Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
File: YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft (raw, json)
Hash identifier: XtP6A0IRFaMSmaPjCupJa9ky+kpkOnqX4cwNdkjygNI=
Subject key identifier: 6B:60:39:0A:C2:FA:52:E4:28:64:93:DB:A8:92:F3:6F:CE:0D:15:E5
Authority key identifier: 62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50
Certificate issuer: /CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350
Certificate serial: 01977B2FFE946752C55E890F8EB805959620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
Manifest number: 1594
Signing time: Tue 17 Jun 2025 00:00:32 +0000
Manifest this update: Tue 17 Jun 2025 00:00:32 +0000
Manifest next update: Wed 18 Jun 2025 00:00:32 +0000
Files and hashes: 1: Fd7jj4UgNX8KUEunLGyTOECk2zM.roa (hash: 4ykrgJNWkElQuXhdhPDtDMLnIYLOev4Sm6TYtDwClXU=)
2: YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl (hash: 8uPotrTiXIUEyd1+H120QpWDOJ1TD/wK+DffXEti9ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:2f:fe:94:67:52:c5:5e:89:0f:8e:b8:05:95:96:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350
Validity
Not Before: Jun 17 00:00:32 2025 GMT
Not After : Jun 18 00:00:32 2025 GMT
Subject: CN=6b60390ac2fa52e4286493dba892f36fce0d15e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:76:d0:e1:37:03:e1:82:e7:d6:8b:61:b3:19:
39:7c:81:50:08:96:f9:fd:2a:aa:88:f6:08:33:be:
88:8e:0b:05:ce:18:75:66:1f:45:5c:c4:52:d0:a9:
cd:2e:f2:9d:2e:fc:13:af:07:0f:26:6b:a3:c5:95:
da:5a:db:dd:71:b5:be:0f:6f:4b:47:cf:52:ec:2a:
96:f9:03:d7:8a:60:fd:39:77:f0:e7:97:ee:7e:20:
ef:f2:80:27:d0:a0:af:37:f3:80:7d:e2:5a:5b:2e:
a8:fb:f1:3d:4c:ad:71:94:2e:bb:c0:3e:f3:09:e8:
ca:ea:b5:3f:44:d5:5b:77:cb:82:08:1b:cf:c1:3b:
db:22:61:a9:29:b0:20:d0:06:00:08:c8:71:4d:75:
f2:ab:9a:f5:0f:6c:d2:d6:d6:06:19:ca:27:a0:5c:
31:52:8f:bc:81:33:05:40:03:49:ab:24:ae:9e:74:
7b:aa:69:08:e6:e3:2f:fa:09:6a:91:4e:69:b4:41:
fa:c0:58:c5:a5:34:e2:fa:36:5f:d3:b9:1b:3d:a3:
8d:9a:e0:4d:08:1f:14:e1:3d:7d:06:0a:c9:4c:88:
87:cd:00:3e:62:ad:0f:cf:b5:4b:d0:f3:da:2a:08:
da:88:e4:81:4a:ba:a2:32:3f:0e:59:44:ae:92:47:
1d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:60:39:0A:C2:FA:52:E4:28:64:93:DB:A8:92:F3:6F:CE:0D:15:E5
X509v3 Authority Key Identifier:
keyid:62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:57:ea:a9:fe:7f:2a:bd:b2:86:3e:93:dc:03:7d:13:e3:33:
a1:f0:cc:a8:15:b2:00:8c:cf:4f:01:8b:2b:92:4b:72:16:a5:
6a:63:2f:42:1f:d9:46:29:33:fe:29:f4:ac:f3:d3:2d:91:6b:
7a:bc:f5:bb:d4:96:5d:11:55:f7:9f:93:d4:a9:a5:d5:6b:40:
04:69:46:4b:35:7f:52:a5:b8:d2:9c:27:bf:a2:d6:9f:5b:38:
c2:d4:e1:c4:4a:0e:91:09:b5:db:b2:c9:e7:78:b2:76:b5:f8:
7c:f2:14:d0:82:99:ed:00:62:37:ea:2e:78:16:6b:24:0b:89:
eb:76:97:e2:0b:6f:f6:7e:8f:e5:f4:5b:08:c2:81:d1:42:06:
a2:7b:b2:66:ec:a6:db:4a:84:78:4f:4b:b7:52:48:14:bc:3b:
e1:cf:8a:1a:3b:45:27:5e:dc:da:93:9d:b1:08:bf:b8:6c:d6:
92:43:d0:26:9f:13:06:68:33:63:f6:9f:72:ae:56:65:65:ac:
76:e4:bb:dd:27:90:af:50:44:bb:b2:2b:28:49:3f:39:8f:08:
4a:97:5a:e5:95:d3:39:73:f9:1b:84:37:54:d4:55:60:51:1c:
31:31:c6:4e:7c:af:49:26:d7:50:55:96:d1:cd:82:ca:d4:91:
15:35:c1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:31:11 2025 by rpki-client