
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
File: YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft (raw, json)
Hash identifier: nX0hRC2eY8GjuQSFu1Er0eXy/TAmuzsMh71rHyW3IXE=
Subject key identifier: F5:F3:02:E2:DA:12:66:0F:35:7A:F5:7C:8D:21:A1:7F:47:CE:22:42
Authority key identifier: 63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
Certificate issuer: /CN=63082d6d3a1dc501795737537ca74d27a80265a2
Certificate serial: 0197790AAB3D8F679F82ACDE6DD67560E861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
Manifest number: 05FA
Signing time: Mon 16 Jun 2025 14:00:31 +0000
Manifest this update: Mon 16 Jun 2025 14:00:31 +0000
Manifest next update: Tue 17 Jun 2025 14:00:31 +0000
Files and hashes: 1: YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl (hash: ZH21M3VZMo+Z0QOSdb9pAOzCFfUy3BlTwRa2rzEpwHw=)
2: f2FgVGUm7ew3jTK5FObbP3LTPPk.roa (hash: 8qyHUVxUmi4tpeejWbXqg/3Pv9PdqUEVCmg6L5A1g8A=)
3: za-qKZumAJe5b0iEnZwziy5sjdU.roa (hash: XmSM2jKwnfhXk2mj4bb8vX6fKWH5CT7ewc4M4Z9cJsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:0a:ab:3d:8f:67:9f:82:ac:de:6d:d6:75:60:e8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63082d6d3a1dc501795737537ca74d27a80265a2
Validity
Not Before: Jun 16 14:00:31 2025 GMT
Not After : Jun 17 14:00:31 2025 GMT
Subject: CN=f5f302e2da12660f357af57c8d21a17f47ce2242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dc:d9:cd:83:e9:85:a2:31:4d:a1:51:08:32:
9d:11:74:23:68:57:46:58:22:9a:04:98:84:d2:2d:
6a:63:ed:5a:3d:6f:cf:1f:5e:67:b8:cd:3b:86:90:
e0:86:ac:af:0e:22:1d:a0:a6:55:7f:9f:bf:b8:1a:
46:6d:f2:89:5b:9b:e7:67:8f:f6:df:49:bc:05:ca:
cb:14:c6:fa:50:dc:0d:a8:08:1a:5a:c1:68:e2:6d:
9c:87:ce:0e:94:0f:cc:b2:2f:13:0a:59:ac:2a:fe:
b6:f6:07:c8:6a:fa:67:b1:53:3b:6a:c8:1f:f2:cb:
67:40:e1:ee:8c:74:d5:47:b2:50:71:72:8d:7d:0e:
66:59:9b:83:38:ea:ea:66:24:33:21:86:78:80:88:
06:8e:ec:b5:a1:d5:60:ca:ae:71:b8:e3:be:b6:eb:
a4:c4:64:b6:f4:6a:45:d9:99:90:53:af:6a:e0:ae:
ac:38:e4:e8:8a:ec:1b:96:fe:b4:5a:87:6e:92:88:
3a:8b:26:79:07:d1:d3:ee:8a:79:82:02:7b:3b:98:
95:3d:f8:ed:80:8f:3b:0a:60:1d:37:5c:b4:24:94:
e0:da:8d:f2:78:3c:85:12:9e:e0:4a:68:a5:ba:dd:
b6:07:f2:48:cd:e3:70:bd:27:35:86:e6:2e:81:17:
57:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F3:02:E2:DA:12:66:0F:35:7A:F5:7C:8D:21:A1:7F:47:CE:22:42
X509v3 Authority Key Identifier:
keyid:63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:cf:13:71:7e:e9:d7:e2:24:c4:87:68:3e:fd:e6:5d:4f:99:
5f:7f:5f:e2:6f:22:c7:0d:9e:70:1a:af:4b:73:7a:1e:07:e7:
9b:55:d1:41:7d:c9:da:29:a1:32:9f:85:4b:45:bd:f6:c2:21:
88:43:8b:a3:e8:30:8b:f7:59:20:03:e0:52:fb:00:e5:79:f3:
cf:22:34:db:77:78:5b:d5:47:12:de:66:3e:12:f3:5b:e9:37:
57:1e:8b:72:32:01:c2:ae:19:1d:c4:3c:98:fc:ae:5e:b3:1a:
84:8b:78:0b:9a:29:2f:6f:b8:d3:83:ca:e9:01:db:52:00:2c:
e8:f9:7f:a3:6f:cd:74:25:fd:2d:11:d1:b1:5c:9a:c5:7b:d2:
c8:c4:fc:36:0b:4c:f1:1f:b5:8e:4c:f0:0f:88:a4:20:50:4c:
4c:eb:34:89:96:15:09:b6:cd:d6:e5:cf:7c:f7:c7:0d:9e:6f:
c6:a6:ac:06:42:fb:ec:fc:62:27:76:01:d0:90:58:a1:08:15:
22:75:0e:e9:ec:73:61:d5:2c:81:d3:b1:13:98:1d:58:80:37:
2c:1a:a2:a4:44:0b:e0:b6:f7:81:1f:75:77:36:de:13:b9:04:
8e:27:11:9f:5e:03:ee:f9:4f:17:bc:1d:2d:05:27:1f:d9:8e:
bc:e7:b0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:05:14 2025 by rpki-client