Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
File: Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft (raw, json)
Hash identifier: cTxK8eEgBDLLfFRfAqxki7/OZXqR3l7YlWCj6WpMwtI=
Subject key identifier: 32:09:56:CA:E8:7A:AF:ED:E6:BD:6D:B0:80:03:7E:C8:27:EB:87:DA
Authority key identifier: 62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
Certificate issuer: /CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
Certificate serial: 0197B6A10C8E016ECC7EC2C351B522183D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
Manifest number: 0E3C
Signing time: Sat 28 Jun 2025 13:01:37 +0000
Manifest this update: Sat 28 Jun 2025 13:01:37 +0000
Manifest next update: Sun 29 Jun 2025 13:01:37 +0000
Files and hashes: 1: NKs11rmttdxb4erj66XSi3ux60c.roa (hash: g/w9HbLFeSyX3EjhAjkTnAEYRLxJvbXYid4txxbFY6E=)
2: Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl (hash: /ljnyUS+Z9WTI23EsOihOTTTBkXi273lnZ5dACNdqYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:0c:8e:01:6e:cc:7e:c2:c3:51:b5:22:18:3d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
Validity
Not Before: Jun 28 13:01:37 2025 GMT
Not After : Jun 29 13:01:37 2025 GMT
Subject: CN=320956cae87aafede6bd6db080037ec827eb87da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b9:61:3c:1e:51:b1:84:6c:c5:68:5b:30:24:
b1:77:c7:52:0e:a2:10:c3:ca:ed:94:9c:5a:87:af:
6a:aa:3d:a8:b7:41:cf:e1:bf:1a:86:4b:45:f2:e3:
42:01:e2:be:32:24:91:cd:0c:3a:53:cd:24:34:98:
b3:b4:a1:94:37:06:4c:81:91:64:63:9a:a3:d5:7d:
9d:f3:7a:5a:8e:35:06:da:2c:a7:d2:52:4f:14:1e:
18:a6:b1:7a:64:f5:92:8b:77:b9:37:e5:f0:87:a5:
46:f3:f6:50:fd:9e:89:a9:22:6d:52:e3:43:5d:47:
58:10:31:c6:9b:1a:ac:29:8b:d4:1f:e8:97:e3:bd:
93:6e:23:ae:f7:2a:b7:33:3d:a4:d0:95:b2:b9:01:
ae:1b:de:24:db:0f:61:86:90:9a:7a:12:9a:e5:0c:
5d:b2:15:24:78:de:ae:03:3f:4d:55:64:ed:e9:5f:
bb:81:b9:84:62:34:b6:4c:5e:60:83:01:f3:6d:db:
59:80:5e:d7:32:a1:de:04:6a:ae:24:ca:8c:27:5c:
ce:a7:29:9f:ee:57:58:7a:f2:9a:dc:b1:eb:1b:d8:
b6:41:a8:e2:9f:99:28:7c:2e:3c:4f:0e:7a:83:0f:
ab:e6:16:39:e4:e9:01:ff:11:82:dc:eb:9f:99:bb:
02:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:09:56:CA:E8:7A:AF:ED:E6:BD:6D:B0:80:03:7E:C8:27:EB:87:DA
X509v3 Authority Key Identifier:
keyid:62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f9:0d:3f:c2:81:13:6c:1a:9b:64:ba:62:f0:39:76:1f:d2:
66:82:72:2f:07:5b:df:07:c2:e3:be:4c:c2:ca:6c:dd:ce:fc:
6b:c7:c4:b4:f0:c5:46:16:bb:ed:f4:e2:2d:ea:d4:d9:83:6d:
f2:28:30:5b:08:0c:f7:c3:5f:58:7b:07:29:6b:5f:bd:28:9e:
8b:ad:b1:76:12:84:db:77:a9:3f:df:76:26:7c:75:a0:68:f4:
76:b6:1e:d5:c6:ea:08:9d:8e:c4:cb:25:52:f7:9d:e5:88:11:
70:19:d7:ed:ab:5f:5e:45:92:e3:d1:87:25:c2:0d:b4:7f:dc:
fd:da:44:c3:af:9e:c1:cc:7c:ce:e4:0d:01:82:40:3d:05:29:
ed:c1:bd:f7:02:d2:18:d9:f0:64:c2:ba:f1:2e:32:e2:f8:03:
d8:b0:a0:af:7a:1a:ec:9c:9f:ba:d5:a7:4f:34:fb:3b:96:d4:
73:2b:e4:c1:6b:69:5d:20:7e:73:14:c6:5b:86:39:91:68:c7:
5e:c6:6b:53:c2:40:dc:de:d8:36:5f:e8:c9:91:88:8b:ee:6f:
93:9f:09:75:aa:c5:93:b9:62:41:1b:75:34:66:24:b2:b8:65:
09:9e:49:35:7d:6e:25:df:be:6d:88:fa:69:2e:b1:01:1a:9e:
25:43:17:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:05 2025 by rpki-client