Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
File: YKzX2WuVbeXbA2c80dHjo3uN2d0.mft (raw, json)
Hash identifier: e13uqjbEJPCN3fK+svX77jTz9yo+k1UxD9w/CqnsOm0=
Subject key identifier: FA:B5:02:89:3E:09:B2:5D:B2:DF:AC:4A:93:70:D2:66:F5:0D:07:4C
Authority key identifier: 60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
Certificate issuer: /CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Certificate serial: 019783FC6655A10866A196BC3E664CB962B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
Manifest number: 04EC
Signing time: Wed 18 Jun 2025 17:00:45 +0000
Manifest this update: Wed 18 Jun 2025 17:00:45 +0000
Manifest next update: Thu 19 Jun 2025 17:00:45 +0000
Files and hashes: 1: WR90m5DgvTuhngQTVt_A_5zUod0.roa (hash: FY/boCiP1n6kQ8OnKj08oNsixb1HE3QlDcsMak5j0Lc=)
2: YKzX2WuVbeXbA2c80dHjo3uN2d0.crl (hash: NR+gvooTAdbJv5OPjjszIRMUgc6KOeyYcSlm4CEFFF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:fc:66:55:a1:08:66:a1:96:bc:3e:66:4c:b9:62:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Validity
Not Before: Jun 18 17:00:45 2025 GMT
Not After : Jun 19 17:00:45 2025 GMT
Subject: CN=fab502893e09b25db2dfac4a9370d266f50d074c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:80:17:34:0b:ae:c4:96:aa:aa:ff:0e:8b:2d:
3f:3f:ca:3a:8a:f7:d4:c9:6f:6c:77:b5:b0:02:c2:
a8:b3:fa:85:b6:d4:07:e3:67:6a:49:fd:63:30:85:
f1:f2:2f:96:a6:80:2c:07:76:c8:2d:57:66:4e:57:
84:ee:53:f9:81:8b:10:ae:a7:aa:1b:ad:42:75:0d:
92:b8:c0:ee:d0:89:a5:47:bc:5b:7c:c2:12:43:3f:
66:b9:b6:52:16:cf:e2:c9:fd:99:d5:0e:4f:67:75:
4c:d7:21:4a:a5:f2:5e:83:88:99:b8:55:83:16:38:
db:99:5b:ab:e5:5c:28:48:38:bf:c6:d0:df:a0:ba:
f0:87:77:dc:fa:aa:09:03:32:e1:83:6f:cd:ea:cf:
2e:cf:6e:25:b5:a9:b1:2e:77:da:46:13:6c:d1:f0:
41:68:06:48:f9:95:ce:14:33:fe:3c:fd:af:f6:95:
bc:c8:26:99:65:d4:02:9a:25:a6:f4:f3:2d:a9:c8:
28:f3:81:de:bb:8b:70:a3:58:d1:a9:44:ce:54:85:
60:ef:3e:93:5d:34:6c:9e:00:5a:d0:3a:14:ca:a4:
c7:bd:a5:a7:fd:5c:1d:de:13:3f:dd:a0:95:5e:a7:
bb:81:23:c7:20:a7:7e:d1:b9:ca:b0:25:fc:9a:32:
c5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B5:02:89:3E:09:B2:5D:B2:DF:AC:4A:93:70:D2:66:F5:0D:07:4C
X509v3 Authority Key Identifier:
keyid:60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:bb:3b:c5:1d:c3:76:0a:03:96:8d:07:ec:64:f8:02:2e:00:
00:90:dc:c0:70:e5:db:18:ff:6c:37:11:30:83:2f:d2:da:34:
f4:b0:e4:55:b2:6f:b2:e6:f8:56:02:90:83:b4:65:92:6a:d8:
09:26:c0:4c:39:0b:e7:f8:65:60:dc:34:f8:e6:44:46:82:09:
d9:54:bb:c8:fe:4e:ed:c4:23:c3:58:e6:db:23:bb:80:d4:55:
fa:41:0f:42:81:fb:f5:be:c3:f3:88:af:33:08:41:4a:e9:d6:
c6:7b:27:1e:77:5c:df:ff:98:63:40:f9:24:4e:3e:de:b2:c4:
e6:5d:67:ff:68:88:2b:25:1f:9d:1e:18:9b:bc:62:5e:7a:24:
63:f8:c8:97:8e:8f:68:ca:88:f8:79:41:b9:b9:61:66:2e:96:
4f:05:fd:5f:5d:76:57:9a:c2:4d:0e:9b:22:80:66:7a:1c:dd:
e1:49:78:80:b5:1b:e0:cf:9d:da:91:38:f0:75:64:15:a9:7b:
7c:f2:2d:83:6a:95:8a:d2:da:11:a2:89:cc:c9:b6:97:56:11:
b1:95:c9:28:d3:ac:d2:44:59:e4:c1:a5:29:f7:85:05:e7:4d:
46:12:e8:34:cb:cb:3a:35:7d:f1:b8:73:a9:31:39:08:9e:91:
b0:14:f7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 22:55:09 2025 by rpki-client