Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
File: YgTQ-JHcR16nA-be89bq0ej3wtY.mft (raw, json)
Hash identifier: 8tGATV03DxLTC0RkHb+NVPs2B+/Lifl7rEQfko8iqU0=
Subject key identifier: 6B:D4:7D:41:44:CF:E3:62:E2:BD:FB:55:B6:62:25:B5:B0:E8:E5:24
Authority key identifier: 62:04:D0:F8:91:DC:47:5E:A7:03:E6:DE:F3:D6:EA:D1:E8:F7:C2:D6
Certificate issuer: /CN=6204d0f891dc475ea703e6def3d6ead1e8f7c2d6
Certificate serial: 01976960AB33772664EE9DBA33F3C198B997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
Manifest number: 158A
Signing time: Fri 13 Jun 2025 13:00:32 +0000
Manifest this update: Fri 13 Jun 2025 13:00:32 +0000
Manifest next update: Sat 14 Jun 2025 13:00:32 +0000
Files and hashes: 1: YgTQ-JHcR16nA-be89bq0ej3wtY.crl (hash: O8WHa2kKnQx5Ia88W18yBPi5Anie9kkbYGIg2ikE3ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:ab:33:77:26:64:ee:9d:ba:33:f3:c1:98:b9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6204d0f891dc475ea703e6def3d6ead1e8f7c2d6
Validity
Not Before: Jun 13 13:00:32 2025 GMT
Not After : Jun 14 13:00:32 2025 GMT
Subject: CN=6bd47d4144cfe362e2bdfb55b66225b5b0e8e524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:43:7f:d7:ee:af:36:3c:40:6b:ab:df:cb:c1:
0e:87:4b:ab:71:86:8f:3f:29:d9:e6:22:68:82:fe:
30:ec:81:e2:04:73:4c:1e:00:8d:e7:f8:ad:5f:c8:
94:8e:30:48:09:38:1d:17:16:69:9b:80:f3:26:3f:
dc:71:1e:ce:02:93:47:22:d2:0c:36:e0:93:0d:ee:
65:3c:4d:e7:7d:f0:fa:34:e1:44:9a:24:b0:2a:25:
94:19:f0:12:dd:2c:68:9d:fe:05:c7:45:e4:bb:8a:
b8:58:ff:bc:c0:2c:7c:d3:6d:b1:2f:09:11:9a:69:
2d:cc:20:15:17:c4:06:8a:07:56:a3:f2:69:43:f6:
23:55:65:f6:0c:15:af:19:d3:dd:e4:46:d2:98:da:
59:a6:43:9c:cc:2e:5e:48:7c:c7:7b:97:77:e0:54:
df:f0:b8:c1:5d:0f:3d:f4:83:fd:67:ce:b1:de:c2:
7c:53:d2:27:52:90:0f:70:5c:d4:d6:09:e2:db:38:
bf:56:39:88:86:77:3d:70:0c:4b:66:cf:48:e4:7a:
d1:69:3b:39:fb:84:af:04:8d:f2:fa:ed:84:5b:49:
0e:5d:ee:97:cc:6b:04:c8:39:56:e9:48:27:1f:a2:
85:cb:34:54:02:e4:34:79:54:da:e4:6c:df:ff:a1:
3d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D4:7D:41:44:CF:E3:62:E2:BD:FB:55:B6:62:25:B5:B0:E8:E5:24
X509v3 Authority Key Identifier:
keyid:62:04:D0:F8:91:DC:47:5E:A7:03:E6:DE:F3:D6:EA:D1:E8:F7:C2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:08:cc:96:d2:db:28:f2:b2:46:db:3e:3f:2b:b2:58:36:f5:
c9:b3:39:91:79:d6:15:3c:80:ad:0c:32:fe:92:9d:25:80:b6:
39:eb:df:09:a4:97:75:62:8b:bc:9c:3c:3a:81:8c:ea:79:13:
e1:61:bd:7d:bc:73:b8:5c:07:10:43:34:1c:76:de:3d:0d:b7:
c9:f9:eb:9d:0f:fc:d3:bb:c0:b1:df:a0:94:75:71:06:9b:2c:
97:01:6c:25:0b:2b:60:87:99:27:a7:b0:f7:db:17:26:91:6c:
8b:23:e6:2f:58:4c:91:e3:b2:58:68:0f:4f:a3:5e:7d:cc:bf:
91:a2:30:be:e4:53:f5:e4:ff:94:d5:88:6a:6b:9d:a3:e7:bf:
03:92:bc:ed:f3:c1:eb:74:d4:2d:69:40:f2:b2:6e:c0:ea:f7:
44:5c:ef:52:2c:d0:c5:1a:df:81:32:c4:04:cf:99:14:cb:4a:
ae:5b:74:8d:7d:d2:f2:63:80:a8:33:87:95:16:77:8b:6a:43:
f3:c6:e8:5d:72:24:f8:e2:af:1f:6d:3b:79:71:00:02:7c:74:
8e:58:71:1a:de:43:40:da:4d:68:bf:4d:7a:7a:08:a4:04:57:
af:d3:60:3c:1c:14:09:77:f1:66:a2:97:de:35:54:b9:b9:c1:
a1:e9:d2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:58:28 2025 by rpki-client