Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
File: YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft (raw, json)
Hash identifier: Ey8oYqvZGudWr+kx8Dsjr3TcRrRgvr91Y3HA6B1A3SE=
Subject key identifier: EB:17:EE:E5:DE:F9:D0:F0:BB:22:BB:99:F3:15:BA:3B:FF:B6:16:92
Authority key identifier: 61:34:08:18:A8:63:39:08:CF:37:EA:14:5D:66:D9:24:52:FB:73:AA
Certificate issuer: /CN=61340818a8633908cf37ea145d66d92452fb73aa
Certificate serial: 01976C2ADCFE6A86E23983A55DECE946C77E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
Manifest number: 09F0
Signing time: Sat 14 Jun 2025 02:00:37 +0000
Manifest this update: Sat 14 Jun 2025 02:00:37 +0000
Manifest next update: Sun 15 Jun 2025 02:00:37 +0000
Files and hashes: 1: YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl (hash: UZCiw6znHGQtAtbpdsGK1q44y/IIIEU6itbZyPsfbQk=)
2: jYlgI_qcApYE3RAZAnK4EbiyzdM.roa (hash: xXRxHK1q9xpKOQP7dBVRrylt76oRLGOFXjW/2uY1+iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:dc:fe:6a:86:e2:39:83:a5:5d:ec:e9:46:c7:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61340818a8633908cf37ea145d66d92452fb73aa
Validity
Not Before: Jun 14 02:00:37 2025 GMT
Not After : Jun 15 02:00:37 2025 GMT
Subject: CN=eb17eee5def9d0f0bb22bb99f315ba3bffb61692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:72:83:8d:fa:65:b1:c6:50:78:4d:80:9f:f0:
45:c6:52:df:3f:bb:17:26:5d:73:38:80:95:b6:14:
01:0e:39:d6:f2:2b:0d:dc:9f:be:8e:e4:63:c7:9c:
7d:18:fe:0b:c9:cd:d5:98:03:22:5c:c0:bb:b5:53:
f6:1d:9e:90:f5:3e:03:49:3c:8f:fd:7b:ed:46:f7:
1c:b9:d5:ad:d9:a2:2c:67:c3:db:fc:c2:74:ce:79:
b0:48:b4:e2:62:24:a2:f8:5b:be:f9:06:f9:6a:96:
3d:a0:14:eb:0e:14:b8:97:6c:79:e5:9e:a2:26:8b:
b4:bf:dc:a7:5e:63:3a:ae:6c:a7:48:0d:6c:c1:0c:
78:ac:6c:19:3f:0d:62:f2:c6:1b:88:bf:09:3c:fc:
51:45:6d:ba:52:cd:f7:62:d2:19:6e:f5:d0:f2:08:
db:3e:2a:86:87:35:bb:8b:5e:d2:38:ce:ed:04:ce:
cd:58:1d:88:2f:c0:11:df:fa:b0:88:9a:a5:db:e3:
de:38:80:3d:fc:2c:d6:25:03:01:ed:42:3b:be:09:
7b:3a:bd:10:34:40:bf:ad:30:3d:1c:5f:0c:f0:32:
53:9d:60:b3:d9:75:c8:ef:44:3f:85:cb:2e:dc:a0:
af:24:99:ba:0c:2d:08:49:25:aa:2a:bc:1c:f6:ca:
90:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:17:EE:E5:DE:F9:D0:F0:BB:22:BB:99:F3:15:BA:3B:FF:B6:16:92
X509v3 Authority Key Identifier:
keyid:61:34:08:18:A8:63:39:08:CF:37:EA:14:5D:66:D9:24:52:FB:73:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:3d:34:c1:52:46:0e:08:97:52:f6:2f:81:6a:10:94:7d:e9:
19:b2:9b:77:a7:09:f5:7d:ff:c0:c1:e7:cc:08:44:37:34:21:
22:64:fc:71:ab:4d:3c:b0:ff:d5:65:69:6b:11:f7:58:42:1c:
55:4d:d2:97:a9:a0:e8:4b:ec:85:a1:25:d8:a9:d7:82:8b:c2:
dd:c3:ab:a2:5b:32:7b:22:16:3e:e5:e3:1d:5d:6c:dd:d0:ca:
1a:5d:0b:1e:c2:9f:d0:16:03:0a:cb:5d:15:52:77:d8:b0:28:
04:30:a7:8e:1e:fa:29:eb:3a:bc:c1:1c:71:cd:83:8b:a7:86:
22:3c:37:83:df:cb:93:60:be:cb:9d:5d:b8:7c:66:67:0d:6a:
dd:43:c8:56:f0:05:e0:bc:5b:db:be:17:3a:0b:75:ee:89:38:
61:eb:ae:af:31:4e:2b:94:aa:37:9e:81:f8:cf:e0:e2:c6:9f:
a1:b5:0f:fb:08:07:23:45:1b:b8:09:81:80:03:60:20:c7:ff:
f7:64:d1:b7:ea:fb:61:66:ea:ac:95:a8:79:85:49:9e:9c:36:
65:16:08:cf:0e:37:8b:be:90:d7:79:39:0d:18:dc:1b:8d:30:
4f:ff:0a:e5:42:51:96:fb:f6:17:d8:a6:4b:65:58:c2:2d:73:
c1:c5:57:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:48:20 2025 by rpki-client