
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
File: YT1eE3n-qdHQ9yVu0PyRg750_vs.mft (raw, json)
Hash identifier: mZnEzOlcBWPHWFVa5KP6OyCpAfqLKguRhmGSxEm9x0g=
Subject key identifier: 04:CC:51:37:8A:F3:E2:C8:4C:52:9A:5A:CA:FB:26:49:31:25:B9:FD
Authority key identifier: 61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB
Certificate issuer: /CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
Certificate serial: 0197B6A10439404E6DE21855840D5F1630B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
Manifest number: 1494
Signing time: Sat 28 Jun 2025 13:01:35 +0000
Manifest this update: Sat 28 Jun 2025 13:01:35 +0000
Manifest next update: Sun 29 Jun 2025 13:01:35 +0000
Files and hashes: 1: YT1eE3n-qdHQ9yVu0PyRg750_vs.crl (hash: pwYoHbY9MWk4I9IPdP/WKrbIJWodPvOHWpWJZqrhKDw=)
2: aC1zrHe-B2VbFWXSrCj-et8l1wo.roa (hash: dYtxir4EItimXJqX5OgUJO3jRJ2NZN3GpkUGUsB/28Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:04:39:40:4e:6d:e2:18:55:84:0d:5f:16:30:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
Validity
Not Before: Jun 28 13:01:35 2025 GMT
Not After : Jun 29 13:01:35 2025 GMT
Subject: CN=04cc51378af3e2c84c529a5acafb26493125b9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:01:23:f0:15:87:96:1c:89:22:ec:12:74:c3:
45:0b:3c:8d:6f:83:cc:01:3b:bf:73:82:61:5b:ce:
9e:7e:4d:ec:f4:00:18:32:7a:5e:5b:c4:34:1a:c9:
84:cc:9c:62:86:ad:ad:90:a4:bf:83:35:93:49:3b:
11:67:c1:55:48:6a:05:bf:38:c9:8c:c2:2c:96:4c:
7a:84:94:b2:3e:52:32:61:db:55:74:1b:c9:b6:1a:
00:c3:72:b3:84:bc:0e:2f:27:b6:78:f8:48:ac:1b:
41:c8:95:d4:89:61:7b:5d:99:fc:e6:3b:bd:c1:ed:
03:96:68:2a:f7:ed:3f:b4:92:1c:98:4c:87:9e:96:
f9:b3:d4:ee:e9:04:70:1e:82:2b:92:5f:ff:83:78:
d6:35:4f:ac:55:3e:68:2f:11:94:da:b9:a4:ac:92:
e4:3c:f4:d1:19:3e:55:1c:e3:24:6b:69:32:80:c8:
0b:f3:90:b4:a0:6c:4c:51:5f:b9:cb:5b:08:f3:cf:
d5:c0:6c:70:10:15:a8:01:fc:26:01:00:22:a6:dc:
7b:cc:9f:48:3a:81:de:22:4c:2d:bc:88:23:14:64:
51:e7:8a:17:39:0e:c4:61:73:54:b5:3b:b5:70:e6:
63:3d:1c:d5:6a:d1:05:5f:85:6a:1e:5c:46:ce:02:
b5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CC:51:37:8A:F3:E2:C8:4C:52:9A:5A:CA:FB:26:49:31:25:B9:FD
X509v3 Authority Key Identifier:
keyid:61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:10:43:de:53:7d:22:51:e5:45:81:dd:d9:97:2a:e3:78:e2:
26:ec:45:6b:9c:97:f1:1d:03:c6:f8:c7:02:3f:97:d9:ff:01:
62:fb:c5:e5:d4:36:b9:8e:48:53:d5:6b:61:16:f1:ec:3d:7c:
f8:6d:2f:f9:bf:a6:f9:4e:de:63:76:f6:fa:9b:7c:24:f9:e4:
6f:24:46:de:11:ad:af:98:eb:b4:0c:dc:f4:6d:a3:01:66:67:
2f:5c:75:a2:17:d8:d5:92:44:b9:f7:e3:e1:04:e9:11:83:f3:
81:ce:fd:57:a0:7d:29:26:a9:26:ae:09:0d:68:8c:34:9c:4b:
11:0e:ab:4b:0b:f8:c4:14:6a:8e:79:7e:eb:6f:6c:ae:f0:e2:
19:5e:3c:0e:72:17:08:26:1b:a8:57:e0:5b:a2:ba:1c:da:0f:
b7:da:23:ed:68:c5:f5:4b:17:d8:df:c0:a0:2c:05:51:16:01:
25:c3:56:83:02:0a:54:2e:80:3e:8f:f8:73:1f:1e:62:5c:a2:
11:1d:15:b1:91:e7:81:8a:1e:8b:c1:62:80:6f:da:cb:a1:72:
c2:bb:95:1e:f3:cd:94:ab:30:90:5b:10:b3:03:02:a8:84:4e:
44:f7:cb:15:1e:c5:42:bb:40:9e:50:d3:e1:51:8f:13:50:4c:
70:92:c6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:32:45 2025 by rpki-client