Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
File: YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft (raw, json)
Hash identifier: ut05NLAZZ4kzRneBSWsA4Wv0deAJfjOtQ3QqOtv7DWo=
Subject key identifier: 89:2D:0C:B8:EA:B9:EE:EB:61:10:A1:9E:BC:B9:4A:BD:57:93:A7:5E
Authority key identifier: 60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26
Certificate issuer: /CN=602d570b542e7302885d367418df802f99494f26
Certificate serial: 019777C119473348947F1720CAD14241AAAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
Manifest number: 05F0
Signing time: Mon 16 Jun 2025 08:00:32 +0000
Manifest this update: Mon 16 Jun 2025 08:00:32 +0000
Manifest next update: Tue 17 Jun 2025 08:00:32 +0000
Files and hashes: 1: Wb7gIaowM175_4hbQACvXGxElnc.roa (hash: pkwDFkxfWqeO5qm1OaqoMf2SYa+I4A9Fn1qiqLC0gYE=)
2: YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl (hash: bpsteDHRbR8XBbls/hA7zSNbA/j5b5WJxjAbNVWWIaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:c1:19:47:33:48:94:7f:17:20:ca:d1:42:41:aa:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602d570b542e7302885d367418df802f99494f26
Validity
Not Before: Jun 16 08:00:32 2025 GMT
Not After : Jun 17 08:00:32 2025 GMT
Subject: CN=892d0cb8eab9eeeb6110a19ebcb94abd5793a75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:dc:b6:a4:b7:b9:5a:64:3b:8a:d4:20:80:7b:
8e:64:e0:8f:3f:85:a5:97:65:53:c3:b0:04:1d:f3:
88:a1:98:bd:e1:83:e1:19:27:60:7c:e7:c5:a0:e5:
be:c7:62:1d:bf:91:fe:93:79:f2:08:67:d3:42:2b:
f9:2c:ef:13:bb:52:49:14:b2:f6:6f:ee:55:c0:5b:
39:41:7e:9f:a5:8d:0e:c4:4c:07:15:e4:04:f6:2f:
aa:f4:1f:5b:59:e5:af:19:70:60:65:72:81:f8:46:
78:19:c8:d1:0c:1a:95:49:e3:a9:fb:e2:57:9b:47:
9c:22:f7:37:7a:e3:11:1f:4f:0f:30:2b:e6:cc:73:
ce:74:24:59:25:e8:aa:03:11:57:b2:45:4f:80:39:
f5:4c:23:0e:8b:4a:bf:a4:e3:b5:8e:7f:8f:50:71:
5f:ff:a7:82:d0:d2:1d:50:5a:70:c2:26:0e:6a:68:
50:4c:c6:38:91:91:8f:67:cf:9c:a5:8f:0c:ff:85:
16:c2:50:98:09:a4:25:35:1a:0b:b0:e0:c4:3e:36:
83:39:f3:09:6b:3c:85:13:61:8e:9f:9d:05:d2:6b:
08:20:60:55:18:97:15:cf:95:3b:db:4f:89:f6:4b:
2b:f0:24:6f:2a:f0:e4:8e:91:8a:4b:76:ac:c6:2e:
3b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2D:0C:B8:EA:B9:EE:EB:61:10:A1:9E:BC:B9:4A:BD:57:93:A7:5E
X509v3 Authority Key Identifier:
keyid:60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4a:cd:ef:d4:6b:69:2a:11:2d:5b:3e:ba:1a:79:43:d9:98:
fa:b4:47:d6:c1:52:9a:e0:5d:11:96:e8:51:f4:16:f5:53:c5:
80:a2:0b:6c:46:1a:f4:21:70:45:9a:f7:4f:b7:d0:80:a0:23:
38:6c:6b:c7:14:ee:c8:45:cb:21:e2:3e:38:c6:c7:fb:4e:8f:
a9:e2:63:53:a1:72:08:f3:6d:44:d4:ed:b7:45:4f:93:3e:bd:
d1:fe:0c:5a:54:3b:f7:5e:a1:1b:42:55:52:9b:9b:ab:d6:1e:
18:bd:7e:18:08:a5:36:76:f6:0e:06:3e:c6:ca:95:6f:90:b7:
ae:dd:f4:4c:ce:4b:58:ee:9e:10:57:e5:87:68:11:e5:4e:56:
f9:5c:70:a8:5e:82:91:9f:b7:96:d6:11:85:52:62:f2:c5:69:
da:91:12:39:c5:e9:f4:65:dc:8c:08:33:b2:d6:cf:c4:34:23:
26:bf:14:a9:98:1b:1a:53:7d:82:71:8b:e9:61:9a:93:ab:8d:
8e:11:68:d0:bd:2d:1e:93:87:d1:ac:c3:64:81:1f:ab:d7:28:
58:dc:b4:45:22:2b:ea:b6:de:6e:94:25:90:3e:dc:d1:b4:ee:
84:9a:1a:ec:03:19:0d:96:df:fa:fa:8e:b0:cb:0c:e6:d3:f4:
96:8e:d9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:58:27 2025 by rpki-client