Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
File: YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft (raw, json)
Hash identifier: wvu4agnfraQhcphP9VbntGOdcoQfdJ2P1OnYB9UXCgg=
Subject key identifier: EC:34:A8:78:23:E1:9E:49:7A:46:D4:D3:2B:22:AB:81:96:0D:38:00
Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25
Certificate serial: 01976F99A4BE0225C04E855C3256D6768F33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
Manifest number: 14BD
Signing time: Sat 14 Jun 2025 18:00:29 +0000
Manifest this update: Sat 14 Jun 2025 18:00:29 +0000
Manifest next update: Sun 15 Jun 2025 18:00:29 +0000
Files and hashes: 1: YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl (hash: Q4NA45lQDGq3bmt5QOSNZiqTi0LJHw/Gu4a+RpLbV3w=)
2: _wocLw8I_D0bWM_gydbHP3YBnWM.roa (hash: ipZCy+v8LxPOj8oL+HxTUZYzmJcHqr9rYLmV463tU+U=)
3: jP1IuFeYqRVYzU2ZxiYcMgwYBwo.roa (hash: 8tUnk9Rc0BoFNUvYX8+NZuDnDdmkv70Pafdtm7lPIM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:a4:be:02:25:c0:4e:85:5c:32:56:d6:76:8f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a14553cacf103274d433e6b268066e01541b25
Validity
Not Before: Jun 14 18:00:29 2025 GMT
Not After : Jun 15 18:00:29 2025 GMT
Subject: CN=ec34a87823e19e497a46d4d32b22ab81960d3800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c4:58:f9:c9:73:b3:b1:89:ae:9d:31:17:3e:
ea:d8:04:77:8a:46:96:83:0c:fb:cf:5c:4f:20:d0:
97:87:1a:89:e1:b8:2a:ee:32:72:3c:46:cc:36:98:
a5:16:4b:76:81:62:b6:bc:fe:79:ae:ba:0a:b6:17:
e2:d6:f2:9f:79:e6:42:46:30:cc:e4:3c:50:2d:46:
51:af:2e:f2:2c:33:ae:d7:10:b0:79:fc:7e:5b:2d:
b0:e1:eb:ba:15:b4:81:c6:39:b8:03:b2:1a:72:34:
bd:24:e4:a5:1c:ce:b3:4c:11:3c:f7:96:40:0b:0e:
fc:5e:9f:4e:9d:9a:41:31:a4:b2:4c:37:b4:fe:a3:
69:fd:ac:cc:ff:2d:5c:ea:6f:1e:55:d2:21:14:7f:
d4:e6:18:42:88:84:18:d5:d4:06:98:fa:89:17:7b:
2b:e3:98:2c:b5:28:85:bb:52:46:3e:2c:56:60:c8:
0b:b0:fd:98:5a:a8:b5:c7:7e:d2:43:a4:c4:90:79:
f6:0f:ba:d9:e9:15:81:c4:50:55:31:d3:10:99:5f:
b8:33:a1:f7:29:e3:8a:31:15:bc:b2:f7:ee:79:d4:
66:78:e8:c7:db:d9:7c:d5:d3:69:92:6d:10:13:70:
7b:91:51:85:ca:d3:ab:62:39:47:d1:d0:b6:94:bd:
b6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:34:A8:78:23:E1:9E:49:7A:46:D4:D3:2B:22:AB:81:96:0D:38:00
X509v3 Authority Key Identifier:
keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:43:6a:7d:83:db:28:71:00:b4:b0:b6:bc:01:26:eb:47:43:
bc:3e:03:38:a3:e8:04:c5:1e:4e:06:45:a2:f4:12:2f:ac:61:
83:37:8f:e2:b8:20:c6:61:07:18:5b:5d:4f:d1:f8:75:53:34:
1f:d1:d8:32:1f:e0:65:67:e5:08:6a:5a:6f:dc:81:84:f2:8b:
0a:cc:b0:b8:6e:fa:93:8a:12:96:06:26:79:38:0c:c3:23:d0:
54:ee:66:d0:59:ea:be:f3:db:71:a3:1e:e3:d4:cf:72:48:d7:
7e:f5:a4:ae:93:5b:1f:1c:01:61:fc:ee:0f:56:a0:20:81:25:
e0:f3:ef:5a:a1:8c:df:df:6b:45:84:db:ac:9f:f7:b5:3c:84:
86:fa:9c:84:8b:14:dc:c9:09:71:d0:07:f4:54:ad:ab:68:63:
1d:b6:b5:b7:04:ea:3f:c9:5b:9f:b1:51:46:69:7e:28:2e:87:
05:a3:ea:2b:34:9c:e0:c6:6a:80:63:41:d7:33:3b:63:81:9c:
88:8a:a9:e1:0d:47:6f:73:ab:41:e0:b2:9f:b1:b3:d1:c0:59:
79:7c:4c:4b:2e:96:e1:cc:69:06:bd:f2:35:83:6a:c2:6b:7f:
cf:ea:8c:0d:9d:60:40:3c:83:e4:81:2a:d2:8b:8d:8c:f6:c2:
f9:89:ac:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:46:50 2025 by rpki-client