Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
File: Y0JgC_HMkhaub-FpoenVQYrZOiI.mft (raw, json)
Hash identifier: CWtkHGsY5AvjbmK10+eA9BPXnsOroQJBrTItSXTbv+s=
Subject key identifier: 05:24:F0:14:A1:29:47:0E:1F:CF:D1:84:4B:EA:42:EE:5A:86:A8:FF
Authority key identifier: 63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
Certificate issuer: /CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Certificate serial: 019768BBC60F9954444009B6001060FF2D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
Manifest number: 0BBC
Signing time: Fri 13 Jun 2025 10:00:25 +0000
Manifest this update: Fri 13 Jun 2025 10:00:25 +0000
Manifest next update: Sat 14 Jun 2025 10:00:25 +0000
Files and hashes: 1: 8HjMGt2u-FXw7B9KaNMeiFRl_SI.roa (hash: PIXJikr44w+6nZYZyCRJ915rQc/SIe+DvX16n4ZT0no=)
2: Y0JgC_HMkhaub-FpoenVQYrZOiI.crl (hash: Ek6ZrAmPyitTBuQLrTeY5/NpszMptAa4N7dyue0tQn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:c6:0f:99:54:44:40:09:b6:00:10:60:ff:2d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Validity
Not Before: Jun 13 10:00:25 2025 GMT
Not After : Jun 14 10:00:25 2025 GMT
Subject: CN=0524f014a129470e1fcfd1844bea42ee5a86a8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:80:10:b3:c1:29:58:1e:ea:7e:05:95:58:05:
08:a1:99:6a:91:3a:62:86:0e:0a:d3:c4:e8:06:75:
f2:8d:15:12:8c:a6:58:fc:a5:70:2c:29:c6:b2:00:
13:e6:d1:8c:c6:a7:68:28:f3:c5:b3:e0:3a:f1:3f:
a6:e2:25:7f:5a:ed:83:1d:7a:79:91:b5:50:b2:26:
9e:b7:90:51:8c:79:7c:6e:a7:18:a8:a6:61:1d:0a:
2b:a2:0f:4b:d2:17:82:3f:e8:b4:0c:7c:2e:7d:9e:
ff:7f:75:e6:f6:2c:33:a9:a3:77:e9:74:90:cd:28:
8a:11:2e:a9:c8:b5:14:0b:26:da:1b:c9:59:75:00:
06:99:51:b8:b5:b2:8d:31:21:96:10:e6:e0:b0:bb:
d5:e6:7d:ad:7e:c4:4f:97:34:58:21:24:7f:3d:b0:
25:cc:4a:21:a2:ae:56:f3:9e:92:6a:f9:b4:21:c9:
b2:f5:40:35:9d:eb:e7:52:d0:3b:df:1d:bc:bf:65:
85:3f:6a:ea:a9:7f:8b:81:21:b3:21:53:93:68:10:
9e:b2:49:d3:f4:37:31:9b:fc:a7:96:3b:31:ea:81:
34:ab:24:d9:a7:63:e5:2d:27:65:07:1a:d2:3d:d1:
07:f5:3a:18:56:4d:d5:5f:2b:c0:16:46:72:38:d0:
ed:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:24:F0:14:A1:29:47:0E:1F:CF:D1:84:4B:EA:42:EE:5A:86:A8:FF
X509v3 Authority Key Identifier:
keyid:63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:24:d7:fb:7f:bc:c1:88:4c:d7:13:44:20:2e:99:48:d9:93:
97:1a:de:d8:6d:8c:b8:c7:c1:70:61:12:9a:71:7b:e4:93:1c:
f4:a2:2c:87:b2:5e:b9:f4:4a:a2:da:f9:7e:de:f8:57:7e:17:
ee:90:3f:eb:a5:64:d5:7e:77:ce:e4:be:53:66:f3:e1:39:8b:
08:eb:fd:2b:7c:87:6e:54:a8:e7:2a:1f:5e:c9:69:6e:6e:27:
70:1e:c8:dd:1f:0a:ae:81:19:73:10:af:3a:f9:12:31:d0:cf:
1f:19:61:81:1b:7c:af:ea:9d:df:de:ae:2d:01:bf:84:68:ce:
f7:e7:a6:62:f9:e1:b9:6d:a3:3c:f8:ea:3c:f4:32:de:e0:b9:
12:d7:63:6a:83:26:05:e5:e2:5f:cd:1d:e2:31:84:0b:35:64:
5d:48:02:de:39:3d:ea:8c:2b:48:bf:75:5e:02:b0:93:6b:b1:
bb:dd:b4:37:bc:a2:1d:83:8a:84:4e:e5:cf:ae:47:54:b8:f0:
cc:d6:39:00:47:d7:ce:b2:1c:59:5c:d4:80:e9:45:2b:a0:fe:
26:c1:34:89:64:49:5c:43:06:98:2f:23:80:a8:8c:f3:ba:e2:
83:a4:24:0a:d0:65:bd:4c:d0:92:45:cd:61:78:48:f0:b2:8a:
dc:6c:e4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:27:26 2025 by rpki-client