Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
File: YB3AD5pIG0FQhrFDp91M2h_7JHA.mft (raw, json)
Hash identifier: tNz7jBqAI4LUvdQEdKRzozdMqE9B+orSwulcvbq7SMs=
Subject key identifier: 23:9E:8D:F5:9C:F0:9A:C0:89:39:66:0B:6B:E6:90:6E:15:03:3E:12
Authority key identifier: 60:1D:C0:0F:9A:48:1B:41:50:86:B1:43:A7:DD:4C:DA:1F:FB:24:70
Certificate issuer: /CN=601dc00f9a481b415086b143a7dd4cda1ffb2470
Certificate serial: 01976A05AD8D246FD1DEC483B4FA6C655819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
Manifest number: 158B
Signing time: Fri 13 Jun 2025 16:00:46 +0000
Manifest this update: Fri 13 Jun 2025 16:00:46 +0000
Manifest next update: Sat 14 Jun 2025 16:00:46 +0000
Files and hashes: 1: 4mIaRiVfusRCW_nZ919kue73VcU.roa (hash: KAlnZdYdnEt6W3Qh7SxuikxG/eJq1ZmaN4m/5vXa+us=)
2: YB3AD5pIG0FQhrFDp91M2h_7JHA.crl (hash: VwvoclThkKbmjCqEZ/mY6Krh9aZCpmCSkym4XLQN2A0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:ad:8d:24:6f:d1:de:c4:83:b4:fa:6c:65:58:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601dc00f9a481b415086b143a7dd4cda1ffb2470
Validity
Not Before: Jun 13 16:00:46 2025 GMT
Not After : Jun 14 16:00:46 2025 GMT
Subject: CN=239e8df59cf09ac08939660b6be6906e15033e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fe:e6:d3:93:41:dc:a4:2c:cd:c7:a9:87:60:
98:f1:77:7c:de:a1:82:0f:64:8c:d1:67:fe:71:ad:
97:4d:11:48:f9:86:ab:20:97:56:c4:0e:c5:7c:98:
cc:10:28:01:59:50:c3:ef:87:3d:88:23:44:b9:b4:
bb:35:a0:c8:80:be:5b:85:1c:5b:6e:ae:c5:d2:ba:
38:07:d7:93:f3:48:6e:f8:09:68:3c:6c:8b:db:25:
f4:4b:cb:87:98:45:8a:e2:45:7b:6b:92:4b:37:cf:
0f:e8:23:71:a0:8d:12:a5:04:6c:1a:43:5b:01:90:
c9:c0:47:ce:b0:dc:34:e9:b5:b3:32:5f:fd:54:a5:
bf:42:83:00:83:1e:58:d2:32:70:00:b2:92:ff:15:
ba:71:50:d2:a7:82:ae:ff:8f:9f:08:a3:31:60:42:
49:06:44:ef:8d:04:51:ba:4e:7d:b7:cf:da:44:f4:
7c:29:f1:0b:9e:10:0e:13:7e:02:c9:f5:94:18:06:
ba:a3:ad:05:ea:7b:f3:50:a6:2c:e1:26:f4:5f:0f:
8d:de:17:c1:f4:39:19:53:29:23:26:3e:c7:42:74:
cb:d7:6e:fa:a9:f2:72:7e:c7:1c:ec:e6:61:ec:d0:
b9:cf:fa:e6:db:fa:2c:42:58:81:4b:3e:6a:56:75:
99:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9E:8D:F5:9C:F0:9A:C0:89:39:66:0B:6B:E6:90:6E:15:03:3E:12
X509v3 Authority Key Identifier:
keyid:60:1D:C0:0F:9A:48:1B:41:50:86:B1:43:A7:DD:4C:DA:1F:FB:24:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:da:d3:56:cd:ae:ec:eb:6a:2f:da:29:d5:9d:b9:a4:ed:af:
1c:73:ec:aa:90:b5:cf:d5:b9:8a:91:26:64:2d:e2:19:b0:86:
96:05:f4:4e:d8:dc:78:c5:13:b5:c8:be:d6:69:2a:ec:63:98:
b9:95:34:02:db:55:d9:ee:2e:3b:50:ca:88:f9:58:e4:59:12:
01:5b:c0:a0:07:eb:89:c8:ec:1b:e2:0f:d2:b1:a6:64:6e:c7:
56:58:8a:f2:83:8a:31:03:a4:fe:ba:38:c4:b4:05:39:0c:d7:
65:ab:e6:69:8f:3a:50:af:91:65:e8:8d:8d:6c:1e:e7:2d:78:
cc:3a:cc:31:fd:b2:e9:ff:ec:64:64:f6:e3:18:7d:64:cc:5b:
fd:91:3a:69:cc:59:ee:30:2b:1c:b9:01:de:c4:7f:39:3a:38:
84:92:63:8e:95:b0:7c:b3:c7:89:ae:b7:d9:ac:46:e4:f8:52:
50:ac:fa:dd:23:68:de:7d:c3:44:db:87:d0:5c:29:a1:8f:4a:
ca:a6:48:dc:9b:cc:e3:a1:9d:cb:3d:41:4e:a9:d9:9f:ea:30:
56:81:d6:3f:9d:bb:d3:dd:a5:60:e9:b4:26:6e:6c:df:c4:ca:
21:7a:75:41:40:4e:07:5d:95:b6:89:76:13:a4:28:17:24:72:
c8:8a:89:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:22 2025 by rpki-client