Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
File: YLlhXfjGWdrIzAh70BHUtf83Pio.mft (raw, json)
Hash identifier: 2wNwSuR1dKktbeyNgtmP4u3oX085cH05W2MwhtFF4Es=
Subject key identifier: 92:74:49:81:48:41:F6:7C:8A:F3:5F:31:63:41:82:F0:2F:82:6C:89
Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
Certificate issuer: /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Certificate serial: 01976D3D984D5ADD68FCE179D32D151D7FDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 07:00:42 +0000
Manifest this update: Sat 14 Jun 2025 07:00:42 +0000
Manifest next update: Sun 15 Jun 2025 07:00:42 +0000
Files and hashes: 1: X_PEzQ4h2-EZtXwGF1yRsO_RZBY.roa (hash: slaceRsemZrT4J4p4MYMe/YtYOfBM+8j+DQ+MF7JOoM=)
2: YLlhXfjGWdrIzAh70BHUtf83Pio.crl (hash: SAxGdR43EoPcei8yQ2017Z7bfp77ZOYGX8Gq8/0vJvg=)
3: uJcwClz6uJRHIAqaB4c6iwo2p2k.roa (hash: YfPxGf556xtNVvXkpS2EQtFKQegwkF+I1h92ZELHuRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:98:4d:5a:dd:68:fc:e1:79:d3:2d:15:1d:7f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Validity
Not Before: Jun 14 07:00:42 2025 GMT
Not After : Jun 15 07:00:42 2025 GMT
Subject: CN=927449814841f67c8af35f31634182f02f826c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:10:24:d3:6f:0b:e4:63:3e:38:3e:3e:71:cf:
6f:6e:de:d1:6d:49:3f:2a:3f:d1:44:e8:9f:9e:2c:
8e:95:1c:a7:f0:b0:9a:91:db:30:d8:8d:d0:5d:30:
54:c8:14:71:9a:0c:79:c6:de:1e:d1:ca:5e:3b:f1:
bd:8f:70:fc:a7:e6:3b:3c:48:5e:3f:4c:63:ed:23:
ad:83:5d:a3:c4:d6:60:d6:28:9e:43:0b:08:8b:78:
42:36:60:4b:5a:07:71:fd:27:e6:ec:55:ba:e1:46:
68:4c:dd:4d:f2:c2:b7:81:5a:25:5d:8e:ae:b1:1d:
b4:d8:eb:73:02:7f:88:48:2a:c7:84:2f:ac:76:13:
90:30:95:2e:fe:f0:60:5a:06:03:6f:87:5f:7d:76:
83:51:e8:2a:e1:ca:aa:8c:8a:8a:ad:2d:e2:c2:92:
f2:df:4a:2c:56:0e:5d:e7:05:a1:99:06:9b:6a:de:
aa:56:27:59:53:e8:a3:56:ea:74:c1:c1:0e:51:e3:
34:ac:d7:b3:37:62:15:de:cf:d0:d1:9a:56:a4:b4:
5e:7a:a3:4c:a6:b5:00:46:15:d5:50:e9:d1:40:88:
07:e3:08:38:da:22:e8:3a:96:54:4b:0e:98:97:aa:
f8:c0:d2:53:53:cb:24:4a:42:d5:a2:91:17:c0:3d:
42:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:74:49:81:48:41:F6:7C:8A:F3:5F:31:63:41:82:F0:2F:82:6C:89
X509v3 Authority Key Identifier:
keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:59:5e:78:0b:0a:a6:e9:1a:44:ff:9b:14:17:4d:c3:77:b0:
b2:b3:72:e9:ce:87:43:cc:a3:84:af:30:96:5a:d8:df:72:84:
90:a1:87:26:90:4c:f8:4c:86:24:d9:7e:49:db:89:11:ce:93:
98:e0:86:71:25:0a:6f:cf:59:5a:2e:ed:f2:97:bb:27:d0:2a:
92:1c:17:16:38:4b:27:40:f3:4b:46:7f:63:d8:f3:e5:1d:4b:
7a:dd:6e:7d:70:a7:06:77:cd:e4:a9:e2:d4:f9:88:45:b8:03:
22:5c:47:cf:30:41:b1:cd:be:4e:83:e4:1d:2a:64:e2:95:da:
7d:a8:fc:9c:60:16:28:6d:f3:b4:75:1c:71:80:61:bb:47:29:
24:15:ef:f2:ee:42:06:94:e8:f9:0a:e4:b3:75:4f:79:bd:0e:
9e:a3:28:e3:df:14:03:b2:c3:5f:4c:5b:48:d6:1f:c0:c2:17:
b9:08:77:47:41:2b:b5:ad:94:52:f6:39:b6:28:9d:75:e3:7f:
40:91:b3:19:34:82:c1:1c:38:ad:e6:9d:64:b4:69:22:44:1e:
f3:50:91:e4:f9:cb:cb:e9:99:45:0d:c7:6c:c3:84:09:c6:05:
0c:a4:09:cd:bd:02:f7:29:ed:52:67:ca:9e:32:2c:87:5c:53:
e2:ae:cc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:35:46 2025 by rpki-client