Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
File: YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft (raw, json)
Hash identifier: Zop0Bhdz8MJNlCv63CmpcCkiMRXgv/vx1NOPYJjErFE=
Subject key identifier: 26:CA:58:90:6A:51:58:7E:D9:91:2D:91:3D:F0:4F:2B:72:1F:B9:3E
Authority key identifier: 60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A
Certificate issuer: /CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
Certificate serial: 019769CEA3D4EBE96F0A8E519EFA8FE3612D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
Manifest number: 1591
Signing time: Fri 13 Jun 2025 15:00:39 +0000
Manifest this update: Fri 13 Jun 2025 15:00:39 +0000
Manifest next update: Sat 14 Jun 2025 15:00:39 +0000
Files and hashes: 1: F-cO8DY5we3ruehpt1DdaGZTJLY.roa (hash: LAS644NvWoPgwtaziFP441ODeculzXhcaX+rYlVwp50=)
2: XXUXKaNBLjG2zXes3zUz4pT_p2E.roa (hash: V04szlA87zJPQWBTLBTTrCqtzJ6gxyAZvxuUSuhQTGs=)
3: YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl (hash: w49SVlGkS0cmk7f2lMOT3J7hZlOGmr9ahpD3OfqoNm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:a3:d4:eb:e9:6f:0a:8e:51:9e:fa:8f:e3:61:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
Validity
Not Before: Jun 13 15:00:39 2025 GMT
Not After : Jun 14 15:00:39 2025 GMT
Subject: CN=26ca58906a51587ed9912d913df04f2b721fb93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:50:7f:b5:14:08:80:0d:31:f4:60:9b:b2:49:
60:af:b7:8c:0f:84:76:c9:80:5a:49:61:f5:3e:e3:
1e:4b:28:1d:c2:bf:eb:79:2c:e3:e4:68:90:1e:f9:
11:09:e3:b3:1d:56:87:bf:b1:ca:b4:0c:31:6e:a7:
d1:53:94:82:ba:c4:08:5b:11:63:67:82:da:c4:ce:
59:87:2d:b5:df:aa:c5:f3:87:d3:99:c6:73:a5:ca:
71:c2:4f:78:38:76:f2:c4:54:e9:fc:8d:9e:48:2e:
93:2f:d4:8f:e1:08:36:c5:87:be:b8:d8:14:c6:90:
ea:01:9a:07:34:4d:99:c9:2e:d8:26:2d:2f:3c:19:
33:e7:69:65:37:dc:76:4e:73:74:1e:10:27:96:c0:
c3:3e:a6:f3:4d:b3:17:ba:60:76:ff:04:44:82:40:
f9:d7:62:6b:12:68:8b:6c:3f:69:d6:85:b2:dc:1a:
b4:1f:50:d3:65:82:c4:46:b8:bd:6b:5c:36:83:a8:
d3:46:0f:5e:d8:a9:28:64:d5:57:20:fd:30:e6:04:
a9:cc:7a:23:3b:f7:10:62:bf:21:13:c6:56:60:db:
61:9b:8c:b4:f0:7a:df:47:82:bb:f0:b1:28:12:6f:
bf:2d:36:fb:18:d6:2b:b4:89:78:f5:1a:ea:ef:6b:
69:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CA:58:90:6A:51:58:7E:D9:91:2D:91:3D:F0:4F:2B:72:1F:B9:3E
X509v3 Authority Key Identifier:
keyid:60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:72:f4:e2:a0:e3:71:68:e8:d8:d7:cf:90:ba:0d:4f:49:ae:
7c:af:ff:cb:9f:30:ef:40:08:78:7c:92:4d:bd:7e:92:9c:c7:
43:f3:ef:82:90:a7:e5:93:70:28:aa:57:9f:bb:25:eb:bd:f2:
63:fe:88:c6:7e:e1:5f:d4:ef:79:05:02:86:e6:97:2e:fa:bd:
ea:73:ea:d7:c8:a2:8c:f2:b3:12:aa:23:94:05:b7:08:cc:fb:
73:98:77:43:6f:a3:a8:e5:5b:6a:a3:fb:1e:ba:6d:f1:97:13:
d4:70:aa:1e:92:fe:d1:9f:7b:6a:f8:43:88:48:dd:3f:13:e5:
f4:8e:23:1d:6f:87:89:11:80:9e:b6:a5:fc:34:4f:40:85:a3:
78:a4:1f:64:41:ee:27:0c:c7:5b:04:fa:e4:e0:c3:5f:58:7c:
61:45:7b:db:7b:3c:aa:a0:20:f1:58:87:40:bb:3e:0a:d3:06:
a1:fd:2c:fd:61:63:44:2a:d3:c0:d9:87:f2:20:5d:7c:3a:da:
99:54:fb:c4:2c:b5:f3:17:b8:33:71:9b:fa:a1:af:ae:d1:97:
69:86:19:e9:73:78:e9:45:17:60:be:c6:9f:dc:70:20:fb:61:
bb:cd:ac:1b:aa:65:87:61:33:5a:bf:f4:53:07:0f:78:14:c2:
b2:83:66:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:53 2025 by rpki-client