Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
File: Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft (raw, json)
Hash identifier: b3dnYdp/8VeY0FfYeXJr+wJVus0fH54NrWf6dbbRYvg=
Subject key identifier: 97:2C:62:80:88:F3:18:52:AF:F5:AB:41:6A:77:D9:AF:E3:6E:06:A4
Authority key identifier: 63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0
Certificate issuer: /CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0
Certificate serial: 0197B6D7A2690C6E137A85824A2A487A40A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 14:01:14 +0000
Manifest this update: Sat 28 Jun 2025 14:01:14 +0000
Manifest next update: Sun 29 Jun 2025 14:01:14 +0000
Files and hashes: 1: SOjICIUf3Q5KcvZmv_NHH5baNJY.roa (hash: CIXb+faY/LyAGhWDjXy0Uzmt28hgw4zuuv1ZndxzjNQ=)
2: Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl (hash: YUS6lkvgvjc5wNW9LcQbrVQjEv22s03vA8hCLNaoMy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:a2:69:0c:6e:13:7a:85:82:4a:2a:48:7a:40:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0
Validity
Not Before: Jun 28 14:01:14 2025 GMT
Not After : Jun 29 14:01:14 2025 GMT
Subject: CN=972c628088f31852aff5ab416a77d9afe36e06a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:08:bc:fe:05:4e:9d:23:5c:14:0a:80:a8:a7:
62:55:db:24:fc:6c:cb:15:94:6f:e8:91:85:48:62:
05:16:12:c0:27:43:7e:98:be:af:fe:3e:1f:8d:d4:
ce:83:fa:48:29:e0:17:3b:31:3f:97:68:b2:f2:2b:
ad:6c:f1:f5:d4:2e:71:6a:7b:b5:e4:86:74:4b:1e:
d3:7f:39:bd:3c:d4:a1:71:2d:90:91:d9:71:b6:82:
14:7f:25:a6:0e:ed:1f:c9:d0:bb:10:9d:2a:16:c9:
d4:9a:ef:99:16:ce:8f:0e:80:69:18:51:26:4a:70:
13:d6:9c:2d:94:b4:72:20:d0:43:70:c0:98:e6:93:
77:8d:40:bb:db:9a:21:91:cb:b1:f1:45:73:ea:bb:
73:00:77:7d:d5:cf:af:b3:c5:8c:29:0b:e7:b3:a0:
94:e9:7c:26:9d:06:da:ef:b9:f8:5d:06:07:3a:dc:
51:8f:95:66:51:a0:90:03:d5:e8:0f:41:83:24:a5:
50:af:22:5d:18:a0:bf:c4:a2:90:1e:06:70:62:fb:
c7:eb:cd:7f:6f:a0:de:74:b6:56:95:f9:ce:5e:9c:
5d:58:07:17:34:0e:29:4d:48:4d:04:83:2b:c3:bf:
01:6d:4b:80:6a:5d:89:cd:ef:38:0f:a7:8b:84:0c:
93:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2C:62:80:88:F3:18:52:AF:F5:AB:41:6A:77:D9:AF:E3:6E:06:A4
X509v3 Authority Key Identifier:
keyid:63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:9b:d3:98:f7:01:76:26:82:f0:85:09:96:75:a2:fd:d1:b1:
20:82:4d:85:0c:7e:6d:b8:42:bd:3a:2b:71:f4:f7:3b:f5:04:
c4:c4:92:16:38:c5:ce:a2:cc:6c:ac:07:ea:10:17:4b:8a:55:
f3:6b:dd:6b:4b:2c:f6:5a:20:fa:89:18:e4:c6:da:72:9e:38:
dd:fb:4e:46:96:51:34:fc:a3:6f:a3:71:84:80:85:83:df:bf:
3e:11:8c:48:03:e4:31:0f:3d:34:d6:0c:65:f8:a3:16:ff:f0:
52:89:e7:9b:8e:eb:02:ba:9b:20:98:62:13:1d:fa:ae:b4:d1:
75:b2:fe:f4:3a:74:6c:f3:68:02:30:9f:63:ce:a0:79:33:b3:
36:48:60:3f:a5:61:11:56:ab:08:70:31:da:c8:b2:e9:30:8a:
22:d3:55:40:71:87:e6:42:07:c7:65:37:b6:07:c2:9d:69:a9:
f7:3a:40:08:1b:22:75:be:5c:07:0e:88:44:32:d5:a3:4e:ad:
63:20:4f:c7:2c:d8:40:3e:d4:1b:1e:7a:da:22:93:53:bc:b7:
a4:1d:10:e9:2b:bf:c7:99:7e:99:09:4a:d0:74:9b:ab:19:40:
65:73:26:cc:76:4a:98:b9:10:d0:94:06:c8:58:ba:dc:b4:74:
58:21:89:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:55 2025 by rpki-client