:02:b4:b6:
11:04:4c:8f:88:2d:c3:41:bc:97:1d:a9:66:c0:b5:ea:20:f6:
20:93:45:d6:4d:e4:32:9d:a4:5e:be:91:85:26:b7:92:a9:b3:
ce:eb:26:3b:89:de:be:a2:f9:b3:24:89:db:6e:db:4d:56:e8:
cd:fb:98:ec:e8:ef:80:38:75:ae:55:aa:12:b1:0c:1b:ff:89:
e9:46:2c:01:0b:5b:d2:86:81:28:94:3e:54:a8:24:68:ea:1a:
9f:8d:aa:a9:27:09:38:28:2c:b0:72:81:6f:68:a9:83:41:95:
d0:82:d8:55:46:72:80:bd:28:5a:2e:02:7f:75:67:c8:f8:bf:
dd:4a:f3:c1:ae:c1:2c:b1:d7:c9:80:68:45:ed:26:b0:b8:97:
6e:78:af:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:04:38 2025 by rpki-client