Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
File: YL83NiAUbm8piugtLIqDccrLexs.mft (raw, json)
Hash identifier: E4vqj0np25SU1V+sekqhWk4dVPM2GYm8TVQUN2j1SY8=
Subject key identifier: AA:8A:F5:1D:A6:54:02:22:6F:1C:60:83:FD:35:92:AD:3C:C3:5A:CA
Authority key identifier: 60:BF:37:36:20:14:6E:6F:29:8A:E8:2D:2C:8A:83:71:CA:CB:7B:1B
Certificate issuer: /CN=60bf373620146e6f298ae82d2c8a8371cacb7b1b
Certificate serial: 019773092B0B572A97C0D50796125500AF05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
Manifest number: 1592
Signing time: Sun 15 Jun 2025 10:01:10 +0000
Manifest this update: Sun 15 Jun 2025 10:01:10 +0000
Manifest next update: Mon 16 Jun 2025 10:01:10 +0000
Files and hashes: 1: FcPpw1IibzSy4BenkulclpDum4U.roa (hash: HSUDUncC0CCpqaUKBhWSJTD0GmSsEAzCocsfF6H1tqA=)
2: YL83NiAUbm8piugtLIqDccrLexs.crl (hash: vsxFPzJGQtz4bGcuV6h6hmgWcpkaQO4MXZjKDEGftQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:09:2b:0b:57:2a:97:c0:d5:07:96:12:55:00:af:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60bf373620146e6f298ae82d2c8a8371cacb7b1b
Validity
Not Before: Jun 15 10:01:10 2025 GMT
Not After : Jun 16 10:01:10 2025 GMT
Subject: CN=aa8af51da65402226f1c6083fd3592ad3cc35aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:43:50:fd:ad:dc:31:50:d3:0d:c1:5f:b7:e4:
65:2b:ff:1a:81:93:6a:d3:ce:db:33:bc:66:9d:2c:
ce:27:a5:73:aa:24:50:83:73:54:f7:e5:f1:6a:94:
63:a1:4b:68:fe:39:65:f3:4d:bb:04:78:db:14:bf:
8a:eb:b2:59:26:ef:2e:b7:6d:79:d8:0a:95:75:df:
c1:af:f6:82:47:f6:2c:27:22:30:23:a2:e7:32:f8:
69:a6:5d:fc:72:4f:52:c7:a0:db:cb:c3:09:0a:31:
04:25:31:9a:6d:8d:16:94:d4:0f:da:2a:53:db:91:
76:4d:4b:98:67:fb:88:e6:6f:42:2f:33:11:66:76:
57:83:b2:c5:4b:c5:46:94:8a:ff:b1:29:19:89:72:
e6:ee:f9:10:bf:c0:6e:f1:31:25:3c:f0:ef:c9:fd:
23:b9:27:ed:91:dc:76:75:d2:0c:23:90:a5:c0:9f:
da:17:78:d8:2a:bd:f0:36:f2:27:6e:a9:2d:2e:45:
60:68:5e:df:39:58:ce:ab:b8:d3:0e:0b:ed:a4:c2:
95:03:81:ac:65:37:b5:1a:b2:83:41:28:e8:21:c7:
fe:cc:83:b2:e4:5f:eb:d2:93:40:88:fc:a1:d9:2e:
47:d0:c9:86:0a:3a:7c:68:14:bf:df:ea:8b:f5:fc:
7a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8A:F5:1D:A6:54:02:22:6F:1C:60:83:FD:35:92:AD:3C:C3:5A:CA
X509v3 Authority Key Identifier:
keyid:60:BF:37:36:20:14:6E:6F:29:8A:E8:2D:2C:8A:83:71:CA:CB:7B:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:98:e7:1f:a0:a3:86:fd:8b:2a:7b:ab:90:4d:b6:e2:64:c3:
43:85:73:72:d9:5d:cd:08:a3:ce:a8:14:1e:00:93:0e:bd:3d:
d6:c4:5d:3e:97:8f:6e:69:77:6c:be:99:15:8e:cb:19:88:f8:
2d:d2:94:f8:fe:15:05:a4:b1:63:c7:d9:68:b0:d5:ad:db:88:
39:26:d5:d5:ee:15:57:e9:3b:cd:d2:6d:99:56:1a:46:8a:be:
a7:90:7e:ad:8a:e6:5a:ca:cd:20:c9:63:40:8a:ab:0b:c4:bd:
ec:43:b8:8e:3c:04:b9:8c:d2:52:8b:07:89:7b:90:36:93:74:
c1:4c:84:2d:05:ad:ad:d9:33:03:59:c3:ca:11:20:8a:ed:73:
c5:82:d7:47:77:8a:dc:32:c7:a6:93:6c:52:75:4c:a7:5b:fb:
a6:fa:36:fe:8c:6e:e1:fd:a0:5e:ba:d5:d6:d2:89:a7:06:cd:
32:d2:3e:47:98:24:d4:6b:0f:37:44:2a:cd:f4:96:0b:f7:07:
8e:a5:e8:fb:b0:f9:2a:77:f4:f6:9e:2d:70:ab:89:12:87:b4:
43:20:66:c2:b8:30:23:51:fc:a4:45:37:6c:2d:c7:a6:0f:4a:
37:d5:32:fc:04:8d:18:d4:7c:bd:86:69:38:f2:aa:ff:27:36:
ac:94:3e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:31:34 2025 by rpki-client