Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
File: YZz5qeC2RhrYM4dawRaPiSP9VQs.mft (raw, json)
Hash identifier: OP+e8LYQXtJ9QUP8uSlbzJOb8LdJk7zwRx1gSeWxQuc=
Subject key identifier: FF:A4:A8:56:43:F6:A3:33:7F:EF:98:C4:2E:CB:8D:26:3C:12:B0:6F
Authority key identifier: 61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B
Certificate issuer: /CN=619cf9a9e0b6461ad833875ac1168f8923fd550b
Certificate serial: 0197684E5B4A1964A404556490D1EB2430C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
Manifest number: 020D
Signing time: Fri 13 Jun 2025 08:00:54 +0000
Manifest this update: Fri 13 Jun 2025 08:00:54 +0000
Manifest next update: Sat 14 Jun 2025 08:00:54 +0000
Files and hashes: 1: YZz5qeC2RhrYM4dawRaPiSP9VQs.crl (hash: 1Mcw6wGLwDtUKnlBtNBUvqQUs6UdD98vsVVTbg9vS8A=)
2: huRseKKMZ6MrEbEtnTidADNp1Qk.roa (hash: 2Cpw72DhJ+0Co4QK9K/ptsbGLArKbkMx0RKaT4rzilY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:5b:4a:19:64:a4:04:55:64:90:d1:eb:24:30:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=619cf9a9e0b6461ad833875ac1168f8923fd550b
Validity
Not Before: Jun 13 08:00:54 2025 GMT
Not After : Jun 14 08:00:54 2025 GMT
Subject: CN=ffa4a85643f6a3337fef98c42ecb8d263c12b06f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:27:99:b7:62:d6:87:95:b3:78:20:1f:50:ae:
c7:66:b9:5d:5f:18:d3:58:e5:85:53:da:15:10:fd:
00:50:ca:c9:0d:a3:a0:ad:d4:2c:3e:a0:67:91:d0:
5a:3f:69:5f:29:0b:9d:ee:ab:f1:8d:92:38:78:d1:
a4:09:30:b7:f6:1a:7c:b8:9b:e9:df:c9:97:40:9c:
8a:ef:52:3d:d5:45:ea:65:7d:1d:7d:15:51:5e:00:
b7:c9:50:c2:ad:93:88:14:3e:8d:4e:5f:0e:de:f3:
fd:87:b4:e4:31:29:f1:f3:2c:93:41:8f:99:81:2a:
53:d9:d0:4a:51:9d:37:91:3a:25:ff:11:f8:6f:58:
21:3e:8f:f9:26:dc:e0:87:f9:09:e8:97:8a:93:a7:
76:e2:54:50:c6:a4:e6:ad:94:94:0d:9c:3a:90:ff:
ce:87:4f:5e:44:6d:07:a5:a0:76:9e:60:50:50:b2:
f6:9b:4c:e1:1f:47:8b:70:85:bf:07:71:a3:9a:75:
25:72:fe:2e:06:39:f1:65:31:45:41:e2:d3:d1:62:
2a:f1:bd:52:f7:64:9a:81:6a:f9:17:a6:d1:12:0c:
4c:20:c3:98:06:c3:39:1c:a3:ae:6b:16:69:62:09:
a4:7f:d0:c6:97:b8:35:04:ca:8c:64:a4:16:92:20:
a2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A4:A8:56:43:F6:A3:33:7F:EF:98:C4:2E:CB:8D:26:3C:12:B0:6F
X509v3 Authority Key Identifier:
keyid:61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d7:7b:d4:13:61:bf:06:a3:c3:57:63:73:05:78:90:cf:40:
e4:e2:f4:01:80:9c:da:2a:04:91:18:3a:34:49:d5:4b:58:cf:
c1:ce:7c:1d:94:e3:8b:49:b5:af:b9:cb:e5:ba:35:89:94:e7:
a6:c8:de:d8:d3:cf:10:82:71:c7:4d:a2:5c:c8:fb:09:b1:cf:
a9:f7:07:ca:b3:7a:75:15:3f:19:08:1d:dd:38:19:0d:5a:b1:
8d:b3:27:cc:49:45:49:7f:b3:f1:c1:f6:f8:f0:6d:10:d5:47:
f3:cc:93:74:41:21:b6:a6:1c:fc:4f:fc:d3:d3:e7:17:af:20:
75:30:89:85:2f:98:d8:51:40:23:58:c0:51:38:1f:d7:a2:f5:
e7:6e:ae:b2:84:d7:c1:ec:b9:27:66:b6:c1:61:ff:87:15:2f:
0d:41:67:50:67:80:5e:b4:67:81:33:5f:7c:b3:95:0e:33:5d:
32:67:29:e8:cb:46:e1:18:56:d3:2c:7d:3b:74:df:18:dc:63:
44:9d:54:2b:66:74:63:56:54:ac:8a:30:9b:3a:a9:2f:a4:43:
5b:8f:40:d5:62:00:4a:d7:14:62:3f:07:b0:b7:d0:2c:34:54:
8a:4e:f1:eb:ac:bb:1f:db:df:01:6f:ee:b5:54:8b:53:ea:30:
0c:4b:d2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:44 2025 by rpki-client