Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.mft
File: YPclN-3x3At_aURTRQvKSu74P2Q.mft (raw, json)
Hash identifier: qjjcEiX+XdHLNkJNik6xsBv8gozlW22DmwmYuF74lNs=
Subject key identifier: 0B:0F:28:7B:28:3E:EB:8F:1C:BC:01:AC:74:95:65:8F:77:9B:BD:FB
Authority key identifier: 60:F7:25:37:ED:F1:DC:0B:7F:69:44:53:45:0B:CA:4A:EE:F8:3F:64
Certificate issuer: /CN=60f72537edf1dc0b7f694453450bca4aeef83f64
Certificate serial: 01977151540BDBF522ACC077A4CFCB8D5230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPclN-3x3At_aURTRQvKSu74P2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.mft
Manifest number: 0A21
Signing time: Sun 15 Jun 2025 02:00:44 +0000
Manifest this update: Sun 15 Jun 2025 02:00:44 +0000
Manifest next update: Mon 16 Jun 2025 02:00:44 +0000
Files and hashes: 1: 64MeW97pL92-_QUPEgapyM7HNao.roa (hash: gMWV3xN0pHUk4BWbscqYu+HnLvJWI7ZvfzjkigsBbmk=)
2: YPclN-3x3At_aURTRQvKSu74P2Q.crl (hash: 2Q8BQDxMlfjEONGK8n6ctHgiTihpWQ8EA2J8Hs/axrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPclN-3x3At_aURTRQvKSu74P2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:54:0b:db:f5:22:ac:c0:77:a4:cf:cb:8d:52:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f72537edf1dc0b7f694453450bca4aeef83f64
Validity
Not Before: Jun 15 02:00:44 2025 GMT
Not After : Jun 16 02:00:44 2025 GMT
Subject: CN=0b0f287b283eeb8f1cbc01ac7495658f779bbdfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:bb:9c:d6:dc:9c:d2:be:80:30:9d:c0:48:ae:
c8:18:29:17:22:27:1e:f9:bf:f0:e4:e3:23:3a:bf:
e2:83:69:e2:3c:67:b6:41:10:65:0e:87:a9:bf:0c:
ec:6e:9a:28:d3:f8:65:75:e5:b9:bf:6a:7d:01:fb:
9b:7f:a8:87:89:65:66:c6:b8:41:58:79:4e:ea:8e:
a0:c6:66:37:d4:d1:04:12:9f:92:14:0c:f9:e4:f1:
59:17:52:bb:16:45:f4:6f:cd:c1:fa:72:7e:56:a9:
b2:9c:3d:db:f3:5f:95:c7:01:24:94:7a:9e:c8:0d:
2a:fb:cc:e8:c9:2f:e4:9f:9a:fa:21:41:ca:21:ad:
2d:02:f5:10:96:e3:3c:dd:10:53:1b:c5:a0:a0:6e:
08:a4:5d:f9:53:35:39:19:3e:29:cb:31:de:57:e0:
50:58:ec:9a:08:c3:ee:1c:97:dc:67:a3:dd:28:fc:
0d:de:73:e8:65:0c:21:de:67:9c:0b:0d:ca:58:b7:
a9:8e:ca:82:eb:78:00:c0:59:08:66:51:e7:27:1f:
04:5a:b5:50:ec:ab:7d:75:44:63:83:41:6b:66:40:
5a:b7:cb:1b:b1:f6:b6:f6:02:b4:2f:e9:a8:ff:e7:
1f:3b:9f:ff:75:fd:ec:09:1f:03:6b:00:e1:51:4d:
02:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0F:28:7B:28:3E:EB:8F:1C:BC:01:AC:74:95:65:8F:77:9B:BD:FB
X509v3 Authority Key Identifier:
keyid:60:F7:25:37:ED:F1:DC:0B:7F:69:44:53:45:0B:CA:4A:EE:F8:3F:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPclN-3x3At_aURTRQvKSu74P2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ba:dd:f2:66:a5:d0:f1:e1:5f:91:6c:8c:c7:1f:a3:19:d8:
c8:f2:e3:23:c1:59:62:bb:3a:b8:c9:de:a4:7e:93:11:3b:7b:
64:9d:83:f4:6e:9c:c5:6f:c5:8c:22:82:ce:d8:ed:84:08:64:
a6:47:ac:2a:86:6c:37:d8:ba:7d:5d:ff:96:70:6e:c9:ea:ba:
c8:b2:a7:13:c5:19:43:ed:e4:b2:7a:6e:cd:14:ef:7b:34:40:
03:f5:4f:a1:7c:06:ce:67:84:f3:9b:37:30:3f:af:8e:d0:e4:
8a:95:7f:ef:52:50:2a:d4:56:08:84:75:fe:3c:f4:0a:72:81:
ec:51:29:c1:b7:3f:76:92:b9:ec:1c:12:eb:79:53:af:26:ce:
a5:1b:26:da:47:ca:63:25:8c:93:98:d4:d3:d9:1c:59:29:21:
f9:08:1f:eb:30:77:2e:67:28:5b:0a:0c:e4:55:62:a9:d0:bc:
e4:d1:18:77:91:2f:ef:4d:7e:09:e3:d5:0a:34:bc:e6:da:c1:
e8:84:82:5f:53:6e:cc:1d:58:19:15:dd:98:4d:25:7a:9e:87:
be:bd:9c:79:08:35:7e:cd:47:fd:ad:d3:e0:bf:16:37:03:22:
32:ff:23:76:a9:e8:02:a9:c9:b4:48:71:a5:1c:c8:a7:ec:df:
5d:a1:c8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:32:15 2025 by rpki-client