Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
File: YGhXxDyh3wTLaaSgqshim98ydWs.mft (raw, json)
Hash identifier: MpIK0p4sD4ZnF48BlPAlDnSou0Ygi181zsOAKfbIh08=
Subject key identifier: 45:7B:2B:A5:57:B5:0F:38:07:77:B2:41:25:99:06:BC:84:28:1F:D4
Authority key identifier: 60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
Certificate issuer: /CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Certificate serial: 0197B7B3427D8E89C777B9DCFBC4BA333EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
Manifest number: 126C
Signing time: Sat 28 Jun 2025 18:01:07 +0000
Manifest this update: Sat 28 Jun 2025 18:01:07 +0000
Manifest next update: Sun 29 Jun 2025 18:01:07 +0000
Files and hashes: 1: XuX7uT8cb5cVhdOXna_jZRuc6JE.roa (hash: 6nSukjm2iQoWm9SssGRSJpva0KahTxgtp11M/o63UVs=)
2: YGhXxDyh3wTLaaSgqshim98ydWs.crl (hash: Vp5VozLIS+m47yZ2BL2m92Lwxc1rDTJtoIDd++aiQQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:42:7d:8e:89:c7:77:b9:dc:fb:c4:ba:33:3e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Validity
Not Before: Jun 28 18:01:07 2025 GMT
Not After : Jun 29 18:01:07 2025 GMT
Subject: CN=457b2ba557b50f380777b241259906bc84281fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f6:43:64:dd:86:7a:fb:e1:94:14:90:37:b4:
b3:12:79:82:b5:16:1c:ab:23:a7:64:49:8a:f2:a1:
4c:06:3c:27:6e:49:d7:0f:2c:37:3e:50:b9:ad:be:
5d:9e:a0:4d:fc:13:12:55:df:d7:9b:d1:03:54:d9:
3b:9d:e9:3a:01:fc:31:27:86:de:3e:82:e6:fd:a9:
64:36:6c:80:44:ae:a9:2a:1b:61:e3:3b:55:52:53:
80:74:26:c1:6f:4d:b5:41:3a:8b:a0:45:79:dd:c1:
65:21:a4:46:cc:85:3a:19:53:eb:b2:25:f6:ec:40:
66:34:0a:dd:f4:ae:0b:0d:e1:ef:d0:99:d4:84:3d:
37:00:e0:50:c1:58:61:15:46:da:f4:65:ca:eb:d4:
7f:d6:9e:71:c6:ad:2f:64:96:bc:2f:cb:f8:13:aa:
b6:9c:e7:4f:5f:c0:72:1e:f3:80:8f:35:ad:c6:c0:
28:0c:eb:a1:0a:2f:c5:9d:2d:99:7c:5a:5c:ae:db:
f1:b3:e2:bf:d5:20:e1:b5:e8:bc:7d:38:b6:92:ab:
93:a6:2f:56:f2:e5:d5:ba:0d:72:c4:b2:bc:27:12:
8e:1e:d5:16:ab:75:4a:4c:79:e7:78:78:70:f9:34:
7c:15:a3:1b:bc:93:f4:50:25:5a:2b:4f:24:12:be:
23:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7B:2B:A5:57:B5:0F:38:07:77:B2:41:25:99:06:BC:84:28:1F:D4
X509v3 Authority Key Identifier:
keyid:60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:11:7a:83:e8:b8:1a:7f:6d:8c:7e:c0:79:97:44:11:a6:f3:
97:30:47:33:35:19:cd:8c:d7:46:e6:3e:8b:93:30:66:ee:9a:
62:b2:59:a7:82:7c:d7:72:c2:1c:ec:ec:20:39:86:0d:0c:18:
c5:e4:83:2a:b2:9a:67:db:ba:5f:e4:24:97:96:7b:47:52:aa:
aa:f0:a2:63:d9:e5:4d:c7:91:3f:c8:ed:ea:ee:c2:c9:f8:02:
76:88:c9:4d:1d:e5:a2:0f:87:79:6f:a0:34:86:89:aa:0e:f4:
e6:9e:8e:32:5d:5f:ec:2a:e2:c8:9b:1d:f3:45:74:ff:f3:57:
19:3a:f5:23:0e:06:78:4d:3c:ef:6d:26:87:0a:29:72:bf:6e:
a1:6b:8d:42:23:22:6f:1d:49:10:b4:13:29:d8:86:76:fb:16:
19:42:35:e4:cb:ed:29:86:9a:a1:fe:f9:0b:b3:b1:46:04:da:
e4:a2:ae:2a:be:8f:cb:4c:12:b0:fc:b5:13:53:c8:ef:98:df:
a6:3b:76:3e:be:16:79:f8:5b:83:11:20:78:d6:41:53:a3:18:
66:c0:2a:f6:bb:27:26:49:c7:ad:e3:d2:03:4e:06:f9:25:b6:
17:1d:77:68:e2:df:84:ba:71:d0:f0:24:01:76:cb:3b:d2:20:
43:65:f7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:33 2025 by rpki-client