Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
File: yHX3bo-JQkeSPA4nYjTZikw-xcI.mft (raw, json)
Hash identifier: YeLwBAlAR4zdAY95Xp363Pm7mgR1Nye6NhUJsc8eatY=
Subject key identifier: 9E:95:94:6D:0D:14:0E:54:9A:C0:C0:BE:6F:42:73:DF:35:B5:89:71
Authority key identifier: C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2
Certificate issuer: /CN=c875f76e8f894247923c0e276234d98a4c3ec5c2
Certificate serial: 01976704B706E7ADE2A66042EBA5714C7533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
Manifest number: 158B
Signing time: Fri 13 Jun 2025 02:00:51 +0000
Manifest this update: Fri 13 Jun 2025 02:00:51 +0000
Manifest next update: Sat 14 Jun 2025 02:00:51 +0000
Files and hashes: 1: FGsyv-avFXn_iimzPOzOCwcPyYs.roa (hash: x+nbArqL7XpMEWFfS8pufHXCc23im3EMURx/7GPfFLI=)
2: I709bbaWjjvBjycgl5Y9TKJLvE0.roa (hash: XtOSTkSn/jS5PlGEkzSWe5jgilvzImx3IY3GpNZBgXs=)
3: yHX3bo-JQkeSPA4nYjTZikw-xcI.crl (hash: WRhXOGFeiwpf6Tcn5DCvQHiPjwnuvid2MIqI5bYnZ88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:04:b7:06:e7:ad:e2:a6:60:42:eb:a5:71:4c:75:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c875f76e8f894247923c0e276234d98a4c3ec5c2
Validity
Not Before: Jun 13 02:00:51 2025 GMT
Not After : Jun 14 02:00:51 2025 GMT
Subject: CN=9e95946d0d140e549ac0c0be6f4273df35b58971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5e:84:65:7b:3b:d4:c5:7c:b5:7c:1e:28:cd:
31:64:7b:31:db:2e:19:9c:ba:00:f0:22:4d:26:47:
8f:da:0a:7e:96:49:98:89:ce:9c:2f:0a:b6:31:2b:
c2:ca:7b:18:cd:1a:c5:af:4b:9a:ef:8a:1a:a3:cd:
3b:6f:6d:9b:2d:02:e7:f8:45:04:d4:9f:9d:04:c5:
ec:dd:d1:ab:67:b7:a7:a5:0a:d8:01:b4:9e:8a:38:
e9:59:9e:90:01:13:9d:00:e4:68:3a:2b:47:3b:c9:
d1:77:bc:06:6e:77:c4:05:a0:9d:3e:c0:82:2a:02:
71:a5:f1:59:41:9f:c8:b7:66:fa:01:ad:b5:3b:8a:
22:20:9d:35:d5:9a:33:3b:76:f8:33:23:da:dc:a6:
b7:eb:2c:8d:64:ae:f1:61:af:f7:78:c7:90:7e:e1:
64:e5:ab:ab:4c:2d:ea:6a:6f:6c:59:08:9d:b2:c7:
f3:6d:94:e9:96:b9:d8:ef:a4:85:09:4c:5d:a1:c6:
97:24:06:b3:30:62:3c:48:e2:1f:4c:5d:a3:81:81:
5d:a1:19:4e:e4:39:0e:be:41:cc:eb:6a:dd:55:6c:
2c:89:99:08:43:00:17:03:ac:b4:54:ca:a9:6a:08:
d9:5d:1e:10:d9:35:de:3e:ac:21:bc:ae:b5:c0:79:
be:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:95:94:6D:0D:14:0E:54:9A:C0:C0:BE:6F:42:73:DF:35:B5:89:71
X509v3 Authority Key Identifier:
keyid:C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:dd:24:2d:c3:f2:8c:2d:d8:58:f0:6c:95:c5:fa:b7:8a:90:
f7:cc:99:d1:09:c8:e0:4d:b7:ec:73:59:b9:ab:4d:76:3b:1d:
b8:3b:7a:82:87:af:92:6d:67:7a:6e:f6:c2:06:61:1c:35:6e:
13:56:65:f4:79:08:52:51:4a:c8:f6:96:5d:2b:04:43:56:70:
ed:b6:eb:e8:36:e6:bf:de:e7:ab:d3:c9:ff:e8:0d:cb:7c:b8:
96:3f:36:ba:d6:c9:26:18:ba:f1:f6:85:2d:44:3d:ea:88:b1:
c5:c3:ea:9d:0a:80:ff:49:75:de:d1:c6:fe:70:96:c3:5f:cc:
93:27:44:08:26:78:2f:9e:39:22:1a:18:51:0b:34:9e:bf:c4:
fe:6e:9b:10:02:3d:fa:d9:74:53:7a:93:a9:07:5f:ee:3d:66:
39:b2:b0:e6:74:87:68:ab:0d:b6:df:69:8b:70:37:c6:f7:e5:
8a:41:91:fa:77:f4:dc:96:43:1a:f5:b9:8f:7c:79:5e:34:a5:
77:9e:e9:bd:0b:a1:93:fc:f4:e1:c3:88:72:50:59:ad:92:1b:
51:d1:06:79:0d:c6:79:57:9b:8b:6e:53:02:2a:b3:46:60:ba:
08:28:92:1b:fe:74:dd:bb:05:62:b4:af:26:5a:f8:86:99:d4:
89:2a:80:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 07:39:52 2025 by rpki-client