Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
File: YDgxphvIqPTLhYhwIvtvhjlzRdw.mft (raw, json)
Hash identifier: UXKRGB6hrp9t3GiBQGPH5F0A7Y11xRyCYipIrcSHR9A=
Subject key identifier: B9:CC:06:04:D1:5E:06:B3:0A:4E:3A:EC:19:A2:83:35:34:50:1D:AF
Authority key identifier: 60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
Certificate issuer: /CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Certificate serial: 01976E19C9E8A087514654447111A8A6E131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
Manifest number: 0CA2
Signing time: Sat 14 Jun 2025 11:01:13 +0000
Manifest this update: Sat 14 Jun 2025 11:01:13 +0000
Manifest next update: Sun 15 Jun 2025 11:01:13 +0000
Files and hashes: 1: BbO3Y81u57rZF7WlM500MsuZpRM.roa (hash: ENegZhckEyjrMTUEgK0PeHY3+6b9WA+KNwr6cWbkGV8=)
2: VPoc4sp2b0J8IUmBhYFRCQnsPD0.roa (hash: syajYrJmIJZ/O9q2a3nZ7jEdzvbYM5uKAi7nB9k82iw=)
3: YDgxphvIqPTLhYhwIvtvhjlzRdw.crl (hash: 3gQLByDIjepwBbUQwh8Or3FwQyNEF9jOEUOqP6iyM9g=)
4: _mYolmt2fF0wabxHp1kAcOpFjJQ.roa (hash: Ni2pHhwSkaVczL8tsRRH+ZM9PBph4eSrgcYZ18OoRUY=)
5: ucZk7RPUTaIeSxLkQGWFeSNWVec.roa (hash: 5rWJbfTjArOhmwmwJF8k3Fgre3TIPFtEAx1ngBb1v5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:c9:e8:a0:87:51:46:54:44:71:11:a8:a6:e1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Validity
Not Before: Jun 14 11:01:13 2025 GMT
Not After : Jun 15 11:01:13 2025 GMT
Subject: CN=b9cc0604d15e06b30a4e3aec19a2833534501daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:62:03:9b:92:e4:32:68:c6:53:f1:f8:87:d3:
75:bb:20:0d:4e:8d:52:b3:f5:41:1a:ae:01:c4:30:
3d:03:f0:2d:9e:56:c2:f5:be:fe:f1:a4:b4:0e:f8:
b4:bf:4a:21:14:d8:01:9e:86:c5:b3:d0:b0:8b:da:
be:2e:b9:e0:dd:26:f7:89:e8:27:6a:98:aa:75:55:
b9:e9:1f:20:2e:2c:c2:18:9f:71:df:0e:df:71:3c:
43:13:9c:f3:84:20:3e:37:45:dc:9d:09:56:c9:d0:
98:09:df:32:ca:dc:9f:20:6a:7a:69:1e:14:d5:c9:
12:cd:a2:68:82:a1:eb:ac:50:f4:04:8f:c5:ad:a0:
86:0e:5e:4e:be:f9:ba:69:13:7d:87:67:c3:17:08:
0e:dc:85:6d:ad:6a:48:cf:db:75:73:b3:20:96:95:
1d:2b:fd:3d:53:f9:ff:42:8b:c3:b7:af:f1:53:51:
6d:d2:fc:77:6c:ff:56:1d:dc:b9:b4:7d:f3:d6:da:
af:d3:0e:ee:ed:8c:36:a1:e5:2a:27:c3:68:87:75:
aa:f9:bb:4f:7e:c4:ac:1a:04:c6:72:b6:df:b8:51:
7d:0f:fa:50:a5:6b:fe:f5:e8:fa:32:6e:71:8d:94:
c2:72:64:d3:bb:dc:c3:ca:66:b0:76:bf:32:4c:e8:
6c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CC:06:04:D1:5E:06:B3:0A:4E:3A:EC:19:A2:83:35:34:50:1D:AF
X509v3 Authority Key Identifier:
keyid:60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:de:7a:ce:fc:81:63:c1:a3:55:6b:7d:1c:32:c6:3e:8e:62:
a5:a1:62:52:cf:b4:6e:d0:c3:82:5f:1b:41:79:4b:77:0f:e7:
5d:56:74:05:6e:65:47:06:18:70:e3:7f:67:ef:c4:88:4a:7a:
d7:26:70:93:f6:cf:f4:3f:6a:e5:a2:dc:cd:d9:af:81:61:19:
b4:e6:c9:a2:93:bc:9d:79:06:d1:a1:3a:49:e1:47:05:ba:58:
fe:0c:df:7c:4d:1a:b4:ae:cf:a4:24:1e:ce:5f:0c:43:49:83:
b4:ba:62:e8:6e:cb:55:99:ce:81:fb:8f:26:a4:62:c3:48:ba:
80:b6:4a:5d:bf:db:91:c9:0b:2f:d7:a4:d7:c9:a8:67:36:35:
80:60:4f:b1:8e:0d:4b:46:2e:88:5a:22:67:47:ba:8f:77:99:
40:a4:40:e2:ec:8a:0e:f0:4b:13:be:fc:5f:7c:9e:88:fe:73:
a9:99:3e:65:ed:a6:15:1e:ce:0b:d7:6c:bd:a1:fd:38:32:1a:
8e:f7:d4:dd:3b:b2:c3:46:1f:ee:da:32:26:8e:87:71:3d:85:
c3:14:5f:5c:b2:3a:b9:b7:d8:34:e3:e1:79:a9:72:38:98:6e:
c1:ea:40:2d:6a:60:25:45:6b:5a:5b:ce:fe:e0:da:11:0d:17:
fd:6d:dd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:40:07 2025 by rpki-client