Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
File: yoFg7-OfGjB3_dL68ipkgEtUE4I.mft (raw, json)
Hash identifier: +OBCORB1c5gRBx+3i5Tw6O46gfIm892Gk253kXRK0Mk=
Subject key identifier: C3:50:E2:4A:31:3A:75:46:ED:5D:4C:04:1C:C2:9F:28:A0:87:45:A8
Authority key identifier: CA:81:60:EF:E3:9F:1A:30:77:FD:D2:FA:F2:2A:64:80:4B:54:13:82
Certificate issuer: /CN=ca8160efe39f1a3077fdd2faf22a64804b541382
Certificate serial: 019853B1C6D24F028DB3617F637D213F6396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
Manifest number: 12A6
Signing time: Tue 29 Jul 2025 01:00:16 +0000
Manifest this update: Tue 29 Jul 2025 01:00:16 +0000
Manifest next update: Wed 30 Jul 2025 01:00:16 +0000
Files and hashes: 1: h-rZd3ShfaYedaYA6tLbzrX_MkU.roa (hash: 6iJffUIazxHr4GTAEcidCyRV9SNB9d9va8nX06PMskE=)
2: yoFg7-OfGjB3_dL68ipkgEtUE4I.crl (hash: gihMHCu38oZc+VfzJS2xLYbv/Kj2iDMW164A8GP2CkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b1:c6:d2:4f:02:8d:b3:61:7f:63:7d:21:3f:63:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca8160efe39f1a3077fdd2faf22a64804b541382
Validity
Not Before: Jul 29 01:00:16 2025 GMT
Not After : Jul 30 01:00:16 2025 GMT
Subject: CN=c350e24a313a7546ed5d4c041cc29f28a08745a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b2:ea:91:ea:3e:2e:2c:a0:ce:8c:89:75:09:
06:67:fb:fb:fd:1b:d8:4d:bf:7a:fc:bf:c5:5c:d8:
1d:b7:c3:5e:84:09:28:1d:f4:86:9b:ed:a1:ab:d9:
e3:12:93:1e:6f:25:9e:86:e8:47:27:de:c8:65:9e:
7a:eb:be:51:a3:8c:da:c7:cd:53:cc:0b:9f:68:d6:
86:59:b1:3f:13:95:a3:0e:7f:41:cc:05:d0:6a:53:
7c:d3:d6:bf:2d:13:1a:58:7f:d2:37:ad:23:02:e6:
4e:cf:29:a5:e3:a9:8d:81:77:eb:df:a0:16:96:d7:
48:61:64:61:9c:27:ce:ba:ce:a6:58:7d:b8:3e:fd:
62:f7:d6:09:c4:de:c9:db:87:bb:d3:07:af:db:86:
d4:c9:dd:03:42:90:62:83:dd:48:50:ba:53:78:06:
3f:ce:b9:84:8d:95:73:7c:eb:b2:90:2c:f5:3f:e5:
e4:d8:87:4f:1d:b9:6f:4a:2f:8e:c3:57:72:e7:ed:
a3:54:62:bc:93:02:98:9d:85:4e:c2:52:72:9e:f9:
2a:41:bc:b7:54:39:63:1e:b5:56:2a:3f:14:bc:dd:
32:3f:fa:4f:27:c7:e4:d7:57:ed:77:0b:b6:69:b6:
e6:30:14:9b:6f:59:ba:0a:1a:96:df:e1:71:af:52:
5d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:50:E2:4A:31:3A:75:46:ED:5D:4C:04:1C:C2:9F:28:A0:87:45:A8
X509v3 Authority Key Identifier:
keyid:CA:81:60:EF:E3:9F:1A:30:77:FD:D2:FA:F2:2A:64:80:4B:54:13:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:de:de:a6:d9:0c:11:de:a3:13:75:a1:90:81:de:b7:a4:99:
14:a1:7c:01:b8:ad:46:dc:56:3a:70:a4:e9:1a:ad:2e:e7:f9:
01:2e:76:c7:19:ad:e4:a5:23:ba:67:64:57:74:bb:0b:dd:4a:
3d:e7:cb:c6:ae:fe:92:b7:f2:87:04:28:5e:d7:b9:bf:6a:f3:
14:b2:07:cf:0e:42:57:68:47:79:82:e6:28:b2:18:d7:94:6c:
28:66:a2:37:93:42:34:a9:d0:58:c5:7e:96:63:9e:c9:a3:36:
85:71:f8:1d:87:d7:8d:52:ab:5a:ea:85:68:5d:37:95:6c:72:
56:57:19:3d:0d:a8:17:fb:e8:0a:de:c6:57:bc:5d:03:b0:30:
f7:11:32:17:c9:3d:1d:7d:00:77:f1:64:f0:4d:97:4c:a5:91:
98:b1:f1:8c:08:e3:29:aa:bc:36:49:51:e6:ed:7c:f3:17:51:
90:a3:eb:d5:e6:5d:a7:24:c3:ba:42:7a:0e:8f:fa:92:5a:60:
11:71:da:cd:5e:94:04:f6:a4:0e:9e:d3:ae:29:6e:ca:c2:db:
2c:38:d3:51:f5:9e:64:1e:c8:62:2b:82:32:3a:9c:18:6d:76:
e6:ce:12:79:70:8b:f1:35:90:9c:f8:69:f9:55:ea:3c:0e:43:
ad:8b:d5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:06:41 2025 by rpki-client