Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
File: YHzqbhA6IyXEjBZnqZx7F-s857Y.mft (raw, json)
Hash identifier: DUTXF1r2CPhk18zm6knU33O435xI0uy2xaOTTJv2c/Q=
Subject key identifier: 32:87:63:8D:2D:10:EC:73:82:7C:DF:2A:12:35:F8:73:CA:3A:D6:CA
Authority key identifier: 60:7C:EA:6E:10:3A:23:25:C4:8C:16:67:A9:9C:7B:17:EB:3C:E7:B6
Certificate issuer: /CN=607cea6e103a2325c48c1667a99c7b17eb3ce7b6
Certificate serial: 019768BC09283473C865E9AD98CFBCDA9168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
Manifest number: 12CA
Signing time: Fri 13 Jun 2025 10:00:42 +0000
Manifest this update: Fri 13 Jun 2025 10:00:42 +0000
Manifest next update: Sat 14 Jun 2025 10:00:42 +0000
Files and hashes: 1: 8tqsaUcyKZIIKG75KzikfFZDjvk.roa (hash: zktR6lve6abwwBFYbdtbK1pvyhA4oW0U5RIxFZXPtoI=)
2: YHzqbhA6IyXEjBZnqZx7F-s857Y.crl (hash: D3RldLgGLKM0H4JommZGIyMzf+QetsVA7wPB3xH7Utw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:09:28:34:73:c8:65:e9:ad:98:cf:bc:da:91:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607cea6e103a2325c48c1667a99c7b17eb3ce7b6
Validity
Not Before: Jun 13 10:00:42 2025 GMT
Not After : Jun 14 10:00:42 2025 GMT
Subject: CN=3287638d2d10ec73827cdf2a1235f873ca3ad6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f2:c7:ad:f3:9c:64:a0:bb:c2:0a:95:e3:0e:
82:5f:86:8b:b1:f6:f3:2a:84:31:f3:eb:ee:00:e1:
1f:54:87:48:d0:57:b1:73:fe:df:3b:8c:32:8f:7d:
b7:09:19:98:80:6e:76:45:11:39:a4:9e:b8:00:d9:
ab:1f:06:bb:f4:cc:db:83:3c:11:5b:e5:e7:17:fd:
23:a7:ff:7b:1a:43:15:68:85:a0:8c:02:4d:31:21:
70:45:ff:3d:0d:4b:d3:d3:e2:a4:3f:b3:7f:c9:2b:
34:5d:19:21:7c:e8:25:03:e8:b3:59:56:d3:2a:f8:
5d:83:f7:31:69:75:61:3d:dc:93:a2:d6:dd:aa:7e:
63:50:1c:a5:48:4f:c1:36:22:1d:67:88:f8:eb:85:
de:67:ca:a5:02:17:9b:3c:10:4f:c8:47:17:3f:c2:
96:53:2a:5d:3f:44:95:fa:21:63:39:9f:cf:8e:04:
9a:60:ff:20:a7:87:50:3b:f8:27:73:b4:ad:85:54:
b9:c4:e2:bf:a0:b4:79:a8:fe:0f:53:6e:4f:2a:8e:
3c:46:27:a5:73:38:5e:27:90:06:aa:e3:b9:4e:0a:
25:1e:52:2d:1f:ef:39:58:b9:d1:5e:d9:ab:a6:d3:
8d:a2:67:9b:ad:40:99:75:5a:76:85:dc:90:17:19:
41:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:87:63:8D:2D:10:EC:73:82:7C:DF:2A:12:35:F8:73:CA:3A:D6:CA
X509v3 Authority Key Identifier:
keyid:60:7C:EA:6E:10:3A:23:25:C4:8C:16:67:A9:9C:7B:17:EB:3C:E7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:20:4e:39:bf:cb:5c:c9:6a:28:e0:fa:f7:2d:86:12:a3:6c:
d6:b6:f9:73:92:52:ce:76:73:1b:ce:e5:ea:a5:11:47:f9:5b:
3c:f1:9a:32:b1:42:f4:bc:57:a1:2d:68:37:f4:a0:11:78:fb:
7a:2f:2d:ee:e4:45:2c:10:38:72:e7:c8:19:5e:bf:13:54:d5:
d9:37:4c:14:dd:79:f8:15:f6:bb:48:99:3d:e5:0f:fb:91:4b:
95:d3:1d:09:c3:52:6d:5f:46:7b:4c:71:d4:7a:44:fd:e7:23:
8a:49:a4:94:c2:06:e9:2b:b4:a2:11:bb:c8:33:aa:c8:b8:4a:
1b:81:ef:69:3e:38:17:cc:50:07:6e:a7:87:d2:90:b1:82:5b:
e7:b8:59:6b:ce:fe:ee:ce:25:a5:35:bd:6d:8c:13:69:25:19:
11:f2:52:3d:91:a7:47:db:03:f3:0f:39:90:2c:0a:be:e6:9d:
c4:c2:19:8d:4a:19:e6:3d:37:5b:c3:ec:14:16:95:c6:a7:b3:
d1:c9:bb:31:c0:23:c4:c1:cb:e7:73:47:f4:49:b4:14:ca:76:
a5:6d:ae:5a:dd:47:4f:aa:ac:f4:97:58:7c:13:d0:f1:c4:67:
8e:8e:74:89:5c:dd:10:6b:f7:4f:e3:ff:e4:0c:b0:da:9d:4e:
f4:45:67:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:28:25 2025 by rpki-client