Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
File: YET26nnk4qPgKos47QzTpAWROKw.mft (raw, json)
Hash identifier: HCdFpOjuz0CfDQOorqKqqEV/dbGBQR+I9nIg6L61NI4=
Subject key identifier: 7B:8D:C9:58:8A:B0:5B:78:EE:41:59:89:93:1E:EA:7A:11:D4:F4:D5
Authority key identifier: 60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
Certificate issuer: /CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Certificate serial: 0197782EBEF925A509494DB20F42CC99D571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
Manifest number: 1596
Signing time: Mon 16 Jun 2025 10:00:18 +0000
Manifest this update: Mon 16 Jun 2025 10:00:18 +0000
Manifest next update: Tue 17 Jun 2025 10:00:18 +0000
Files and hashes: 1: FpSNZXq3Bs_lAOfoxnm2_1Ntexk.roa (hash: P0ueHi3T6HBQ/Yjh4YAxSote8hQe/slz/U1OtoX8X6M=)
2: YET26nnk4qPgKos47QzTpAWROKw.crl (hash: Mfow+16Pb1nZFXm+SpqYW+z6BAiYHIdyFFBaEHM0cHU=)
3: iOzGDAy-qErjiYCUQPq5S2xsHRA.roa (hash: EO5Nyg7UrTNVSVoeALt1d3217TiALMgeZ+f/YmIuYh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:2e:be:f9:25:a5:09:49:4d:b2:0f:42:cc:99:d5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Validity
Not Before: Jun 16 10:00:18 2025 GMT
Not After : Jun 17 10:00:18 2025 GMT
Subject: CN=7b8dc9588ab05b78ee415989931eea7a11d4f4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7e:93:68:44:1c:7d:14:30:3b:95:5f:17:33:
6f:3a:97:76:43:7b:6e:6b:9e:7f:9e:6c:bc:a6:fa:
25:9f:77:d3:89:1f:0c:49:32:40:13:e0:2e:e5:9c:
41:87:f1:85:d2:64:4a:e1:3a:b6:8f:79:94:72:0c:
fa:fa:7e:bf:fc:5e:a4:87:df:32:73:ce:17:6c:9c:
2d:bb:30:bf:03:f5:1f:fe:05:08:e4:61:73:c2:58:
99:6c:3c:81:4b:e1:f0:55:bb:95:5b:e3:e0:fe:ef:
2a:95:c7:4b:d7:5f:7c:61:31:81:ca:ad:e5:86:ef:
cd:29:26:d8:41:bb:87:bc:3f:30:ef:ff:6f:87:90:
85:37:81:ed:ec:b6:5a:53:32:46:bb:93:b2:ce:b8:
65:f4:4d:d2:50:4a:35:ce:10:55:5b:f4:44:da:c8:
96:2e:6c:fc:d5:64:d2:82:c4:f0:9c:19:63:f1:b6:
db:f2:15:01:90:9e:57:fe:ca:e3:d6:63:38:e5:ea:
0b:4a:43:1c:2a:3b:d7:78:79:9f:e3:f2:f2:7c:6e:
80:45:b7:55:20:a5:87:2a:4e:2f:f6:e8:3a:e8:31:
82:f8:4c:6b:6c:4c:b5:f9:e3:ee:df:5b:e0:ce:8f:
86:75:ed:0e:97:89:4c:ec:98:cc:75:c3:c5:f6:04:
c9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8D:C9:58:8A:B0:5B:78:EE:41:59:89:93:1E:EA:7A:11:D4:F4:D5
X509v3 Authority Key Identifier:
keyid:60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:8c:45:21:ed:13:97:96:85:50:83:bf:f7:26:54:75:5c:3c:
6b:e8:f6:e5:53:bd:d0:93:6b:03:15:0c:9a:bd:8e:2a:d8:77:
ce:27:86:c4:2a:8f:a4:15:2a:b4:5e:a8:f9:37:84:cc:6c:c9:
30:7a:e5:18:22:96:08:3f:6f:c9:d5:a6:4d:77:7b:d9:55:2b:
04:db:02:8f:74:2d:96:9f:c1:7c:14:d0:9f:62:95:be:b7:3d:
90:9d:2a:b8:ec:73:e4:1a:4c:6b:52:73:d7:12:95:71:e2:3a:
2b:4d:13:a6:9b:c4:43:b0:ed:ed:78:a0:d5:46:c1:4b:24:d5:
d2:17:17:33:05:68:18:5f:e2:7c:9f:0d:fc:57:da:76:36:2d:
f8:7a:13:77:b0:0c:44:49:17:f9:9a:74:de:87:03:44:5e:4e:
63:26:b4:da:82:05:52:29:a8:03:3b:14:40:48:79:71:d7:19:
33:33:47:3e:a0:39:5d:5a:9a:44:e3:97:f1:c0:65:c4:02:52:
dd:34:98:d1:ce:d0:dc:ef:29:ff:f3:15:d8:dc:22:57:d4:24:
60:9a:db:c6:13:80:a1:88:c5:cc:21:1d:e1:8f:70:57:df:dc:
05:2e:83:05:03:6f:c3:09:0e:1d:62:c5:c8:e6:1b:e6:b4:02:
5e:a0:75:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:09:15 2025 by rpki-client