Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
File: YH4TV4xoDumP2q0gI3DxDjwoKvw.mft (raw, json)
Hash identifier: 9pbWlFgVEPsQgLb5SogihujtzsbXXolZ4BqclI9ZtcI=
Subject key identifier: 5D:C7:74:CC:A3:82:D0:82:37:B9:C4:DD:62:41:AE:77:A1:98:80:C6
Authority key identifier: 60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC
Certificate issuer: /CN=607e13578c680ee98fdaad202370f10e3c282afc
Certificate serial: 0197733FB06B423EFAD7F05987088862CA7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
Manifest number: 0E7A
Signing time: Sun 15 Jun 2025 11:00:43 +0000
Manifest this update: Sun 15 Jun 2025 11:00:43 +0000
Manifest next update: Mon 16 Jun 2025 11:00:43 +0000
Files and hashes: 1: YH4TV4xoDumP2q0gI3DxDjwoKvw.crl (hash: 7ud+A491XizHK1P3+jRw0jlCzghXVqYvPfH8aL+X51g=)
2: wjF-boaSBdJpFX21HtXG9GjSpyA.roa (hash: AbHr9ss+TI1KskPrNJWukMpmmelIuYFTcEXRCT6a0es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:3f:b0:6b:42:3e:fa:d7:f0:59:87:08:88:62:ca:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607e13578c680ee98fdaad202370f10e3c282afc
Validity
Not Before: Jun 15 11:00:43 2025 GMT
Not After : Jun 16 11:00:43 2025 GMT
Subject: CN=5dc774cca382d08237b9c4dd6241ae77a19880c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:fa:3a:cf:e1:22:18:da:91:1f:f6:67:98:
5c:9c:f0:c4:26:a1:dd:5e:33:a2:fe:01:65:c1:55:
20:1a:6f:ef:ad:4e:81:73:b4:5e:89:5d:f9:e1:fc:
5d:f6:0c:67:97:6b:ce:13:b5:7a:b6:a5:52:34:c2:
7b:4e:3e:c5:b3:ec:cd:c5:05:cf:08:68:82:59:1d:
d5:ee:ea:a4:75:9b:93:25:3f:47:58:19:cc:da:ce:
eb:1d:1e:84:52:d2:31:0f:97:b7:a2:e4:ce:15:ee:
da:4c:20:1a:27:d6:6d:8e:a1:c2:32:34:08:46:8f:
f7:38:2e:01:97:6f:21:0a:e0:ae:f4:f6:34:96:7d:
2f:a6:a8:d5:97:92:38:12:c4:d7:5a:9d:70:15:28:
1f:87:8a:52:8e:46:60:3d:f0:c4:1c:2f:38:c0:a1:
f7:29:65:8b:8a:54:a0:36:b0:cf:93:d4:78:6a:17:
5a:b3:cb:73:6d:f4:82:58:1e:ef:83:f1:16:22:16:
35:a9:23:d6:57:e1:e1:35:da:ad:01:90:9e:6b:3b:
4f:81:f6:eb:e6:90:7c:1c:b6:b2:4f:5d:6b:93:7e:
4b:62:4e:df:e5:b8:30:38:ed:97:4c:79:c3:e1:dd:
a1:36:e5:db:63:a4:ca:9e:31:d2:f2:c7:75:17:91:
d8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C7:74:CC:A3:82:D0:82:37:B9:C4:DD:62:41:AE:77:A1:98:80:C6
X509v3 Authority Key Identifier:
keyid:60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0f:be:7b:3e:10:88:80:e1:0d:7b:ef:49:8d:ff:65:99:ab:
72:fd:87:66:28:11:61:13:a1:dd:5f:a8:61:60:bc:bc:95:ea:
93:b3:8f:c8:1b:3c:1a:ba:23:94:21:aa:60:b9:85:51:6b:65:
cc:36:f2:16:27:e7:dd:14:b0:e0:4f:9c:a5:43:08:10:44:1f:
4a:43:aa:82:72:ab:77:85:0b:22:1b:5f:32:31:d1:67:18:0e:
ec:0b:e5:f8:61:7a:ef:25:ed:04:f4:ff:d4:21:30:82:85:60:
c1:49:db:46:85:e1:e2:09:9a:86:1f:86:06:ee:b7:da:9d:f3:
40:9d:e9:8b:10:40:c9:b4:14:a6:f7:4b:b0:11:fc:65:c4:12:
ce:42:11:6a:36:46:47:0d:25:d5:8d:51:e1:ed:f7:c0:fd:0a:
17:00:11:2a:c9:dc:f6:67:00:04:ce:54:ca:64:db:72:8d:18:
c4:46:73:75:2b:5a:89:d3:00:47:4c:b6:99:f9:a0:f3:8f:14:
66:d6:27:8b:b3:7f:fe:25:f1:38:d7:f7:88:16:1f:85:72:0b:
67:a9:7a:39:5a:9d:92:e3:de:63:95:6c:f7:1c:c2:12:b0:89:
c9:5b:e1:25:92:c7:e6:02:5e:5c:ce:08:de:52:f6:02:9e:e8:
e3:15:94:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:59:30 2025 by rpki-client