Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
File: YmqokTLSpoTY0qGj9-QPIjRjbzg.mft (raw, json)
Hash identifier: Vcs9QEYqjIo3OSU3a1AfhgZWPrxKTJnCxLaadEhbw4w=
Subject key identifier: 8E:DD:AB:BA:1A:3D:5E:C0:21:B5:D4:00:46:F9:FE:92:73:48:92:59
Authority key identifier: 62:6A:A8:91:32:D2:A6:84:D8:D2:A1:A3:F7:E4:0F:22:34:63:6F:38
Certificate issuer: /CN=626aa89132d2a684d8d2a1a3f7e40f2234636f38
Certificate serial: 01977188146811CA7DDD35E7A951E2C58175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
Manifest number: 136D
Signing time: Sun 15 Jun 2025 03:00:32 +0000
Manifest this update: Sun 15 Jun 2025 03:00:32 +0000
Manifest next update: Mon 16 Jun 2025 03:00:32 +0000
Files and hashes: 1: YmqokTLSpoTY0qGj9-QPIjRjbzg.crl (hash: GrSRBp97ViRJ7lFTG/zHUnY/R0SI1pSDGvNUOGLmLEA=)
2: xj0Zl5jyKNtmExsm8HUfZTBh1W4.roa (hash: qJ7mmoo0SJOyk9TkckQkyKsoiQJfN7oKl35vQICMSm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:14:68:11:ca:7d:dd:35:e7:a9:51:e2:c5:81:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626aa89132d2a684d8d2a1a3f7e40f2234636f38
Validity
Not Before: Jun 15 03:00:32 2025 GMT
Not After : Jun 16 03:00:32 2025 GMT
Subject: CN=8eddabba1a3d5ec021b5d40046f9fe9273489259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:72:f0:a2:49:07:9b:0d:37:b7:c2:2f:d3:7b:
23:a0:90:31:e4:a8:75:f2:b9:98:02:4c:9e:1a:01:
3e:96:49:c4:f0:14:1b:e3:02:1a:ab:7d:ca:78:d2:
9a:3f:5a:41:77:26:1e:93:73:2b:09:ce:c2:e5:39:
32:71:d6:c6:7a:f3:7c:55:1d:83:dd:0a:51:65:e7:
99:ba:b9:bf:9c:93:3c:e9:cd:1a:dd:9b:de:aa:07:
00:72:7c:d2:c9:22:b0:7f:dc:6b:25:5e:3f:da:51:
b8:9e:89:1d:31:cf:89:5e:57:45:81:3f:60:af:83:
d3:fd:a0:4b:b8:b7:31:cd:53:bb:cf:b6:99:b6:e2:
8d:9b:22:2a:4b:61:cd:46:cd:ea:5a:80:b9:03:e3:
ff:75:4e:b7:ad:be:e2:35:32:7f:45:a2:c5:c6:3d:
b0:ae:19:c9:61:58:73:ee:22:a2:d2:98:ea:51:b6:
6e:e2:46:9c:61:85:c1:c6:3b:19:a8:6e:df:43:3e:
e8:8a:94:c8:42:03:75:e0:12:c0:02:02:0b:59:23:
a7:fb:15:5d:24:c5:48:c4:98:ae:f0:ac:ff:ce:eb:
c8:1d:cf:1f:b1:b6:fa:6c:d8:a4:98:ee:a6:49:04:
bc:58:5f:ac:b8:ae:4e:5a:e0:62:b4:02:c5:fa:1d:
1e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DD:AB:BA:1A:3D:5E:C0:21:B5:D4:00:46:F9:FE:92:73:48:92:59
X509v3 Authority Key Identifier:
keyid:62:6A:A8:91:32:D2:A6:84:D8:D2:A1:A3:F7:E4:0F:22:34:63:6F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a2:2e:a5:6f:a3:6c:41:a0:61:cf:17:e0:2e:cf:8d:d0:e0:
a6:a1:cb:7a:dc:06:59:e1:dc:60:9b:fb:f4:68:72:00:2a:74:
32:00:86:ff:96:d2:69:6d:53:0e:ab:d3:65:f9:2c:b6:3a:3a:
f8:39:da:21:9d:e1:83:1c:1e:bd:d2:22:4d:01:2d:a6:04:fc:
79:4f:bd:e0:7b:8f:1f:d1:a2:9b:3b:34:58:a7:d6:64:50:ec:
95:06:e4:6f:72:35:88:61:cc:41:cf:95:49:19:86:5b:18:33:
bb:d6:32:f2:d3:4e:11:98:fd:fd:1e:93:4a:bb:f8:4c:37:61:
66:4a:cb:65:6b:cd:a9:1a:e6:b7:69:9f:37:ea:10:50:25:33:
fe:2f:cc:ec:d2:03:6b:99:15:a4:35:63:3f:38:6f:b6:68:95:
9b:e0:19:fb:9a:9d:92:07:9d:23:aa:7c:c0:00:9d:69:54:64:
20:5d:e2:a5:63:2c:2d:6d:dc:0e:c2:5f:f1:8d:68:fc:ad:45:
70:41:df:a2:31:19:62:0f:2b:0b:aa:d2:8e:17:1c:ff:33:1a:
1e:02:fd:c2:6f:5d:2f:8b:df:10:76:92:29:5b:c5:f2:b2:5b:
a7:26:22:9c:8a:30:92:ea:3c:af:4f:50:67:8d:e5:1d:84:ca:
74:97:88:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:35:42 2025 by rpki-client