Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
File: YblVGO1PVYKi9sEZVXQChLwIgTQ.mft (raw, json)
Hash identifier: RO0YCFDrK66XWKDxX8clC1CE1TfLRz+G1jS68v70FDs=
Subject key identifier: 87:B2:B1:73:6E:71:62:CD:4C:50:66:4E:6D:FA:AE:4A:4C:A4:A3:1C
Authority key identifier: 61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
Certificate issuer: /CN=61b95518ed4f5582a2f6c11955740284bc088134
Certificate serial: 0197684E8811C94662A7CA18285F1D484E3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
Manifest number: 060B
Signing time: Fri 13 Jun 2025 08:01:06 +0000
Manifest this update: Fri 13 Jun 2025 08:01:06 +0000
Manifest next update: Sat 14 Jun 2025 08:01:06 +0000
Files and hashes: 1: QPglHGOSHFrs1mgAtq2zwd82Smc.roa (hash: y5xHnZXArsaVabnfSwbndMTBY0pIDvTGUm5JTD4ZakI=)
2: YblVGO1PVYKi9sEZVXQChLwIgTQ.crl (hash: d4EbqCOXhM9FH+njU+YJOVBnScAyqlJngWSKLEdLV8E=)
3: eTJhKe-LETepmtUCJc23KDC15Os.roa (hash: bWxC4iCttKGE5WGBMq9/txv6VyYSnQgWWwgULLvAoD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:88:11:c9:46:62:a7:ca:18:28:5f:1d:48:4e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b95518ed4f5582a2f6c11955740284bc088134
Validity
Not Before: Jun 13 08:01:06 2025 GMT
Not After : Jun 14 08:01:06 2025 GMT
Subject: CN=87b2b1736e7162cd4c50664e6dfaae4a4ca4a31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4a:70:b9:02:88:48:d4:28:16:2b:61:03:7d:
14:a6:a1:8d:4a:d1:f5:59:cb:31:4f:68:cb:9a:a0:
9b:58:ac:4a:f3:3d:53:a8:d2:ff:30:33:3c:5c:a4:
33:b0:85:1a:a2:c9:17:f0:ee:68:7a:54:e4:03:4f:
6f:6d:83:b6:b3:d3:b8:c0:c4:6b:7e:5e:16:2b:fa:
97:96:81:55:27:8b:1e:ff:f3:91:5c:99:ae:54:f8:
fa:2c:1f:f6:1a:e8:03:71:03:9e:80:04:02:fe:42:
18:b9:34:26:20:d5:13:ae:95:0f:01:85:7a:ea:9d:
4c:47:79:fd:5f:38:e3:21:9a:c0:96:94:63:2e:22:
71:84:9e:0c:09:c9:70:bc:fe:28:39:02:33:31:e1:
1f:0c:19:ae:26:38:2b:01:cf:db:94:15:a3:c8:1d:
65:22:2d:a3:4a:26:04:ac:99:6c:8b:ce:e7:11:cc:
01:e2:d5:16:dd:4f:7d:2b:6b:ec:45:cc:3c:8e:8a:
bd:38:f8:5e:05:3b:39:77:1b:31:e8:b1:f4:c9:6d:
cd:79:63:58:03:46:45:46:57:f7:5f:45:7e:fb:99:
f8:ca:65:c0:81:8b:72:b2:6d:40:41:6c:91:cb:df:
43:5f:64:c8:e2:71:dc:9b:42:ba:0e:39:7d:29:30:
9a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B2:B1:73:6E:71:62:CD:4C:50:66:4E:6D:FA:AE:4A:4C:A4:A3:1C
X509v3 Authority Key Identifier:
keyid:61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b1:ad:6f:9c:ec:34:68:a1:15:90:7a:72:05:51:62:56:eb:
fa:d9:23:42:cf:f6:b5:43:09:13:ab:dc:f0:63:9f:44:86:c9:
4a:47:71:8a:24:8c:05:03:70:50:6c:70:3a:12:98:e4:7e:0c:
0a:e6:38:48:12:19:42:ba:50:f0:ec:14:d7:73:1d:32:c4:4c:
7c:41:18:75:ed:c7:8f:f1:58:97:15:4f:9d:0d:c3:ac:af:53:
ed:f3:5a:18:3a:38:86:58:d8:36:2d:5e:24:9d:a6:3f:63:4d:
d6:26:b5:2e:f2:53:24:6c:c5:3d:8e:29:3f:e3:17:60:42:14:
88:18:85:15:ec:0b:15:00:cc:51:ff:d2:20:0c:f5:46:49:b3:
04:e9:c0:31:b1:71:0f:79:fd:cb:86:70:b2:2f:a9:21:8c:70:
5f:da:0b:04:4a:a2:be:3d:78:9c:93:4d:21:ce:99:94:71:e7:
01:9e:6a:a4:14:53:b4:ea:ed:bd:03:dc:4c:fb:80:23:34:88:
19:64:7e:f0:94:10:e3:4f:a1:35:c9:e1:eb:cd:7d:f4:fb:49:
2a:bd:6f:24:ee:b3:e9:fd:54:41:c0:81:d7:e5:1f:f2:d1:90:
de:c8:b2:cf:f2:51:f0:72:8e:f1:6d:ab:85:b5:b3:98:32:a8:
a6:a0:1a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:30:26 2025 by rpki-client