Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
File: YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft (raw, json)
Hash identifier: RVb+Bobtg8uwrJxlteOqhkTuxg/Zy7+kQ7wHz+g3JoI=
Subject key identifier: 23:7C:26:15:A7:22:0D:54:43:DB:B0:C0:FA:D5:48:C9:4D:C3:04:2A
Authority key identifier: 60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
Certificate issuer: /CN=607548c37abebc58b928ed285433d69e95df9c3b
Certificate serial: 01976FD0CBB1C201A8A86331CA2C006AE6CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
Manifest number: 0956
Signing time: Sat 14 Jun 2025 19:00:43 +0000
Manifest this update: Sat 14 Jun 2025 19:00:43 +0000
Manifest next update: Sun 15 Jun 2025 19:00:43 +0000
Files and hashes: 1: GvnG-mS30kZsC0VMkjG-9H9bKNc.roa (hash: fCMqeP5mwLekpgJxD7sr/iDT7Y2EP3bkaxbq5G7CFnk=)
2: TmI7Mg0osOv9bcSkbnpna9M6d0g.roa (hash: 1lYpqMce8T6tJ64vHbX2gN5OdLdLTb07QCcWuKyM15g=)
3: YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl (hash: BsSPhocKfC/l/jmzvGM+Z6hMNkUh38Z6aQi7mVXMVBU=)
4: rDRUKkzZmI7yjCKpqiCtK-fUy7Q.roa (hash: uAeF6E4mouy6Lmf4flTkP1sxauS/RBJXZig4r2f6XkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:cb:b1:c2:01:a8:a8:63:31:ca:2c:00:6a:e6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607548c37abebc58b928ed285433d69e95df9c3b
Validity
Not Before: Jun 14 19:00:43 2025 GMT
Not After : Jun 15 19:00:43 2025 GMT
Subject: CN=237c2615a7220d5443dbb0c0fad548c94dc3042a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a6:42:bb:c4:43:0d:3b:c5:84:ca:61:95:42:
49:25:4e:a6:51:a8:67:0a:45:2f:78:54:8d:ad:66:
81:34:ad:fc:f3:bc:5a:73:a1:aa:9e:04:4f:1c:db:
d0:f7:11:a7:57:42:c1:34:04:1b:de:b3:79:0f:78:
3b:e1:14:a2:d3:1d:60:8a:be:1f:49:eb:5e:f2:9d:
4b:ee:8b:5d:5e:e5:cf:1c:c5:71:61:90:9b:2e:e0:
9c:18:19:b7:6c:ad:2a:c3:65:46:a0:e9:d8:f9:66:
e4:5e:db:20:82:16:ac:9d:d1:8d:c1:20:ce:e3:6d:
21:26:f6:a7:1c:25:66:f3:a2:d1:5a:61:03:c8:b3:
f0:74:cc:6b:c1:0b:9f:fc:c8:4e:48:3c:aa:15:45:
3b:cc:b3:2a:fe:81:5d:bc:a4:ea:9e:3a:34:e3:45:
4a:c5:89:2d:38:3b:33:db:e3:87:54:e7:cd:7d:42:
ca:92:fd:8e:78:c6:42:27:3e:6b:d0:ec:96:ad:01:
ed:fe:06:37:ab:11:c5:2c:eb:50:28:53:bd:b1:6c:
f9:fc:e3:2f:99:fb:d1:93:9a:27:19:3e:1d:41:80:
52:5a:be:65:d7:b6:5b:9f:7b:1f:b8:09:34:a6:4d:
cd:0e:59:e6:e4:be:ec:54:c6:82:6a:90:00:b1:cb:
1b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7C:26:15:A7:22:0D:54:43:DB:B0:C0:FA:D5:48:C9:4D:C3:04:2A
X509v3 Authority Key Identifier:
keyid:60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:24:19:c9:63:31:e4:ee:c0:4b:be:fa:d5:dc:06:40:18:df:
14:3a:b6:7b:6a:01:e0:95:91:8c:81:92:fd:cc:22:ae:a4:e9:
f8:16:e4:37:1e:db:ad:a7:e8:84:22:9d:ce:c6:ef:a3:cf:90:
de:f3:4a:75:61:2b:ff:6f:56:d9:3f:03:8f:00:31:59:ee:b0:
be:d1:79:cd:86:b8:b1:61:f9:a1:51:2c:9a:76:cd:1c:4e:ed:
c1:76:79:25:93:dd:0e:f1:79:b1:9d:73:8b:e4:fe:76:86:3d:
69:f3:38:b8:79:5f:7c:69:0a:79:b5:d3:63:d4:38:18:99:62:
d5:7d:12:88:e5:db:2f:62:ff:9e:75:9d:c1:e1:b2:f6:ae:16:
81:73:14:85:65:51:15:d7:a9:4e:3b:3f:82:30:6d:80:98:cd:
12:64:2c:6b:e9:0f:0f:fb:c7:c6:01:a3:99:af:65:c6:d9:5c:
36:df:d2:ca:f7:cd:d9:18:26:a3:73:dc:07:e7:cc:2e:4b:c0:
96:21:32:43:6d:fa:45:d4:9c:97:fe:de:cc:94:6a:79:69:c3:
bb:9f:63:54:bf:d9:a1:ce:f6:60:cc:5e:df:51:7b:81:07:b5:
cb:69:a2:5b:db:ec:a9:d1:2c:c2:0b:99:37:36:34:b3:78:0f:
31:6d:ca:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:02:20 2025 by rpki-client