Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
File: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft (raw, json)
Hash identifier: 74XixCoQF8EN/oZXjCFOiDhVyxHOgaDrqolK723X3TI=
Subject key identifier: BF:C0:44:7F:61:02:11:E0:1E:A6:22:89:3E:52:2B:61:44:AE:F6:28
Authority key identifier: 60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
Certificate issuer: /CN=601331eccd96d02c1035734cd00a390e8311d942
Certificate serial: 01976CCF96C2CDE8C50A59B05672AF7C42B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
Manifest number: 13D6
Signing time: Sat 14 Jun 2025 05:00:33 +0000
Manifest this update: Sat 14 Jun 2025 05:00:33 +0000
Manifest next update: Sun 15 Jun 2025 05:00:33 +0000
Files and hashes: 1: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl (hash: xVMTzDP127qj8lPgE4EDPSgU3ZygpJNQth6o48CmUbo=)
2: c7MGsEbypq7HQmSi7CA8wcLve5E.roa (hash: qY1ylvNOSUvOO34D9YGb2Z/M9yHjYdSK25iwWmwBxOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:96:c2:cd:e8:c5:0a:59:b0:56:72:af:7c:42:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601331eccd96d02c1035734cd00a390e8311d942
Validity
Not Before: Jun 14 05:00:33 2025 GMT
Not After : Jun 15 05:00:33 2025 GMT
Subject: CN=bfc0447f610211e01ea622893e522b6144aef628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b8:2b:e3:a7:49:79:e0:56:cb:5c:97:68:b2:
f7:c8:7a:f4:fd:84:46:55:0a:03:d6:55:bc:1a:fd:
4f:a3:71:81:74:aa:9f:c2:40:a9:c9:3f:14:d9:3e:
f8:f8:9f:e1:59:8e:bb:ad:93:9c:0a:33:fb:88:92:
66:42:0a:b0:02:e5:f4:95:9e:37:f2:8b:a7:0e:91:
79:8a:91:14:5e:26:0a:d7:71:41:67:89:97:da:71:
c3:1c:61:f1:bb:d9:8f:f0:5c:83:7a:45:99:a6:cd:
4b:a5:32:31:7e:eb:b7:c2:b0:bb:cd:b8:11:49:e4:
e2:7d:00:17:3c:b9:7b:4a:ee:85:93:61:ed:15:3f:
c6:f4:da:86:ec:c0:da:51:85:ea:c8:bd:52:2f:8b:
1f:e0:ef:11:c2:96:42:e6:aa:db:2d:e6:c9:05:d3:
f5:f4:88:7b:a1:b9:94:13:24:5c:3b:f8:eb:63:e4:
66:8b:6c:ed:e1:8e:d6:fc:b1:df:98:23:b6:97:f2:
5b:91:89:03:93:2d:9f:73:fc:1f:6f:a9:cd:f0:b3:
39:2b:8a:4d:55:16:b7:58:67:55:cc:eb:02:26:db:
3e:79:ec:bd:08:cf:ad:af:ee:91:95:39:64:bf:d0:
e2:d6:83:68:62:f3:7c:b1:b3:41:6a:ed:f7:9c:fd:
ea:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C0:44:7F:61:02:11:E0:1E:A6:22:89:3E:52:2B:61:44:AE:F6:28
X509v3 Authority Key Identifier:
keyid:60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:72:7b:b0:50:ae:c8:3f:1f:e9:1f:03:3d:76:ab:76:5a:fd:
1f:62:26:b8:25:21:8f:8a:56:77:9b:ad:13:b2:0c:bf:59:e3:
b9:c6:da:76:9f:ee:2f:00:f3:fb:d3:3f:09:1d:1d:16:7f:cd:
a8:5a:12:a6:1b:8a:62:81:a2:34:0c:0e:0c:9b:f8:34:f5:c0:
6a:95:d4:67:21:bb:49:f4:0c:06:e8:a6:9a:d5:c0:c2:ac:b5:
31:1d:1c:9e:40:b3:c3:cd:f2:2c:6d:8c:72:69:8c:cb:39:c8:
33:2b:b6:b7:00:0e:fd:c0:67:be:e3:25:4f:60:e9:0c:71:26:
d0:60:c9:f0:ab:ec:cd:a2:0a:0b:8e:54:d6:da:41:e2:8e:e8:
35:4a:8d:63:3c:01:fb:65:1b:50:0a:a8:07:aa:df:bd:2c:1e:
f8:01:ba:e5:77:b0:08:29:f2:f9:c9:43:aa:6f:3d:05:2d:8a:
ab:8f:45:7b:6d:ce:8b:35:ee:62:3e:70:23:49:18:75:14:c7:
b1:d6:17:bc:15:b2:46:f1:00:a5:f6:c0:80:6b:03:50:00:03:
fc:22:27:c3:01:25:b5:d7:d3:bf:bf:66:f6:e7:37:2b:ea:bf:
f3:ce:26:9c:29:d0:0b:de:2f:d6:56:ec:79:f4:50:5e:12:74:
e1:0b:3a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:12:53 2025 by rpki-client