Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
File: yjNIUNrzcSIFIBmSKevekO8osBg.mft (raw, json)
Hash identifier: PIzJqaJ+4ZonC0H9dqXEMsOTln9duqgxHO7wBGSCX9Q=
Subject key identifier: 92:F1:C3:21:02:42:3C:D6:A4:CE:09:A0:E2:5E:8D:60:0A:00:23:95
Authority key identifier: CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
Certificate issuer: /CN=ca334850daf371220520199229ebde90ef28b018
Certificate serial: 0197722D037A6A918AE337E8820946980A94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
Manifest number: 060E
Signing time: Sun 15 Jun 2025 06:00:41 +0000
Manifest this update: Sun 15 Jun 2025 06:00:41 +0000
Manifest next update: Mon 16 Jun 2025 06:00:41 +0000
Files and hashes: 1: 6eOqvZGDKFDuA6yXPPPze8WOsrA.roa (hash: ERZvSVqw/o5/S8YL0KRBFbpGBsSfCd4T3Hhjomrg6eY=)
2: yjNIUNrzcSIFIBmSKevekO8osBg.crl (hash: 8ET/hJ5QGsGmv+SiwiY8iKEqoPAgVW401rwZE8bbgVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2d:03:7a:6a:91:8a:e3:37:e8:82:09:46:98:0a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca334850daf371220520199229ebde90ef28b018
Validity
Not Before: Jun 15 06:00:41 2025 GMT
Not After : Jun 16 06:00:41 2025 GMT
Subject: CN=92f1c32102423cd6a4ce09a0e25e8d600a002395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:4b:df:03:a1:f2:3f:8c:97:9a:6d:bf:b5:
6c:8c:d6:e1:b8:a8:e9:99:d5:30:d2:fa:e3:cd:2a:
bc:4e:33:bb:72:d9:37:cb:68:eb:38:7d:61:82:17:
ff:b6:75:22:d6:41:21:d9:44:94:ff:cd:a2:3b:d5:
29:5f:09:ed:6c:a4:53:5a:05:5e:36:ac:60:e5:25:
d1:6d:8d:e6:a8:35:23:d0:89:57:e1:d2:33:b5:da:
86:fe:e9:04:4a:5a:c0:cc:37:58:2b:99:59:0a:8c:
6a:40:99:de:57:14:36:30:cd:14:26:06:a8:65:19:
2f:b1:6e:26:f3:01:f9:64:bc:91:9c:29:60:d6:5d:
5c:02:30:dd:ff:b9:42:9a:54:1c:82:da:ae:0d:50:
1b:fe:87:58:1e:f0:5e:aa:d5:ec:09:96:20:a0:81:
92:ad:36:07:ec:dd:00:05:83:98:ba:db:a9:64:28:
b5:5a:99:42:7a:83:ca:4e:44:f4:04:29:4c:4d:67:
03:82:8c:18:60:06:1f:f1:74:68:07:91:70:5e:89:
5c:ee:a6:d2:f1:37:bb:42:d3:d9:bc:16:0e:fd:d1:
13:ce:74:9c:b0:fd:97:3f:ba:78:9e:67:f8:9f:4a:
e2:13:4e:56:70:9e:44:27:bb:e4:4d:d6:f3:c0:d7:
48:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F1:C3:21:02:42:3C:D6:A4:CE:09:A0:E2:5E:8D:60:0A:00:23:95
X509v3 Authority Key Identifier:
keyid:CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:53:5a:a3:98:c0:e1:ee:c7:bf:dd:33:1b:93:97:bc:cc:be:
01:33:ce:ee:90:df:9f:af:e8:eb:b0:25:b9:ac:ef:30:cb:38:
78:de:9d:51:dd:05:5c:e4:16:84:7d:a9:bb:da:12:8b:00:c8:
3b:37:7d:dc:d5:07:7b:22:b6:1e:b8:6a:32:be:f7:d8:b6:02:
81:2c:56:0f:ef:da:de:8e:33:13:69:9b:7c:52:c1:43:f3:d5:
df:97:24:0c:3d:74:d9:ab:3e:90:a7:62:4e:d4:9a:72:51:fa:
9b:92:f7:5e:5a:e7:6e:85:d1:89:b4:b4:14:7d:ac:a3:6f:80:
8e:98:24:c6:ad:a5:6d:1d:6f:15:06:47:70:f5:51:70:06:d6:
dc:a5:45:6f:a7:3f:4a:0f:8b:b1:e2:ae:fd:c1:42:64:f0:72:
da:bb:0c:a0:2e:6a:a2:b7:e3:43:2f:6a:8b:cd:97:7d:dd:b9:
82:43:50:02:29:e0:74:68:5d:8e:08:66:62:9f:c3:57:15:e0:
90:dd:fc:f4:80:4d:31:72:be:13:41:77:53:8b:a0:94:f3:c6:
e4:a4:7a:ee:46:dd:e5:ce:48:a5:f9:a9:9f:ae:2c:87:4a:aa:
6e:29:f8:96:1d:2f:a4:92:06:da:ad:28:54:d5:a6:19:6b:96:
60:de:0d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:01:15 2025 by rpki-client