Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
File: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft (raw, json)
Hash identifier: j5OJrfLvXsoOI78o3YOiioOZxoL04/mmUnlvF1ob+LQ=
Subject key identifier: BA:EC:C5:B3:A9:D5:84:92:54:D9:83:BA:2F:20:06:8C:7E:F9:99:0F
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Certificate issuer: /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial: 0197684DE10744E49EF3DD79DE8D6FD73D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
Manifest number: 0D88
Signing time: Fri 13 Jun 2025 08:00:23 +0000
Manifest this update: Fri 13 Jun 2025 08:00:23 +0000
Manifest next update: Sat 14 Jun 2025 08:00:23 +0000
Files and hashes: 1: CNe8Ce9LX6bIFoae7IEYInIJvX8.roa (hash: vAks/DifGuIDg8MpuhTecKF4JO7GCicanpj2dhKngMI=)
2: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl (hash: l7QGcj58osYJYP6D2MwMnfV4kMWi+6TbiqGbi+Stvck=)
3: nXfzcpDMArjxgb2F7qR75SrYmPY.roa (hash: 50wVvlHYuRdw/re5wFDGWVBuuEfzzC0RRb8vEvTcySU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4d:e1:07:44:e4:9e:f3:dd:79:de:8d:6f:d7:3d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Validity
Not Before: Jun 13 08:00:23 2025 GMT
Not After : Jun 14 08:00:23 2025 GMT
Subject: CN=baecc5b3a9d5849254d983ba2f20068c7ef9990f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:da:b4:b4:ee:aa:72:4c:2c:9c:16:0f:07:1d:
d4:35:46:72:a4:e9:f4:93:14:46:04:7c:d9:eb:66:
cb:7e:cb:84:f0:63:7d:56:9b:92:8f:45:8f:d1:b0:
52:6d:67:b2:83:30:d8:e3:69:9b:4b:1a:2c:b1:77:
61:d8:0b:ca:bc:b4:df:60:35:63:2f:8e:62:9f:1e:
44:65:be:5a:21:34:bd:de:0b:8a:e2:ed:a5:ed:ae:
7a:ed:6c:f1:03:c8:66:0d:50:ac:e9:05:25:9a:ed:
e8:bd:74:c9:08:65:af:97:c4:3b:48:89:c7:1d:12:
d6:84:af:a3:ce:50:85:e4:5f:4c:a6:44:d4:b9:43:
04:ff:b6:91:12:49:0d:be:21:e5:53:be:3b:c7:14:
e2:a7:56:0b:6c:cd:00:47:d4:ae:5b:3f:0b:a2:1a:
24:bf:cd:8d:80:9c:97:86:c3:52:5a:e5:5d:f2:59:
dc:29:8d:88:b8:3d:de:b2:33:5b:2d:70:6c:a7:92:
d6:52:83:b1:fb:09:ed:0c:ab:3a:c2:42:9e:08:a3:
45:a9:ba:b7:3a:90:a4:af:5c:d1:41:0d:2b:d3:de:
65:f1:c1:52:39:df:bf:c3:bf:be:9d:6f:d1:de:0e:
55:ad:ea:34:95:5e:0b:f7:1a:8b:b6:a1:99:63:fb:
6b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EC:C5:B3:A9:D5:84:92:54:D9:83:BA:2F:20:06:8C:7E:F9:99:0F
X509v3 Authority Key Identifier:
keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:64:ca:f3:b9:1d:d0:2f:a2:0b:11:bb:16:a3:f4:48:d7:46:
03:c1:6b:76:ad:e0:5d:3a:41:9b:e8:65:d9:8a:37:91:1e:64:
6b:45:ef:af:55:4a:0f:45:37:c1:ca:96:a5:51:3f:4b:ec:42:
48:19:a4:3a:5e:55:90:8b:a6:c2:a0:fc:79:c0:66:19:37:0f:
ec:0e:a3:c0:dc:c9:28:77:98:55:f0:d2:e4:9a:cb:bf:fd:2c:
30:95:b6:f9:51:5e:17:63:73:44:98:35:da:a3:4b:50:2b:3d:
84:ca:57:e9:a4:5f:62:d5:5a:06:c7:ac:3d:e7:d8:75:37:d4:
77:5a:7c:86:9a:06:b6:6e:63:c4:d7:38:99:d6:fd:6c:be:fa:
a7:1c:96:0c:45:1f:4b:c4:1a:24:69:d8:b1:a2:49:c5:02:d7:
b9:91:ee:ce:8a:62:f9:cb:9f:67:ea:ef:8c:9d:6c:c5:88:69:
c7:b7:3c:b2:d4:b3:d6:b4:f7:16:5a:7d:65:f7:f7:db:94:d9:
96:95:78:15:02:4c:46:8a:a3:f6:81:74:51:cd:eb:8b:d3:85:
cf:ef:31:69:ac:57:79:eb:bb:94:b8:b8:55:79:b9:3f:44:bd:
75:4d:fc:79:27:b3:30:20:00:cc:73:4a:30:79:31:6d:97:e7:
9a:a1:f2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:55:37 2025 by rpki-client