Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
File: YQfi4ugXHTGdobxks2w8mF5kbCo.mft (raw, json)
Hash identifier: /Z9BMp2bVxZMRSTc+VZluYhbShrowboxtFLIahqokSQ=
Subject key identifier: 6F:68:AF:02:94:50:26:34:0E:29:D1:E8:2F:F4:4A:44:9B:71:A9:F3
Authority key identifier: 61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
Certificate issuer: /CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Certificate serial: 0197711AD894B68429D483A09F2592CA3898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
Manifest number: 1597
Signing time: Sun 15 Jun 2025 01:01:14 +0000
Manifest this update: Sun 15 Jun 2025 01:01:14 +0000
Manifest next update: Mon 16 Jun 2025 01:01:14 +0000
Files and hashes: 1: 2lOhAzlC5K0mMI8bchXi_D9R3Rw.roa (hash: wULZZ92mny/AlScu8gAC9jEDmMKs+7xfe1mY5oB7zrA=)
2: YQfi4ugXHTGdobxks2w8mF5kbCo.crl (hash: FvPbEO2uUYIsFsEnY194Bf/PapBH0AosRsH9aJmiC9M=)
3: n7FqNgB42yMNZn9HsllZdTK6BM4.roa (hash: El5LuNO8gbAy7J9nIaZ/6jvlxDskopE6EQQyObfppsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:d8:94:b6:84:29:d4:83:a0:9f:25:92:ca:38:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Validity
Not Before: Jun 15 01:01:14 2025 GMT
Not After : Jun 16 01:01:14 2025 GMT
Subject: CN=6f68af02945026340e29d1e82ff44a449b71a9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5b:4d:f9:92:a3:1c:05:36:20:0d:90:64:15:
93:27:b0:f1:e4:cc:04:1c:42:90:c5:d7:eb:41:8f:
77:35:c4:a3:47:86:54:a9:8a:f8:e5:53:0a:3c:e2:
ab:64:d4:bd:73:40:96:55:ec:fc:ca:9d:9e:78:d2:
0e:7b:14:20:26:42:dc:a8:1a:e2:4b:c1:be:83:2e:
b1:36:d4:43:4c:d8:1d:14:bc:ae:6f:b3:81:62:51:
78:c5:53:77:15:cb:89:4f:5a:18:24:fb:d0:fa:1a:
a2:ea:76:bd:b6:2d:93:77:ed:5e:23:45:38:69:ae:
6f:4e:7e:83:ce:c3:26:d7:8d:b1:97:52:79:4c:ab:
af:15:c8:8e:9f:61:42:41:9a:a7:f9:cf:b0:90:3b:
e4:a7:c6:4d:59:9e:3f:0b:f2:ff:56:e8:c9:97:bd:
1a:8a:ea:16:34:9f:0c:4e:10:05:6c:25:c1:13:ad:
d7:b1:e7:c5:7e:42:7f:3b:81:52:20:dc:36:b2:ea:
be:e9:8e:f6:d8:33:47:3b:c4:2d:4b:47:d2:50:45:
12:e6:01:90:4f:fb:93:3a:7f:39:7a:3a:71:53:5c:
96:86:96:08:60:70:62:d5:6e:a1:c5:fb:dd:58:10:
a9:7b:b3:22:1d:77:bf:d3:78:bb:5b:0c:cd:d8:5d:
86:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:68:AF:02:94:50:26:34:0E:29:D1:E8:2F:F4:4A:44:9B:71:A9:F3
X509v3 Authority Key Identifier:
keyid:61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:92:f1:9d:f9:3f:62:28:31:ec:94:fd:f9:95:c9:e2:5e:fa:
d8:7b:34:47:68:77:f8:02:4c:ae:ae:05:0a:c5:fb:04:f9:7f:
fe:bd:f5:58:46:0e:da:04:46:e0:1f:c5:e0:02:76:24:1e:9f:
c6:22:f3:97:73:ae:fb:c8:83:50:4f:ea:4f:e7:7e:82:74:da:
17:57:f2:a0:d2:76:0c:1d:81:9a:77:ef:28:00:54:42:f1:6b:
14:16:f8:ff:a0:3c:fc:fb:2e:b7:83:42:af:49:97:b3:40:e5:
24:a6:f9:3a:d4:27:f5:b4:ab:0c:4e:57:76:c8:11:6b:a3:a4:
1e:53:86:1c:73:29:15:4c:9d:e9:96:96:84:c1:43:b1:29:19:
2a:36:e6:93:e2:d4:95:c9:2a:5d:4b:c2:45:e8:71:7c:e2:4c:
89:71:08:c3:37:2e:93:9f:5a:47:68:63:61:85:05:dd:0d:c3:
19:2f:95:3c:f5:fa:74:ca:86:3c:a8:3d:49:61:44:a2:5d:1e:
b7:f2:c6:2a:71:fa:b1:82:e7:69:12:17:2c:ba:05:69:37:ad:
75:78:2d:1f:08:4d:12:80:77:c2:55:5c:3a:3e:f5:f0:98:3e:
db:32:8d:d3:41:d2:e3:5b:34:75:be:65:de:ed:79:32:bf:cf:
a7:3e:82:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:11:32 2025 by rpki-client