Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
File: yHX3bo-JQkeSPA4nYjTZikw-xcI.mft (raw, json)
Hash identifier: YjpwhCVvnMpX6FD73yBOR8+fQqcxFQoswLeBfjPHFVg=
Subject key identifier: EF:00:3F:69:10:10:5B:DD:31:3E:28:FD:1F:1E:22:20:20:26:87:24
Authority key identifier: C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2
Certificate issuer: /CN=c875f76e8f894247923c0e276234d98a4c3ec5c2
Certificate serial: 019761394707537120523CD18A337D187F2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
Manifest number: 1588
Signing time: Wed 11 Jun 2025 23:00:32 +0000
Manifest this update: Wed 11 Jun 2025 23:00:32 +0000
Manifest next update: Thu 12 Jun 2025 23:00:32 +0000
Files and hashes: 1: FGsyv-avFXn_iimzPOzOCwcPyYs.roa (hash: x+nbArqL7XpMEWFfS8pufHXCc23im3EMURx/7GPfFLI=)
2: I709bbaWjjvBjycgl5Y9TKJLvE0.roa (hash: XtOSTkSn/jS5PlGEkzSWe5jgilvzImx3IY3GpNZBgXs=)
3: yHX3bo-JQkeSPA4nYjTZikw-xcI.crl (hash: GcAD7WNag7ltFY+bqvCk/FNnbvWk2qFuNsnceUBdvKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:39:47:07:53:71:20:52:3c:d1:8a:33:7d:18:7f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c875f76e8f894247923c0e276234d98a4c3ec5c2
Validity
Not Before: Jun 11 23:00:32 2025 GMT
Not After : Jun 12 23:00:32 2025 GMT
Subject: CN=ef003f6910105bdd313e28fd1f1e222020268724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ff:e4:f2:40:b2:e1:e1:a2:de:16:e0:50:f1:
34:97:73:f4:7b:57:4d:a1:87:b6:af:87:32:65:bf:
28:95:6f:cc:41:12:d9:f7:57:0f:ed:a7:e4:b6:9f:
de:69:9e:f1:de:0d:d7:26:06:21:57:c2:3a:a5:f3:
42:01:93:8c:dc:e4:43:ba:fc:a3:9a:cf:a6:87:11:
c3:08:76:cd:fa:43:30:b4:6b:05:d6:2d:ea:34:87:
40:e8:f0:a7:b4:ff:8a:77:a3:3d:6c:df:a6:0f:af:
eb:68:bd:4a:95:c7:c0:47:0d:e5:39:c5:d1:09:89:
0c:1e:bc:16:70:27:fb:19:75:ed:05:e3:88:4b:8b:
5a:11:25:69:cc:b8:16:ea:e6:d5:eb:03:7d:34:b4:
17:6b:65:05:3e:ba:58:81:c4:5d:f1:32:61:33:bd:
90:60:da:fc:4d:9d:8e:ef:92:4b:ab:e7:bc:c8:4e:
8e:91:d3:c4:1b:eb:87:b0:1a:13:c4:30:72:e0:6e:
cf:a9:76:15:46:eb:7c:2d:1a:25:c8:7d:ca:24:e4:
38:87:37:e6:47:f4:40:26:d5:c4:23:6b:e1:1c:bf:
11:aa:fe:87:1c:ff:59:51:b2:65:46:36:8c:d7:1b:
ca:cf:88:3f:a4:2c:06:f1:9b:46:dd:b4:85:13:54:
2b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:00:3F:69:10:10:5B:DD:31:3E:28:FD:1F:1E:22:20:20:26:87:24
X509v3 Authority Key Identifier:
keyid:C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:bb:79:3e:65:ca:84:83:f2:1c:4a:18:04:63:c8:19:a0:cc:
2c:b3:52:e9:5d:1d:a7:57:d7:85:7a:d1:cc:75:f6:11:7e:01:
e1:6a:07:85:f2:d5:f5:f6:ed:4e:de:ba:34:de:db:03:53:27:
4c:fc:91:1b:29:48:0d:8a:08:c3:b3:65:e2:dd:ad:77:96:50:
ed:eb:01:1d:e1:25:5c:ba:d4:7c:79:42:6f:5a:e6:ed:80:91:
c3:87:5c:3a:f4:e2:10:63:46:9f:3b:22:1b:72:b1:79:e6:b2:
b4:d8:8c:57:96:72:6a:ca:e9:91:c5:69:51:dc:58:31:28:0c:
97:97:b4:c2:ab:04:c1:00:82:6d:d7:e3:72:1d:9f:d6:18:57:
af:e7:9d:ba:6c:69:e4:e2:17:b3:52:f3:e0:8b:e8:d7:b1:a2:
30:f8:db:5b:7d:af:d7:2b:b0:4b:72:b9:cc:99:37:ab:3c:37:
71:ab:03:c6:bc:5d:83:79:66:71:91:3d:b1:f7:c8:0c:c6:5d:
46:50:6b:10:81:9a:d6:8d:2b:85:da:de:65:2a:e4:fe:b2:df:
09:ce:ee:22:23:82:d9:c9:e9:bd:85:1d:b5:a0:7e:7a:36:be:
99:02:5a:55:bb:0b:7e:e2:79:b9:5e:fc:13:a3:25:34:15:81:
2e:1c:12:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 05:49:43 2025 by rpki-client