Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
File: yHX3bo-JQkeSPA4nYjTZikw-xcI.mft (raw, json)
Hash identifier: 2jbWZg2/pj9NuRFH0WpM1tqsW1lw++p84JeIxu4WSt0=
Subject key identifier: 8F:A4:DD:99:20:C3:33:7F:84:17:B7:5A:55:03:08:46:9C:2E:FA:03
Authority key identifier: C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2
Certificate issuer: /CN=c875f76e8f894247923c0e276234d98a4c3ec5c2
Certificate serial: 01976516050F83F2C3EBDCD4B55D72E1A871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
Manifest number: 158A
Signing time: Thu 12 Jun 2025 17:00:31 +0000
Manifest this update: Thu 12 Jun 2025 17:00:31 +0000
Manifest next update: Fri 13 Jun 2025 17:00:31 +0000
Files and hashes: 1: FGsyv-avFXn_iimzPOzOCwcPyYs.roa (hash: x+nbArqL7XpMEWFfS8pufHXCc23im3EMURx/7GPfFLI=)
2: I709bbaWjjvBjycgl5Y9TKJLvE0.roa (hash: XtOSTkSn/jS5PlGEkzSWe5jgilvzImx3IY3GpNZBgXs=)
3: yHX3bo-JQkeSPA4nYjTZikw-xcI.crl (hash: jgxyhTAET+plge5j3EymLE1YLBGXvP44OAgbZJnkORk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:16:05:0f:83:f2:c3:eb:dc:d4:b5:5d:72:e1:a8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c875f76e8f894247923c0e276234d98a4c3ec5c2
Validity
Not Before: Jun 12 17:00:31 2025 GMT
Not After : Jun 13 17:00:31 2025 GMT
Subject: CN=8fa4dd9920c3337f8417b75a550308469c2efa03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:01:96:b6:73:bc:79:1b:b5:ad:47:3e:ed:af:
0c:07:ce:c3:1f:c3:82:84:8f:31:79:6e:dd:77:c9:
ee:a6:39:4c:c2:07:c1:5a:3d:2b:70:0c:4f:e2:59:
d4:3d:06:68:ba:e3:6f:3b:40:4c:79:17:63:c0:87:
d7:b8:6b:41:24:3b:fe:f1:8d:79:17:52:55:c7:a9:
14:64:a8:85:41:a5:df:dc:7c:b9:7d:89:33:8e:95:
c3:94:50:ca:69:b9:0a:f8:b0:a8:bb:2e:3b:61:19:
84:ea:e3:3b:c9:0b:a1:dc:be:2e:76:2a:b4:98:cb:
72:a0:6a:89:b8:6a:23:82:ca:4b:11:b2:23:b3:c6:
d1:41:18:f7:f5:86:0f:a3:67:64:8f:ee:d7:52:2c:
72:87:9c:be:38:01:33:1d:e3:de:43:25:d3:5d:99:
73:5d:a4:2b:e0:2c:e1:40:77:5a:3f:a4:51:72:46:
0e:aa:ba:2b:4c:c5:66:fb:a3:70:94:9e:22:ea:08:
d5:77:53:d4:a3:f1:3a:e5:9f:15:17:76:6f:96:58:
a7:14:e3:62:e8:8e:bd:5a:39:61:22:fd:3b:6f:38:
96:78:65:d6:44:94:11:61:de:7c:88:cd:4f:68:2b:
55:0d:97:a0:ca:c9:f8:82:d8:f9:8b:6f:a3:07:5d:
d6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A4:DD:99:20:C3:33:7F:84:17:B7:5A:55:03:08:46:9C:2E:FA:03
X509v3 Authority Key Identifier:
keyid:C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:13:d0:ec:c1:1a:90:d3:08:30:55:45:0a:48:eb:b3:62:c5:
13:7d:68:c6:b3:41:3a:9b:28:bd:e3:da:03:35:79:0d:f2:81:
2b:76:17:33:64:10:28:07:c8:40:4b:80:64:f0:87:c4:8b:7f:
0c:35:78:e4:70:98:94:0c:34:01:ec:45:d5:e2:40:70:c3:4f:
a6:76:c6:8e:df:1f:c0:24:f0:24:5c:c9:4c:4a:70:b4:a0:e8:
27:e9:84:d4:5d:e5:47:bc:35:4d:be:13:48:b3:05:f9:46:8c:
23:f4:01:7f:4f:d5:fc:d0:5d:b9:36:c1:a4:04:f9:27:20:f5:
a0:13:11:68:ee:a1:72:05:44:e0:f2:b9:ce:d9:5d:57:bb:85:
5f:11:85:35:17:2c:be:61:a7:ed:70:c3:0e:97:9c:24:72:6a:
81:52:18:79:0e:c3:29:a1:3e:c0:71:87:04:4c:36:2b:92:bd:
d4:14:71:8c:d0:c8:21:00:bb:59:35:f1:f0:43:a1:74:4d:4d:
b2:c5:25:9b:f2:8d:27:98:09:fe:01:d9:0d:3f:de:ec:fd:7e:
4d:c8:41:e3:85:54:ef:cc:6f:ac:a6:de:99:32:db:47:9e:ff:
63:c4:3c:53:e2:88:cf:cf:ff:e9:10:2a:89:21:ae:9b:f0:05:
c0:f5:f1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 20:59:15 2025 by rpki-client