Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft
File: YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft (raw, json)
Hash identifier: IOptFNPrwkSHu0UeyOIj1Q0vOwBh5hslu+Qkc7oXO6I=
Subject key identifier: C6:76:FE:0D:77:2E:61:FA:58:BA:5A:97:4D:5B:5E:13:CE:66:54:38
Authority key identifier: 61:2C:1C:53:F6:C1:D9:96:23:6C:BB:37:BA:32:47:67:03:99:A6:2D
Certificate issuer: /CN=612c1c53f6c1d996236cbb37ba3247670399a62d
Certificate serial: 0197782F63996CBB5C6D0B0DB7D5C368588C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft
Manifest number: 0CBA
Signing time: Mon 16 Jun 2025 10:01:00 +0000
Manifest this update: Mon 16 Jun 2025 10:01:00 +0000
Manifest next update: Tue 17 Jun 2025 10:01:00 +0000
Files and hashes: 1: YSwcU_bB2ZYjbLs3ujJHZwOZpi0.crl (hash: Zh9tKE90UoROLl5xy1eE4p1g4xkmSddFnvosJ6zHLiE=)
2: cmQy3O27JTVMgc0scAWzRQz1k34.roa (hash: JrHBwEb+drqrBDZnlCxDUthDJ1gAVyMOlFCkBCL2cqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:2f:63:99:6c:bb:5c:6d:0b:0d:b7:d5:c3:68:58:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=612c1c53f6c1d996236cbb37ba3247670399a62d
Validity
Not Before: Jun 16 10:01:00 2025 GMT
Not After : Jun 17 10:01:00 2025 GMT
Subject: CN=c676fe0d772e61fa58ba5a974d5b5e13ce665438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6c:a1:c3:12:f7:0c:2c:7f:06:89:ce:0b:b2:
71:38:8c:35:52:b9:a5:a5:cf:47:b3:f0:f4:e4:9f:
cd:e3:18:63:3e:bf:df:a9:dc:3d:65:63:42:58:fe:
eb:f7:0b:67:3d:fc:db:0e:f6:4c:61:d1:98:b0:4f:
f9:3a:02:3d:ad:6a:95:40:5e:b9:19:8d:f8:ba:c0:
18:a8:78:9c:bc:ea:32:8c:6e:47:dc:a1:33:63:88:
a2:a8:f1:d6:eb:a3:81:0f:5b:ec:5e:56:bc:c8:87:
e4:ed:0e:3e:eb:27:e0:da:4b:59:87:73:7b:d8:1c:
69:58:64:a4:1e:f4:54:e0:5b:b2:23:6e:fb:7a:b8:
32:2a:e2:d1:a4:38:c9:3f:c6:ba:bb:c1:30:25:55:
3c:4a:fc:3e:95:9f:27:ba:4a:20:52:e9:52:28:83:
0f:33:7b:83:8f:ee:16:27:9b:22:50:31:14:22:69:
57:3d:ba:00:63:85:98:28:a8:2a:ab:f2:53:0b:1f:
94:a2:7a:05:b6:e4:86:d3:a1:c9:75:38:a3:53:06:
7d:41:d1:56:5e:b8:75:57:cb:13:2d:d2:cc:88:11:
f0:2a:93:19:45:bf:53:9f:28:96:8e:1c:66:c7:b4:
6c:f7:39:8a:df:30:9d:05:04:0b:24:4e:d7:45:52:
78:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:76:FE:0D:77:2E:61:FA:58:BA:5A:97:4D:5B:5E:13:CE:66:54:38
X509v3 Authority Key Identifier:
keyid:61:2C:1C:53:F6:C1:D9:96:23:6C:BB:37:BA:32:47:67:03:99:A6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:fb:56:5a:15:c3:fd:10:f1:5d:05:10:e2:5c:e3:13:97:bb:
22:c1:a7:71:32:1b:25:e9:6a:9c:8f:9b:9c:12:35:fe:1a:98:
62:ce:8d:1f:52:ca:d6:3a:8a:2d:99:fc:75:36:1e:a9:69:3c:
b5:e1:eb:54:f4:44:ba:fe:69:2d:3c:61:99:a5:b2:c0:1b:24:
b7:a3:c6:fa:cf:08:34:9f:29:a2:84:4e:98:d7:9f:c6:73:47:
fc:6d:6c:bf:6f:bc:3a:f1:e5:1a:68:02:2f:c2:9f:a3:a7:39:
62:68:b5:a5:41:4f:cd:00:8f:db:ef:cc:99:63:17:24:96:94:
c4:5f:57:77:09:04:d2:b7:58:00:33:d7:a7:19:40:e6:a0:b5:
00:ad:ff:99:ad:c7:3f:4d:a9:f7:f2:9e:51:5a:bc:bb:ab:fd:
4c:ff:93:5e:0c:24:40:7e:4a:bd:d8:96:d4:57:85:f1:97:42:
64:09:53:87:4f:87:b7:3a:13:80:a5:51:8d:1d:72:e8:bc:33:
cb:e4:80:e2:73:2a:28:0f:49:26:c2:1e:f5:11:55:a8:e7:5b:
f6:28:95:54:b1:3d:1c:60:e4:6a:c9:14:b0:6d:1c:6e:83:9b:
46:10:03:c4:b0:2c:31:f5:1f:5f:9d:df:b0:b7:a3:da:7e:54:
71:8f:f2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:27:06 2025 by rpki-client