Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
File: YZz5qeC2RhrYM4dawRaPiSP9VQs.mft (raw, json)
Hash identifier: /a09l1rwp0qmfDdyQI05kCbtt6Q8FAcB64RYos1S+YU=
Subject key identifier: C4:07:72:E6:3D:17:34:1B:F2:59:A0:12:1C:E3:F4:CD:8B:98:08:17
Authority key identifier: 61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B
Certificate issuer: /CN=619cf9a9e0b6461ad833875ac1168f8923fd550b
Certificate serial: 0197B77C2717E5257E94C176A457140B6042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
Manifest number: 0236
Signing time: Sat 28 Jun 2025 17:00:56 +0000
Manifest this update: Sat 28 Jun 2025 17:00:56 +0000
Manifest next update: Sun 29 Jun 2025 17:00:56 +0000
Files and hashes: 1: YZz5qeC2RhrYM4dawRaPiSP9VQs.crl (hash: oZ2xWzo4aGT3ex1Z+AUXLyMKdQU1VTCznT7h1DJVRPE=)
2: huRseKKMZ6MrEbEtnTidADNp1Qk.roa (hash: 2Cpw72DhJ+0Co4QK9K/ptsbGLArKbkMx0RKaT4rzilY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:27:17:e5:25:7e:94:c1:76:a4:57:14:0b:60:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=619cf9a9e0b6461ad833875ac1168f8923fd550b
Validity
Not Before: Jun 28 17:00:56 2025 GMT
Not After : Jun 29 17:00:56 2025 GMT
Subject: CN=c40772e63d17341bf259a0121ce3f4cd8b980817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:13:34:91:0d:63:a7:56:78:9b:cd:ac:60:4a:
8e:d7:77:94:e2:04:74:e0:1c:c5:4f:a7:93:91:8c:
2e:e4:be:fe:dd:86:68:ab:19:2d:52:ec:df:3e:b8:
5b:13:8c:5e:40:2e:88:df:df:5b:38:54:4f:0d:ee:
f5:5b:4f:db:32:6c:36:00:84:52:e4:cb:fe:b4:3f:
b2:20:81:53:7e:3d:a0:eb:4d:2b:b6:4e:b2:f2:50:
1b:87:27:1d:88:82:af:e7:ec:7f:ff:bc:0c:1a:3b:
58:43:e1:df:5f:f6:2d:fd:3a:e1:a5:4b:b7:ce:6b:
6e:16:2b:99:79:25:ad:ed:82:24:59:8f:bf:0d:0e:
6d:3f:d4:b7:e0:ff:31:8d:f5:c4:86:fa:82:6f:cd:
9b:1a:c9:e5:cf:25:ff:d2:25:99:9a:c1:69:fa:f5:
27:85:de:5c:35:38:8e:85:dd:1c:6d:b7:76:5f:e7:
2e:6c:e7:e1:18:47:c9:ba:f1:93:ff:ce:ac:83:f4:
37:58:0b:bc:29:7b:8e:90:9d:5d:85:35:05:bd:9d:
59:e0:50:f3:c8:95:35:3a:93:dd:85:13:5c:73:5d:
57:b8:67:be:d7:d5:4b:64:bb:e1:c4:09:8b:8b:78:
fd:8f:e5:e8:8e:4c:7d:5c:15:ba:99:e8:14:90:d9:
93:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:07:72:E6:3D:17:34:1B:F2:59:A0:12:1C:E3:F4:CD:8B:98:08:17
X509v3 Authority Key Identifier:
keyid:61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:58:cf:20:1c:0e:98:ed:ff:7a:58:96:ea:ba:f5:ff:e6:59:
7c:68:9f:15:76:fb:29:a9:49:b2:92:93:d1:7b:1a:3a:0c:65:
33:ef:8e:89:1b:3b:37:82:6f:0c:97:16:6d:64:6b:37:de:0c:
94:31:8d:5a:c6:67:2e:9d:37:c4:b6:5b:22:db:d6:38:04:89:
80:38:8a:05:ff:40:40:4e:8e:33:74:3c:72:c1:81:86:9f:2a:
77:6a:ad:97:c2:12:6d:0d:2a:72:2b:a8:26:78:99:c3:f3:79:
87:1b:97:78:c8:af:43:25:9f:82:e0:c4:e4:07:f8:fc:e7:8c:
5c:8f:bb:24:bc:9d:a7:72:43:c6:ec:bc:7c:a3:e9:16:b4:4b:
4f:13:e3:83:6f:e2:5e:01:49:a6:71:23:74:8b:69:2c:52:a9:
90:ef:2c:6a:21:25:14:db:1a:72:47:98:40:ea:6d:6d:c6:e5:
6e:cd:0b:0f:44:23:bc:c7:29:f3:25:35:0f:22:8e:f9:b5:83:
f8:01:67:62:7c:c8:84:22:d6:8f:cd:a4:99:c9:c5:13:b5:ab:
2b:27:92:50:bc:63:c1:15:dd:01:41:32:62:f4:d1:20:da:53:
d4:31:30:ac:dd:77:17:61:4e:23:42:04:d1:25:be:15:f7:86:
03:65:2a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:26 2025 by rpki-client