Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.mft
File: YIH8-etwqw4f3KwJx_m7XgFMnb0.mft (raw, json)
Hash identifier: IzVN3BDZTrSR5M7cJ/U7HpdSXFTLnfDg2zXkbkEQoBg=
Subject key identifier: 6D:DE:6D:85:DE:2E:89:3B:40:96:D3:3A:B9:0F:B7:CC:C4:47:90:55
Authority key identifier: 60:81:FC:F9:EB:70:AB:0E:1F:DC:AC:09:C7:F9:BB:5E:01:4C:9D:BD
Certificate issuer: /CN=6081fcf9eb70ab0e1fdcac09c7f9bb5e014c9dbd
Certificate serial: 0197684DD9EE4949DD2FB034B9A0E15EF1F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIH8-etwqw4f3KwJx_m7XgFMnb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.mft
Manifest number: 0AE7
Signing time: Fri 13 Jun 2025 08:00:21 +0000
Manifest this update: Fri 13 Jun 2025 08:00:21 +0000
Manifest next update: Sat 14 Jun 2025 08:00:21 +0000
Files and hashes: 1: SCQrnzyM4Bx20DPOMtssZk-Wu68.roa (hash: wtLko9TY7/20VtwY2KqfAs6WX/4oN6rpkwycX+Q3z5I=)
2: YIH8-etwqw4f3KwJx_m7XgFMnb0.crl (hash: EALeARTXu5eZrFyJeDIMBD+t5SEIl6p/+uOZOYPQGhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIH8-etwqw4f3KwJx_m7XgFMnb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4d:d9:ee:49:49:dd:2f:b0:34:b9:a0:e1:5e:f1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6081fcf9eb70ab0e1fdcac09c7f9bb5e014c9dbd
Validity
Not Before: Jun 13 08:00:21 2025 GMT
Not After : Jun 14 08:00:21 2025 GMT
Subject: CN=6dde6d85de2e893b4096d33ab90fb7ccc4479055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:72:0f:ba:43:ea:8d:87:c1:fb:06:a5:f7:98:
34:d9:3a:fc:a1:2f:73:ec:06:13:0f:37:7f:7f:b7:
f0:49:66:4f:1b:bf:ef:80:4b:2d:eb:f9:99:9f:fe:
03:ed:9d:04:ea:ac:87:a0:07:e8:9d:c1:37:f6:3c:
c4:27:81:d5:fb:ca:cb:ce:20:ea:d3:3f:bc:af:04:
9b:a0:fe:95:bd:0e:71:45:88:66:55:70:ee:f0:e6:
dc:f7:d4:0c:79:ca:58:96:dc:bf:54:0b:a1:3f:36:
45:a4:74:72:8f:4a:23:0e:91:e9:ab:cb:cc:c6:18:
09:f1:c8:35:86:01:8c:c5:68:51:f4:78:6b:08:12:
99:2d:0f:59:2e:5e:39:bc:dd:6a:60:35:34:b6:44:
2c:21:5f:6d:dc:07:97:c3:ad:a7:de:69:a8:48:14:
34:8e:66:9f:52:3d:39:e4:8f:36:cf:6a:c4:70:47:
0b:d1:de:d6:40:33:de:63:ec:12:eb:89:3f:27:91:
ce:28:54:1e:a4:d4:84:d0:7b:a4:bc:16:ed:0b:df:
68:d1:75:99:65:fa:46:06:d0:51:b4:3e:74:24:10:
8b:6b:d8:54:ce:8b:df:7a:93:52:52:e5:d6:49:cf:
89:fb:b9:dc:db:ee:59:89:29:9e:e2:11:5e:93:54:
4b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DE:6D:85:DE:2E:89:3B:40:96:D3:3A:B9:0F:B7:CC:C4:47:90:55
X509v3 Authority Key Identifier:
keyid:60:81:FC:F9:EB:70:AB:0E:1F:DC:AC:09:C7:F9:BB:5E:01:4C:9D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIH8-etwqw4f3KwJx_m7XgFMnb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:91:d7:3e:f1:67:14:cb:bd:87:8d:c1:1f:f6:22:12:2b:83:
ae:d4:e9:a5:af:aa:b6:a4:dd:f6:02:b7:bd:28:94:3f:cc:e6:
c3:af:be:4e:c4:01:60:c5:aa:22:84:44:20:2b:88:89:ea:6d:
3b:08:e8:96:ca:b8:4a:39:56:b9:24:1b:e7:f7:df:d5:9d:d3:
fd:ac:e9:2c:30:b1:cc:d7:e4:fa:3d:7d:76:97:6a:36:39:44:
ca:52:bc:d9:99:78:79:5d:c6:be:01:8b:a0:93:dc:91:3b:3b:
e7:fa:e5:42:f1:86:60:0a:7f:bf:95:7e:8b:e6:d4:8b:bf:43:
99:ff:d8:1b:26:ce:95:2a:5e:8c:0d:f2:d6:98:27:e0:89:5d:
e1:b8:2e:6b:d2:c3:3d:7a:ed:32:6b:3d:67:4e:d9:92:b0:b6:
29:df:0d:57:5b:79:3a:8d:28:e0:7d:e6:1f:6c:3b:5d:38:a0:
61:69:f3:bf:aa:eb:60:82:ae:21:a5:22:0b:2a:9d:1f:71:40:
d4:2e:34:dc:43:e3:98:b1:c6:ae:11:3a:07:9d:83:7c:94:ec:
66:b4:12:1f:68:bf:29:68:0f:d0:01:b2:32:6b:5b:5c:cb:30:
b5:37:be:dc:0f:c9:a8:ab:74:74:92:0e:bd:15:f8:61:c0:50:
2a:2b:5b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:56 2025 by rpki-client