Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
File: Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft (raw, json)
Hash identifier: 0KGUPYf5KHN7y6o9v1Z/tdPj7l20gNX3ZB4I+4uVq7w=
Subject key identifier: 64:2F:58:57:F3:03:04:5B:41:4B:9F:AF:AF:84:C6:7F:F0:49:0A:A9
Authority key identifier: 63:3B:68:95:FE:49:93:39:7B:66:23:2B:B0:A2:D3:E3:C6:25:CC:1B
Certificate issuer: /CN=633b6895fe4993397b66232bb0a2d3e3c625cc1b
Certificate serial: 01977C79C36C880DB9691116FA67FDD5E48F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
Manifest number: 0FB2
Signing time: Tue 17 Jun 2025 06:00:43 +0000
Manifest this update: Tue 17 Jun 2025 06:00:43 +0000
Manifest next update: Wed 18 Jun 2025 06:00:43 +0000
Files and hashes: 1: YFIa0scc_xVUT5FKi7LKvASoEWc.roa (hash: V1CwEQLm9iXZGzptcaHc4LFmcOryBT2Kfmx1HSv4RTc=)
2: Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl (hash: acVQzoszibTXiUf6KX3A14CJjkezpUHQHmUZMszVyuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:79:c3:6c:88:0d:b9:69:11:16:fa:67:fd:d5:e4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633b6895fe4993397b66232bb0a2d3e3c625cc1b
Validity
Not Before: Jun 17 06:00:43 2025 GMT
Not After : Jun 18 06:00:43 2025 GMT
Subject: CN=642f5857f303045b414b9fafaf84c67ff0490aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:95:c0:be:ab:fc:e5:73:38:d2:46:14:2a:f9:
05:e4:d6:6a:5f:e1:fc:e9:d0:71:dc:f0:f3:2b:26:
a0:f3:53:fe:7e:cd:4a:b5:10:a1:be:c2:ce:cd:c2:
56:c5:9a:31:75:ad:5e:65:8c:d8:20:19:d6:42:48:
85:dd:61:f0:6a:22:27:37:75:c3:65:c3:28:c1:e8:
fb:ec:81:57:a7:66:20:2b:b8:f1:89:e0:44:7b:2a:
04:1e:0c:f3:23:d8:ad:41:c6:3b:f5:f0:17:e6:bf:
33:a0:22:26:15:60:41:16:25:19:aa:b6:56:5c:00:
41:e5:56:df:61:4f:6f:10:a4:bd:bd:3d:51:02:fe:
61:94:d7:4e:64:6f:a6:fd:30:2e:8c:29:5b:ae:3d:
8f:c8:49:b0:81:f8:67:1a:3c:75:1d:9c:29:32:d7:
dc:62:1b:ae:88:d5:35:34:a9:bb:11:62:6d:e3:eb:
31:9e:05:0b:cf:2e:99:57:0b:18:b1:d5:e7:23:c1:
e0:96:ba:b9:0d:96:59:cd:68:46:67:6d:ff:35:cd:
05:c4:c3:52:2e:17:07:d4:81:d4:4f:33:38:44:35:
4b:53:cb:e2:f2:02:f6:fd:dd:c3:56:71:e2:a3:82:
7a:4b:c9:01:1e:9c:f8:7c:ce:33:18:cc:1e:f6:2c:
6a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2F:58:57:F3:03:04:5B:41:4B:9F:AF:AF:84:C6:7F:F0:49:0A:A9
X509v3 Authority Key Identifier:
keyid:63:3B:68:95:FE:49:93:39:7B:66:23:2B:B0:A2:D3:E3:C6:25:CC:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:0b:ae:d3:01:d3:b1:a6:91:a2:b0:68:b7:97:63:a1:c8:91:
67:b3:52:db:53:ff:15:a9:db:05:a1:a7:0a:13:fa:4a:a3:1e:
7b:b1:7d:12:3e:10:bf:d1:cb:da:05:90:f8:fe:52:e4:e7:1d:
81:b2:a7:b1:cd:4b:08:34:ff:12:06:dd:57:36:57:a6:b0:18:
33:1d:7b:d6:b2:63:d7:e6:34:6d:db:1d:40:06:df:3c:3f:14:
ed:ed:ca:60:5d:a8:f8:41:cb:2e:51:1f:3d:e6:fb:3e:da:e5:
6e:27:f6:92:51:b8:e0:4f:3a:78:a8:3d:be:9e:5f:0c:11:cb:
bb:20:1d:d0:40:49:c9:63:80:79:12:2d:9f:53:7d:e8:68:8d:
54:59:87:d9:0d:d4:e4:2f:ca:8e:7b:3e:a8:ff:c4:33:c1:05:
4f:7d:8b:b5:21:c0:fb:e5:09:7e:d9:03:a9:64:b3:fa:82:fe:
69:db:29:5d:44:e1:30:1a:1f:d7:4e:fb:4c:d7:12:20:77:f3:
e1:4a:5c:9a:89:5f:15:dd:cc:d7:ae:25:bb:7b:fe:4a:f3:4f:
80:17:26:3e:2a:75:c2:6d:c9:97:df:68:22:7b:c6:6b:94:a9:
62:d0:57:0b:db:30:1f:f1:c8:77:1b:e6:39:b7:48:bb:8c:2e:
7c:3e:10:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 14:32:16 2025 by rpki-client