Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
File: YKhR1ZNWypXUrnj6aTa6G4orHHo.mft (raw, json)
Hash identifier: bzSdpKfIMJNIA75KRyEs/HtQ7tanrXurodQMG68ZNpk=
Subject key identifier: FF:07:1B:07:50:FE:E4:8F:65:26:5F:7F:9C:F4:C2:6F:9D:61:A0:D0
Authority key identifier: 60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
Certificate issuer: /CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Certificate serial: 01976BBD7AB79B9045368F49A2850EE006FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 00:01:09 +0000
Manifest this update: Sat 14 Jun 2025 00:01:09 +0000
Manifest next update: Sun 15 Jun 2025 00:01:09 +0000
Files and hashes: 1: IbhrSRL4bnUd7cnSOKRsJzgkJxM.roa (hash: b/cViJlJxKUPbwFvpzqTCCVlNXv5JOZkWmVOeYB/zSc=)
2: YKhR1ZNWypXUrnj6aTa6G4orHHo.crl (hash: 2r2ali+Vnim3wWCJsbQnY8gQx0z5bYZ34O7AAiy6IGc=)
3: t987O0pDHzvcsP9c7cARqX9qeU4.roa (hash: hXKjhjrksvE7FwT6RC0bILWOybHNXPXiwbfxF18ramw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:7a:b7:9b:90:45:36:8f:49:a2:85:0e:e0:06:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Validity
Not Before: Jun 14 00:01:09 2025 GMT
Not After : Jun 15 00:01:09 2025 GMT
Subject: CN=ff071b0750fee48f65265f7f9cf4c26f9d61a0d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b0:1a:56:8d:f8:bb:db:24:18:b2:b0:d5:5a:
e1:1c:09:de:18:d5:cd:9b:9e:e4:0e:ef:d7:4e:4d:
f4:d8:71:6d:a2:7c:13:2e:d5:17:78:f7:c7:37:91:
9f:86:ac:80:c9:4d:22:a9:21:7c:45:0f:88:dc:47:
d9:1d:ce:64:ad:86:d8:90:45:e8:5e:0a:18:33:45:
20:e2:3f:54:f3:0f:53:9b:a9:5c:21:5c:2c:5d:47:
fb:55:7f:0c:83:7e:00:cf:ad:c4:c3:f3:7d:d6:be:
2f:b9:af:c0:b1:e1:c8:28:bb:7c:ab:22:a7:5b:c8:
ee:9b:20:88:db:45:c1:18:d5:48:61:d4:6a:2c:cc:
08:61:ba:78:6e:d7:e6:fd:f2:b9:d5:6d:78:3a:1d:
e3:6d:0c:e3:5a:a3:09:ee:7d:56:7f:95:22:af:48:
5f:3e:0a:1d:28:b3:38:eb:47:0d:3a:c4:ad:36:6f:
73:f0:0f:df:c2:5b:55:95:ab:6a:cc:73:38:33:a8:
82:b3:15:0b:3e:66:e3:07:77:55:d0:ac:58:4b:2f:
90:a9:c4:3e:a2:b2:f0:ec:bf:da:db:f0:30:2d:ff:
76:67:5f:81:29:41:11:ed:20:76:b0:83:33:7d:c7:
64:e2:ff:46:f9:77:ed:bf:2e:8b:14:73:9e:ac:07:
d1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:07:1B:07:50:FE:E4:8F:65:26:5F:7F:9C:F4:C2:6F:9D:61:A0:D0
X509v3 Authority Key Identifier:
keyid:60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ad:2f:b5:cf:14:64:d2:90:59:78:6c:1f:13:9f:c1:a4:a8:
14:f7:8e:f2:7e:4a:8d:1a:01:d6:0f:d8:20:e7:d3:dc:bd:fb:
60:75:84:8b:a9:b2:31:43:66:68:09:b4:30:73:88:45:bd:ff:
7c:ab:63:db:cc:fd:6d:28:87:7c:9e:6f:dc:52:d6:3e:4d:c6:
e4:80:50:b3:51:a3:72:4a:85:6d:f2:58:00:ac:3c:92:04:38:
f6:11:3e:08:1a:d1:98:81:87:66:3a:2e:10:53:40:43:05:17:
5c:a3:20:b7:12:b7:12:95:4b:aa:b5:99:90:5f:2b:eb:fd:b0:
3c:45:b9:47:bb:ab:ea:18:e3:14:31:8a:0b:63:0e:12:6f:bc:
11:b4:3f:18:cd:c6:50:a5:26:63:e6:a3:f4:e3:94:46:1b:04:
44:c0:23:1a:1d:7c:45:56:e7:39:42:43:54:75:a7:b4:3f:19:
c2:f6:32:eb:14:8e:f4:a9:8f:5b:03:32:22:67:bc:80:7b:de:
09:b7:90:d7:ba:37:92:f6:9d:ff:52:4c:e4:77:f6:e7:9d:03:
90:aa:18:9d:b2:f7:2e:19:bc:39:dd:0e:4e:22:f6:29:f8:e1:
0a:16:54:aa:9a:fd:8f:c7:05:5d:65:0b:d4:fd:f7:6b:1c:e8:
23:df:be:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:27:00 2025 by rpki-client