Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/YTe126q6KK4oyOmpeA-3DCT8kZA.mft
File: YTe126q6KK4oyOmpeA-3DCT8kZA.mft (raw, json)
Hash identifier: vAA+g4Z5kN2GG3uKZqr9ROnGe3vgLHSEWpKOmDMXvrQ=
Subject key identifier: 87:9F:25:FD:07:50:EF:3D:AD:B2:44:AC:F4:33:53:EA:72:F9:A9:CC
Authority key identifier: 61:37:B5:DB:AA:BA:28:AE:28:C8:E9:A9:78:0F:B7:0C:24:FC:91:90
Certificate issuer: /CN=6137b5dbaaba28ae28c8e9a9780fb70c24fc9190
Certificate serial: 01976C98A5A2983A47526639FCE8639C0B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTe126q6KK4oyOmpeA-3DCT8kZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/YTe126q6KK4oyOmpeA-3DCT8kZA.mft
Manifest number: 0BBF
Signing time: Sat 14 Jun 2025 04:00:32 +0000
Manifest this update: Sat 14 Jun 2025 04:00:32 +0000
Manifest next update: Sun 15 Jun 2025 04:00:32 +0000
Files and hashes: 1: YTe126q6KK4oyOmpeA-3DCT8kZA.crl (hash: t/iXxvpglnW4PgrFffc2PPfiq8gmAVDRdv9snpDwmYA=)
2: y77UWpMS4DRW9Z6BffFmy0sfx48.roa (hash: KSiUNsa6U/vvFkusIhQZvpAT5eNjje7RZN6spA/c4iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/YTe126q6KK4oyOmpeA-3DCT8kZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/YTe126q6KK4oyOmpeA-3DCT8kZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTe126q6KK4oyOmpeA-3DCT8kZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:a5:a2:98:3a:47:52:66:39:fc:e8:63:9c:0b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6137b5dbaaba28ae28c8e9a9780fb70c24fc9190
Validity
Not Before: Jun 14 04:00:32 2025 GMT
Not After : Jun 15 04:00:32 2025 GMT
Subject: CN=879f25fd0750ef3dadb244acf43353ea72f9a9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:60:bc:4a:c6:04:e9:78:5e:cb:cd:29:7e:a8:
da:05:ab:8a:8a:bf:bd:63:08:5c:c3:1e:50:52:c2:
b5:20:84:8d:9a:82:21:d1:44:0b:f9:a5:cf:21:d3:
2d:7f:b9:4f:9d:fc:95:da:d9:62:c1:00:f0:7f:71:
c4:5a:9c:ed:b4:f7:79:ad:e8:b5:70:2f:6c:0f:3f:
ee:51:6a:40:fa:71:df:ab:ca:4a:95:b9:ce:19:93:
10:01:75:32:dd:62:56:97:a0:1f:68:29:6c:91:d9:
89:9e:d4:27:1d:2f:cb:35:dc:ff:1e:5c:55:24:d4:
d0:61:4c:4f:88:82:87:11:ba:9f:c1:88:ad:a3:68:
a5:3f:cb:a0:12:cf:26:f7:14:75:6e:99:37:e5:d3:
30:aa:29:f8:f7:cc:9e:4b:82:57:2e:b6:9b:7a:12:
cb:20:fc:21:4a:10:af:a7:5a:4b:67:7a:23:5d:2d:
78:c8:31:ae:f7:30:93:11:59:d7:a4:6c:d4:e4:7a:
cd:86:ce:d4:14:2e:f6:ce:bb:df:e5:b1:39:f2:a0:
40:0e:1c:c2:70:87:99:72:58:e8:ef:23:74:f2:9c:
ff:07:d4:f4:b3:4f:d1:76:0e:7e:80:c1:33:d1:69:
2a:7c:79:4b:d7:14:f2:ae:b3:cd:56:a6:99:9d:a1:
80:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9F:25:FD:07:50:EF:3D:AD:B2:44:AC:F4:33:53:EA:72:F9:A9:CC
X509v3 Authority Key Identifier:
keyid:61:37:B5:DB:AA:BA:28:AE:28:C8:E9:A9:78:0F:B7:0C:24:FC:91:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTe126q6KK4oyOmpeA-3DCT8kZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/YTe126q6KK4oyOmpeA-3DCT8kZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/YTe126q6KK4oyOmpeA-3DCT8kZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:76:8f:29:2a:51:06:3d:e6:c4:b1:c7:ec:d1:33:04:78:b2:
d0:6b:1c:03:da:e5:32:42:c0:3b:05:52:21:9a:70:f1:d7:dd:
bd:bd:1e:d4:bd:02:c0:4f:28:e4:27:1d:17:64:09:8a:59:fe:
ef:e0:ae:eb:67:b7:7d:7d:c3:6d:ec:0c:85:7b:e4:3c:ee:e7:
af:a2:b2:ca:7a:c7:61:b6:5d:81:0c:2a:47:6d:2e:0f:53:91:
4b:df:25:eb:97:0c:de:78:8d:ed:10:26:3d:fd:88:a3:59:f3:
6c:d1:97:95:f5:c5:ed:d0:60:16:2d:29:7d:5f:2a:91:59:c1:
39:67:c9:15:39:1d:ae:4a:0c:a8:6d:fa:d1:88:6f:ce:dc:73:
09:01:b5:ae:fb:f2:e4:34:0c:e2:47:50:3a:72:a6:b4:f4:9a:
96:5c:71:4e:50:ac:ab:ac:80:67:f3:0a:e1:40:62:26:46:3d:
f1:48:8a:5b:bf:5b:9a:3e:68:83:0d:fa:05:0d:84:d8:5c:28:
fe:69:38:7a:e6:9c:0d:91:e9:1a:9f:ae:9e:d2:23:29:25:1d:
b9:24:c8:52:ed:6f:5f:7e:15:e4:ad:d9:65:d8:11:a8:7a:62:
34:c3:fa:2e:44:5d:20:bf:47:d2:77:e1:36:fa:cc:79:21:ef:
72:a6:d9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:01:07 2025 by rpki-client