Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
File: YbU0Q3UDZogVrdk80X0K0-GxqHc.mft (raw, json)
Hash identifier: ZyZLDERpJWeL/7z80TB2WaCVN3SruF0Eww7nq+BTg6s=
Subject key identifier: 9B:4D:F9:98:CC:7D:91:6B:AF:49:CF:3B:BA:BB:97:3A:71:CB:E7:3B
Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
Certificate issuer: /CN=61b534437503668815add93cd17d0ad3e1b1a877
Certificate serial: 0197BEFF2C261F04C1995EDA70E717BF963C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
Manifest number: 15CD
Signing time: Mon 30 Jun 2025 04:01:23 +0000
Manifest this update: Mon 30 Jun 2025 04:01:23 +0000
Manifest next update: Tue 01 Jul 2025 04:01:23 +0000
Files and hashes: 1: Hs5OpoVTxSJfvS3erDXXhGQXJSE.roa (hash: ETk/+dQR/qhcGpGtYBL6fSkfntPwX1tHoXTuoqNreRs=)
2: YbU0Q3UDZogVrdk80X0K0-GxqHc.crl (hash: L3Ay/0xbsSVRhVogHSvwN2vy7G8GkvmUX04uV19fHoo=)
3: cRbQbZI4caSihSJdxBwTOdI7jHI.roa (hash: l064fVVkmmooFHUiz4jiDmBf7OxJUiTNePDan7lSIBE=)
4: ct4uh4Dvn38kuKb2J9OedNnfBrQ.roa (hash: nZxVoJ4prQOuIIhd7SEgU19Z8RQI5zRlz6rYzsDEzRI=)
5: u7siAwXzbgFTEGp6PKjrdqf7Z4A.roa (hash: vJGRmjZ9RvsYFu3lwU4eezlqzVwLgmj9/3K2yZjY284=)
6: y5D4TaXJLkrfa4Of0NlhAIHZfQY.roa (hash: IeCyxZUbWUBk/m+unrT9oFimJ4vs3IvgUDAcRXAQ5dA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:be:ff:2c:26:1f:04:c1:99:5e:da:70:e7:17:bf:96:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877
Validity
Not Before: Jun 30 04:01:23 2025 GMT
Not After : Jul 1 04:01:23 2025 GMT
Subject: CN=9b4df998cc7d916baf49cf3bbabb973a71cbe73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9e:72:0d:92:5d:cb:16:4d:e7:aa:8f:f9:79:
2a:68:cc:5c:3b:24:e2:33:90:7e:74:24:65:b4:8c:
e2:e7:fd:d6:c6:ab:9f:73:b8:a3:ca:db:11:d6:92:
0a:d1:d4:be:9f:35:f4:10:65:4d:cd:f7:0b:66:07:
29:f1:bf:a4:46:45:2d:33:5f:ab:54:6a:7f:1e:6b:
17:da:7a:4c:50:5e:00:5b:80:98:66:e0:b2:7a:1c:
d2:7f:16:bf:25:80:05:36:51:4d:29:d6:e8:b8:a9:
42:0c:d5:95:05:5f:da:b0:07:b6:6e:87:02:d5:d4:
17:75:d4:8f:de:94:4d:c7:83:e4:24:a4:2f:03:6d:
a9:6c:81:fe:e8:fa:6b:b8:56:bd:43:80:3b:d3:e7:
df:82:a4:2c:7e:09:32:22:cd:12:86:46:cb:ca:20:
41:a0:fa:ec:81:d9:f7:61:2e:95:cd:89:df:4a:db:
3d:09:f2:e1:fe:3e:4a:a1:9e:d4:e5:ec:9c:8e:c9:
c9:77:44:d7:6b:32:f7:3d:d8:2f:4c:8f:a6:da:2a:
95:98:6c:95:83:b6:f2:d5:bc:5d:d8:ac:e3:7c:e1:
b8:24:61:e1:0e:ff:e4:fd:8b:09:e7:02:0c:70:d1:
5c:c6:36:2f:e8:87:de:78:50:72:e1:6c:95:cb:c1:
25:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4D:F9:98:CC:7D:91:6B:AF:49:CF:3B:BA:BB:97:3A:71:CB:E7:3B
X509v3 Authority Key Identifier:
keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:2a:03:b2:b9:8e:7e:2d:72:fc:b0:62:11:96:25:7b:33:43:
a5:f8:89:6f:43:94:32:84:c8:c8:24:13:24:33:e5:dc:36:91:
5d:26:5a:0d:10:c8:5b:11:db:95:fa:33:36:70:74:d8:52:5e:
d6:21:6d:cf:4c:e6:c5:ef:e5:5a:36:07:61:ad:66:fd:63:a1:
d3:61:37:3a:86:fb:b0:0a:44:71:89:c8:ca:f3:dc:18:0a:dc:
56:f3:01:0b:ef:9e:df:56:0a:3e:88:f9:38:c5:3f:1d:24:8f:
74:94:c0:59:3b:0b:8e:3d:9e:d6:c6:aa:00:b6:ff:e4:cb:53:
71:94:83:59:07:ca:f5:bf:79:73:1f:64:c0:b3:50:39:5c:85:
57:77:ee:da:e9:fc:13:58:0c:4a:a6:d1:03:2c:44:1b:ec:4b:
24:a8:79:45:8d:aa:59:5e:cf:22:df:91:49:ae:a3:70:10:50:
83:50:cd:bb:57:87:df:ae:12:9a:f7:2b:90:1d:be:d1:20:23:
2e:d3:c5:57:7e:38:8f:2e:be:4b:14:77:a6:4c:1f:40:f3:b2:
d5:70:ac:87:09:b9:d2:7a:7e:50:5f:1c:06:94:7a:f5:f0:d0:
1d:c6:5c:d4:86:aa:b9:5f:6b:9a:84:fe:8f:8c:79:a4:84:ed:
f0:ef:07:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 12:33:10 2025 by rpki-client