Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
File: YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft (raw, json)
Hash identifier: deZnfFssPK/UPX5z9m/7bgC83nR3IgMJjVlohewuKFA=
Subject key identifier: 51:1B:C2:8B:68:95:DC:75:10:88:75:CD:61:C9:5F:B8:52:0E:82:49
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 0197B8FCD2A535ECB60F5206E62B4A4FCD80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
Manifest number: 12E0
Signing time: Sun 29 Jun 2025 00:01:06 +0000
Manifest this update: Sun 29 Jun 2025 00:01:06 +0000
Manifest next update: Mon 30 Jun 2025 00:01:06 +0000
Files and hashes: 1: PPDcjsjoszwTm8EI4XbGMJZozgI.roa (hash: 7Lx0Qx1q5+o5Xi1eI3iJhMLtFTgxseeHLhiTQPfBYeo=)
2: YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl (hash: n13S2qOVIJyVdF4MVoUmmDAVm4NEi6+RKk4sjU0YjzU=)
3: tedYlf87S78MkPQe8A70plM_Ngw.roa (hash: R2UtbWccTfdmsOnpPUNeRj+D5AnPyUqgeXRoHV5PeK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:d2:a5:35:ec:b6:0f:52:06:e6:2b:4a:4f:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Jun 29 00:01:06 2025 GMT
Not After : Jun 30 00:01:06 2025 GMT
Subject: CN=511bc28b6895dc75108875cd61c95fb8520e8249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b8:58:f4:c2:29:31:f9:b4:0a:89:94:62:25:
d5:b0:cc:dc:6d:b5:28:1d:5f:30:f3:a0:fd:d5:bd:
e8:5d:7a:0b:6f:58:de:e2:13:df:0c:84:52:a7:9c:
16:9f:38:a5:57:06:97:4e:c9:aa:d5:b1:a1:2b:55:
5f:09:fb:81:7e:ce:03:e7:47:ec:a2:51:23:7b:ce:
2a:37:89:99:e5:a5:2e:42:20:0f:52:e5:e6:1c:2d:
57:86:c2:49:d6:33:ae:78:d8:15:35:d3:d4:5f:37:
a9:6f:14:20:1a:cf:2c:8e:46:a4:c8:17:72:3a:ae:
7d:78:4c:c7:40:d4:3e:10:58:4f:56:a9:88:15:86:
9d:44:a2:6f:05:e0:81:88:30:d7:73:1c:7c:6b:ac:
e8:84:54:27:2e:3e:d9:63:e0:6e:f9:d4:18:c9:b5:
5f:fb:f1:37:98:ce:cb:75:0d:10:e6:37:60:80:99:
28:c7:21:31:11:cf:29:5f:3a:64:1a:a3:fc:b3:63:
b5:d5:c7:ee:ff:f8:f8:a0:1a:bc:7b:7a:c2:23:bb:
50:b3:36:e4:22:8c:8d:28:09:36:1d:4c:da:fa:98:
0a:b1:16:b4:7d:c1:62:5c:e5:ed:6a:ab:a4:b9:6a:
c1:a9:66:c5:b8:06:87:48:84:d7:0a:91:87:71:ea:
82:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1B:C2:8B:68:95:DC:75:10:88:75:CD:61:C9:5F:B8:52:0E:82:49
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ab:91:ab:04:86:43:f1:79:bf:fc:f6:d5:58:c1:3b:79:44:
45:f8:01:87:27:78:13:bc:a2:99:2f:e4:41:a2:7f:8a:68:29:
ad:67:b6:29:50:bb:a7:b6:2a:35:13:ef:16:27:88:bb:ca:65:
04:60:b9:25:34:df:bb:30:da:2b:71:82:88:d1:f2:f4:c3:3b:
ec:a0:1a:36:e0:3f:50:82:2e:d0:1d:ff:46:0b:6d:58:9d:a6:
b6:91:f4:a2:66:61:ed:b2:f7:3b:e5:20:a8:da:2f:f2:b9:ad:
cc:1a:5b:1c:87:08:77:4d:36:a0:0e:ec:93:cc:c4:0e:79:a4:
92:ed:df:dd:a7:bd:ad:c2:b6:38:1a:54:3c:0e:e8:57:ec:8c:
41:1a:2a:43:48:28:fd:09:ee:10:d9:18:3e:f7:40:d6:b5:37:
f2:20:e2:50:21:95:f0:0c:2e:0a:ec:95:68:8c:73:b5:32:5a:
7e:14:41:9b:d3:e4:6a:07:72:30:6d:07:6e:3e:70:80:5a:0f:
c9:c6:5b:da:b3:ba:6d:f6:ca:bd:45:75:ea:df:4b:ea:01:e2:
b1:93:c3:0e:f5:ad:08:45:ae:5c:e8:0c:fe:21:f0:31:f0:de:
56:ae:a0:96:4a:89:d2:ee:f7:eb:5e:98:09:4b:66:78:71:62:
8d:3c:42:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:39:43 2025 by rpki-client