Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
File: yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft (raw, json)
Hash identifier: PV7jiNvjuoD+8ixCJq7qB584Ci73+XGFvrZ9bduTbGU=
Subject key identifier: 6C:B8:5B:56:8F:3F:2D:26:DA:D6:54:16:C4:C3:71:11:40:17:B1:87
Authority key identifier: C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
Certificate issuer: /CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Certificate serial: 0197488C7D2E9399877667206948874A44AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
Manifest number: 0597
Signing time: Sat 07 Jun 2025 04:00:55 +0000
Manifest this update: Sat 07 Jun 2025 04:00:55 +0000
Manifest next update: Sun 08 Jun 2025 04:00:55 +0000
Files and hashes: 1: AM_8FnzBWvppCWEq5L2m7zOw4Xs.roa (hash: BSOdW4w3xzDGFEiTqGVLTD5VpVN1n3Tm2IL/b7m+dNI=)
2: yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl (hash: TYZToTllS6j8r6Jlpmgv3HRGYZE/OJp6Zf+vmh1A5aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:7d:2e:93:99:87:76:67:20:69:48:87:4a:44:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Validity
Not Before: Jun 7 04:00:55 2025 GMT
Not After : Jun 8 04:00:55 2025 GMT
Subject: CN=6cb85b568f3f2d26dad65416c4c371114017b187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:59:cd:c9:79:79:ec:82:b5:b2:24:7c:38:73:
76:13:aa:a0:92:70:88:ed:d0:ed:c3:0d:87:31:ac:
42:f8:fe:3e:72:1b:ca:8a:4a:39:d3:14:de:b0:8a:
80:85:20:f6:bc:61:af:aa:39:3e:97:fb:9a:94:35:
b8:14:fb:6f:0c:f2:dd:ff:a4:48:6a:23:a9:5d:b8:
0b:3a:a1:c8:62:39:81:58:c5:d3:7a:7a:a7:c1:a0:
7d:c7:3c:0e:49:d8:79:81:e9:4a:52:d3:d9:56:f5:
2c:03:5f:6e:a9:68:e7:b6:9d:02:62:13:99:98:a7:
85:16:f2:79:5c:8f:e1:dd:2f:76:9d:a0:d7:b9:d4:
f6:8d:4f:84:8c:d1:26:53:5d:fa:ed:c0:d3:fc:7d:
56:47:4c:07:ec:ac:b1:48:fb:e8:f1:ce:49:b3:d1:
4e:0f:b4:e5:e3:a5:8f:a9:4e:98:7a:4e:6b:06:ec:
1a:e0:2f:ef:8d:04:03:d6:bd:9c:3b:b4:74:5c:92:
86:79:c7:80:de:42:00:e9:41:9f:fd:1c:fa:69:35:
25:da:18:26:ee:f7:8f:f2:27:7c:a9:75:34:bc:5d:
59:ad:35:bc:04:0e:d8:91:b8:77:20:03:9f:32:f5:
80:f6:f1:01:b5:b6:79:f1:22:05:99:0b:75:51:c7:
a3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B8:5B:56:8F:3F:2D:26:DA:D6:54:16:C4:C3:71:11:40:17:B1:87
X509v3 Authority Key Identifier:
keyid:C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b9:f3:41:42:55:f6:89:2b:d1:25:6a:8f:c2:01:4a:20:a5:
8c:aa:9e:ad:e9:b2:5e:c3:6c:8e:03:5c:71:f8:67:8d:2e:b8:
db:28:c3:a2:29:95:db:10:6e:fd:74:0f:16:73:c7:cb:60:fc:
e9:b5:e2:14:90:47:75:91:b3:bc:bc:8b:9d:6d:46:c2:0f:2c:
bd:66:7b:17:b5:3b:99:c1:b8:e1:55:e9:e2:e2:80:4f:ca:26:
01:87:fa:90:29:24:67:a9:21:d2:0b:53:c7:17:f0:00:27:85:
d1:fc:66:b8:f0:d6:fa:a6:ac:68:51:e9:10:1b:bb:10:88:9a:
a1:76:88:67:7d:a3:09:7f:f5:d4:d2:bb:69:7e:81:0c:44:88:
70:a7:17:70:2d:87:a6:0e:b0:db:ad:03:4d:7f:d4:79:df:da:
ae:2e:1f:9f:52:08:40:fc:fd:4d:42:3c:6b:0b:39:a5:40:07:
0c:b8:f9:ea:6f:77:17:9f:a3:49:8c:32:9e:e8:c1:6c:d5:ae:
69:aa:35:e6:6a:a3:2e:cf:1b:28:17:87:e4:47:9a:ec:8a:9e:
66:a0:32:42:65:14:8d:60:34:3d:ed:83:ad:88:60:87:57:60:
06:63:2e:2f:29:3b:f6:c5:64:cd:98:f6:fe:6f:f5:51:70:66:
f4:41:24:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:05:39 2025 by rpki-client