Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
File: YCGk2qfc9KTLCKxHRzdfaYquhkM.mft (raw, json)
Hash identifier: Vz2kTmNVgiwwh3z+AzoRokCC36bg2f7Y8k547x1kgKk=
Subject key identifier: BB:D3:A0:04:4C:1B:28:1A:9B:E6:A1:4E:57:36:D3:41:45:B1:65:BC
Authority key identifier: 60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43
Certificate issuer: /CN=6021a4daa7dcf4a4cb08ac4747375f698aae8643
Certificate serial: 01977151703CFC27624DA88F5383E8E20F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
Manifest number: 0272
Signing time: Sun 15 Jun 2025 02:00:51 +0000
Manifest this update: Sun 15 Jun 2025 02:00:51 +0000
Manifest next update: Mon 16 Jun 2025 02:00:51 +0000
Files and hashes: 1: YCGk2qfc9KTLCKxHRzdfaYquhkM.crl (hash: KyJ+3RTjiDV30Ou5nWy0Kc4Q1d5U+q/G9AVwcP+QoFk=)
2: nsWYD62GXvXwJfFUS4kAQcZmYTU.roa (hash: jHcDfB6LIATegfSEiVgq0NQFeMD0sWc8LqYc2Z+2oaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:70:3c:fc:27:62:4d:a8:8f:53:83:e8:e2:0f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6021a4daa7dcf4a4cb08ac4747375f698aae8643
Validity
Not Before: Jun 15 02:00:51 2025 GMT
Not After : Jun 16 02:00:51 2025 GMT
Subject: CN=bbd3a0044c1b281a9be6a14e5736d34145b165bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d8:d4:30:53:74:d9:33:cd:66:44:bc:a7:fc:
73:10:d5:96:89:89:f3:cf:32:83:39:1c:e2:90:a4:
47:61:95:7c:46:31:49:31:65:1c:39:80:8c:ec:12:
c5:40:c2:e5:34:61:d8:54:7d:17:58:2d:b8:2d:72:
be:16:7a:18:1b:67:18:36:fd:22:fa:64:c1:e3:de:
f8:74:0f:c7:38:06:48:52:d4:14:6c:54:ba:1c:d5:
09:99:8e:1a:94:69:37:6f:0e:72:42:d7:0b:42:f6:
e2:0f:1f:0b:68:92:d6:d8:47:14:39:fb:31:7f:d0:
74:33:f0:7b:52:5d:ef:18:36:0a:f5:3b:ea:cb:ea:
fa:9a:48:8e:d2:33:9e:cc:08:44:10:25:ab:7c:2c:
04:f5:4e:2e:ce:37:a7:08:ad:3b:44:f5:29:10:c4:
40:37:9d:4f:60:3e:47:b9:4c:c2:06:7b:fa:cb:c8:
79:8d:d2:34:b5:07:60:ec:5a:d8:38:a1:a2:ec:e1:
df:fe:da:6e:b6:4c:e2:53:9a:ce:53:90:3c:58:ab:
d4:12:e2:7a:8c:04:7f:28:6b:23:5f:c8:e9:8f:09:
81:2c:ea:a4:94:38:87:9e:1a:04:86:8f:42:46:a7:
36:24:22:e1:ab:5b:b2:37:eb:bf:ae:e3:26:8c:64:
69:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D3:A0:04:4C:1B:28:1A:9B:E6:A1:4E:57:36:D3:41:45:B1:65:BC
X509v3 Authority Key Identifier:
keyid:60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b2:32:37:17:a1:94:d5:12:69:f1:8c:61:fe:bf:13:fb:61:
e8:26:9a:3d:1d:30:f2:35:12:94:f9:79:ab:ff:90:2f:f5:dc:
16:b3:29:c2:3d:17:50:5b:6b:a7:cc:1e:e9:a1:fb:44:27:87:
5f:62:3f:d9:21:c0:17:22:4f:c7:df:57:40:3f:9c:d1:44:4c:
37:3d:a4:3f:43:d7:1a:08:11:af:2b:17:d2:de:81:49:62:be:
ef:cb:ba:dc:ca:2d:15:e0:da:f4:d9:68:41:19:f2:b1:1e:aa:
d5:9b:6e:e6:77:3d:ea:b9:b5:82:24:2d:8f:83:5d:96:cc:b5:
9b:54:c6:c2:05:5c:ed:08:ae:15:16:33:49:34:9f:8b:52:28:
c7:78:c3:f2:44:9b:29:df:4d:47:47:38:54:42:fd:fb:9a:c7:
40:df:66:51:97:f7:26:51:ed:84:f5:a3:fe:1b:90:33:63:21:
36:d3:c1:fc:87:c7:32:b4:24:97:a9:b8:63:7c:b6:72:d3:02:
95:31:e7:a9:20:7b:51:7f:84:0b:3f:a5:88:b5:a4:93:47:9b:
34:b1:f9:d7:65:69:78:72:19:55:84:01:a9:7a:4a:0c:9c:a9:
3b:ae:b0:0b:90:39:b4:22:a5:fc:d8:d5:86:b3:ba:70:4e:a4:
d8:69:98:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:45:13 2025 by rpki-client