Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
File: ylmb3Bz8eujML7oV_NgMoRc3hGc.mft (raw, json)
Hash identifier: ijMlqp8IT+h5QwPLBR5IxFP26+QckBV6KTMjNQd4S9Y=
Subject key identifier: 60:7E:67:65:A9:18:17:48:E0:59:48:EA:D5:E3:75:72:53:9D:17:F6
Authority key identifier: CA:59:9B:DC:1C:FC:7A:E8:CC:2F:BA:15:FC:D8:0C:A1:17:37:84:67
Certificate issuer: /CN=ca599bdc1cfc7ae8cc2fba15fcd80ca117378467
Certificate serial: 0197B82143F4386360D45BC1B51CD0440F87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
Manifest number: 01CD
Signing time: Sat 28 Jun 2025 20:01:17 +0000
Manifest this update: Sat 28 Jun 2025 20:01:17 +0000
Manifest next update: Sun 29 Jun 2025 20:01:17 +0000
Files and hashes: 1: ylmb3Bz8eujML7oV_NgMoRc3hGc.crl (hash: xWw5Ri67VbRuu4TMQKSWZogupJXCJtFT5CkCSY0w5+o=)
2: zIZvUw6LEttnk9GqCkFL8S-ncbM.roa (hash: g5dRThI/Wu6nM24igsF8Y2hQEgVjjdxUN3aRLJWGc3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:43:f4:38:63:60:d4:5b:c1:b5:1c:d0:44:0f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca599bdc1cfc7ae8cc2fba15fcd80ca117378467
Validity
Not Before: Jun 28 20:01:17 2025 GMT
Not After : Jun 29 20:01:17 2025 GMT
Subject: CN=607e6765a9181748e05948ead5e37572539d17f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7c:d4:43:10:31:05:15:39:29:b7:af:cd:81:
a6:69:c4:aa:b3:90:95:6f:4f:29:06:e8:b8:20:cd:
b7:b9:95:57:51:48:de:71:c0:1a:5f:13:92:36:85:
60:8c:d9:30:8d:da:ec:3b:aa:44:a3:24:77:44:11:
5c:e2:4e:fc:02:6d:14:ce:0c:ef:51:c9:5b:2e:ec:
8b:9c:f8:c5:a2:c5:dd:c5:23:bc:94:90:12:4f:ed:
55:37:54:7e:ee:5e:10:85:49:9f:42:d6:9f:9c:65:
0f:fd:d0:d5:27:11:c6:a4:7a:db:54:ec:91:8f:a7:
24:61:7f:50:b0:3f:63:35:83:f3:de:01:41:28:ee:
d0:f1:7c:ec:88:ee:82:be:61:39:ef:a7:c3:de:7a:
ed:2a:cc:a7:b3:96:25:b7:cf:7b:d5:77:e3:ab:a0:
01:0a:1c:05:da:48:20:35:e7:96:66:ee:49:80:99:
38:a8:8a:dc:94:a9:bf:2b:6a:15:7f:53:e4:ea:f7:
cc:e2:fc:ca:5c:29:ea:67:fe:e1:7e:04:a0:fd:34:
21:b6:c4:46:e2:06:27:e9:8c:ca:12:1b:03:0a:d4:
85:cb:45:62:17:08:5c:cb:5e:f2:81:c3:2e:74:21:
2c:a0:de:8e:41:4a:ca:9c:23:5f:e6:30:a8:9c:bc:
7a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7E:67:65:A9:18:17:48:E0:59:48:EA:D5:E3:75:72:53:9D:17:F6
X509v3 Authority Key Identifier:
keyid:CA:59:9B:DC:1C:FC:7A:E8:CC:2F:BA:15:FC:D8:0C:A1:17:37:84:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f2:29:6b:61:c5:a3:ea:3d:c1:53:1c:f3:a0:59:f5:4e:7a:
15:70:36:be:25:98:a7:84:8a:1b:0b:2f:ae:61:4c:96:74:f1:
76:f7:8e:0b:2d:d6:92:5d:0e:5b:63:77:25:f9:51:e5:77:45:
62:43:c2:e0:26:bb:03:1c:93:aa:9b:99:cd:1c:36:0b:dc:d4:
8c:3f:e6:7e:5e:93:c4:b3:84:64:d9:97:7d:5e:3c:78:3d:ed:
3b:94:89:c8:2c:a3:2e:59:de:d0:81:a9:30:8a:5b:3a:42:9e:
1d:cd:3b:8b:e3:0a:db:2c:03:00:c6:65:0e:2f:88:32:4a:ca:
ce:d5:c8:36:bf:07:0e:55:97:c7:e5:34:99:b8:35:96:6d:b2:
d6:8a:e4:46:28:91:2b:2d:10:3a:fb:54:1e:9c:b0:fb:2e:83:
6a:49:58:d0:30:03:67:2b:71:4f:55:f2:11:7a:c5:50:2f:43:
3c:d9:e2:6a:e5:97:f2:63:94:c3:58:1a:29:bd:9a:0a:dd:55:
ec:20:85:22:27:12:01:15:b4:24:d4:a3:ae:44:3d:21:a8:76:
d3:53:44:20:a7:da:5a:9d:55:73:13:10:fc:fd:3c:d8:07:5d:
24:42:fa:0d:d2:4b:4a:a0:5c:49:0e:e4:01:59:eb:04:ea:f7:
7c:fa:fe:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:33:12 2025 by rpki-client