Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
File: YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft (raw, json)
Hash identifier: OdVEXg6DcZp8bKizRMC9PkuFwcCAAIiNS+TN/LmKZ7Y=
Subject key identifier: 7B:23:15:83:9D:34:CE:5D:6A:99:68:F2:6F:A1:53:53:16:BC:89:D7
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Certificate issuer: /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial: 01977754030CE1282C7EDC855481C2FE346D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
Manifest number: 1167
Signing time: Mon 16 Jun 2025 06:01:23 +0000
Manifest this update: Mon 16 Jun 2025 06:01:23 +0000
Manifest next update: Tue 17 Jun 2025 06:01:23 +0000
Files and hashes: 1: 12AV02WzatVTC7uOxlQeaKEJtqA.roa (hash: 7hl8YaRyf0cdSgyKBQo2CnhX6la19soTodVA7PjTEdQ=)
2: 56aGLoH7Bse2LO-_92GKlUjhbBU.roa (hash: 9BM7a0N91eERqW7VUlPdX8P/hOguhSCnOBLInaqrNrM=)
3: YKI1QxSsRCvMI42z7gKMRoDEuho.roa (hash: WYNYodUvJC3YWBcxN+4I4LLLEMPhhJhkLJzrQ0VkxhI=)
4: YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl (hash: iFzbRxyQcMYt08Ds4MnY13Gr7c4IqMfa0JKQYblek2E=)
5: _s7rDdjPGkqITnjs4HXWtYEhylg.roa (hash: yutc5QjtO14cszaNAoscezE/PV3utOm8cKnd/h6llDE=)
6: pSukRsg6yv_sYe0co7sE6hrZh3c.roa (hash: OlYqoIOvdl7EmyHKtVzqNVI4kNzxjN4mpc7eyWrczUM=)
7: rAyW0TP-vGc73Omwbt5tXG5Tfr0.roa (hash: 5nh1erpOS3lLyg2wz81Za6vItHnPOnIJ07yWuIvXvjs=)
8: wA335v0tN6j8TOVCya6MJB0vGZE.roa (hash: Wv3IFbmlxvLR5yW5Px59rxWtiozQA3QTcuT4bqFgTbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:54:03:0c:e1:28:2c:7e:dc:85:54:81:c2:fe:34:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Validity
Not Before: Jun 16 06:01:23 2025 GMT
Not After : Jun 17 06:01:23 2025 GMT
Subject: CN=7b2315839d34ce5d6a9968f26fa1535316bc89d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:95:d6:f7:50:c4:7c:d9:9d:1f:aa:74:40:79:
b1:90:a7:d5:7d:b8:d3:c4:b1:ac:20:aa:9a:8b:fb:
d4:ca:96:30:0b:bb:7b:80:fc:ac:02:48:a6:0c:24:
91:52:5f:ab:d0:66:42:fc:ab:52:25:b5:d8:92:c7:
54:e6:5c:69:44:bd:80:88:f1:ce:08:d4:0a:73:6c:
1c:92:97:b8:7d:68:00:8c:8f:6d:9d:ee:78:d0:d2:
51:b7:50:c4:08:e0:13:99:92:30:40:99:f7:d1:ee:
1b:e3:db:d0:2f:28:d1:1a:e7:ce:f7:97:d2:0a:5a:
3d:3d:74:c8:bc:5f:17:23:e6:99:c8:01:ab:aa:aa:
a8:75:2a:05:e5:2d:8e:8d:75:cf:c1:f3:db:79:d1:
b4:c9:54:29:a6:4a:ea:97:da:e5:de:62:2d:50:a7:
21:04:af:b8:62:03:cc:7b:45:2d:07:8d:14:29:a6:
ca:d1:d9:b4:7e:34:a2:bc:0b:31:20:7c:8d:72:eb:
e0:11:e9:d9:b3:d4:ba:f1:01:03:bb:f9:66:f2:8d:
83:1c:b2:19:80:2b:1d:b5:e9:dc:e9:2c:88:fb:f5:
ae:90:97:88:58:00:60:03:22:87:fc:bc:0c:09:46:
4c:96:ee:af:70:9f:32:9d:31:41:cd:a0:ae:fe:89:
92:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:23:15:83:9D:34:CE:5D:6A:99:68:F2:6F:A1:53:53:16:BC:89:D7
X509v3 Authority Key Identifier:
keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:6a:89:55:40:cc:c2:aa:c0:6a:df:90:9d:49:45:32:a3:57:
82:1f:ae:a1:9d:4d:e5:3d:a7:8d:69:62:cf:3a:11:82:dc:34:
fa:06:79:68:d3:88:b9:82:a6:86:d9:5a:af:30:4d:ab:0a:60:
5c:fb:44:62:f7:c6:5c:f8:5d:e1:e8:18:1d:82:b4:08:95:83:
87:b9:9c:93:da:b0:37:2f:24:42:61:53:af:9f:48:20:b1:c2:
6e:48:9c:87:96:f3:0a:96:db:e1:1d:24:c8:f8:2c:0d:8c:11:
ab:18:f4:c7:05:1d:d3:d9:d1:a1:ad:98:89:cb:ba:cd:55:a4:
82:92:90:93:2e:f7:24:9b:19:ba:6b:3d:01:6a:96:fe:62:a3:
27:2e:a9:6c:25:74:b4:1c:98:0f:79:bd:c1:cc:63:57:be:15:
8f:5e:88:c1:14:10:33:85:b4:e2:71:25:47:f8:09:77:04:09:
99:60:b4:d7:b6:c7:fe:5d:9c:00:72:30:ae:6a:a7:c6:d2:a1:
99:95:9e:9c:70:ae:05:b8:13:73:28:7d:77:f7:50:ba:fa:6e:
7c:cb:7b:fb:36:de:d9:6d:f1:b9:f1:95:a3:f1:b4:bb:a3:8f:
e3:82:4a:32:07:6a:b3:22:0d:8e:5e:93:74:a7:d0:81:2d:6e:
1b:65:2e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:25:59 2025 by rpki-client