Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
File: yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft (raw, json)
Hash identifier: fZhTmsW3E6XSARjLwK2cmWSsmvlimGU8b8nFXtIVh48=
Subject key identifier: 21:30:50:E6:31:28:38:DA:CF:F8:2C:6E:5D:61:C3:83:3D:DB:F1:10
Authority key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
Certificate issuer: /CN=c8d335041718b18830b1f58c15d3518510fe6118
Certificate serial: 01974FA111B91FA47669F3902D7511AC82C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
Manifest number: 0DED
Signing time: Sun 08 Jun 2025 13:00:45 +0000
Manifest this update: Sun 08 Jun 2025 13:00:45 +0000
Manifest next update: Mon 09 Jun 2025 13:00:45 +0000
Files and hashes: 1: 4vlmdPXJEIj9BD5XrGcncgmk5j4.roa (hash: riPKiYt/L7BDSbhqPzWMVJUAIze+SOZFasERkJ2mKqY=)
2: 6JnpDB-avLJy-XNKDDSSHNV24As.roa (hash: Y/YVn+7OJ+S4qmnI1JW4HV1PsJFLQFMKAejvFBc5SZo=)
3: yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl (hash: 5ubE0LqjBtvaCH7aBb+KlBVCxCyP6qDaaDgfRV4GLZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a1:11:b9:1f:a4:76:69:f3:90:2d:75:11:ac:82:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d335041718b18830b1f58c15d3518510fe6118
Validity
Not Before: Jun 8 13:00:45 2025 GMT
Not After : Jun 9 13:00:45 2025 GMT
Subject: CN=213050e6312838dacff82c6e5d61c3833ddbf110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b2:5a:99:4b:ea:73:2e:8d:de:b0:b8:ce:c8:
b4:3c:d4:7c:94:1d:27:21:1c:43:24:76:96:06:3d:
df:9f:68:15:40:f1:76:ba:96:a8:6e:02:66:26:bb:
2c:2d:73:db:d9:9b:7e:1d:8f:d3:83:54:8c:f2:d1:
a4:46:17:03:15:b0:02:65:b6:4e:1c:ba:7f:d8:40:
15:72:ae:6a:ed:9b:05:c5:6f:b7:8a:c9:bc:f2:f3:
c9:66:a3:27:69:0e:82:4e:1d:35:3b:00:00:5f:57:
13:7d:48:19:ad:5a:ac:9e:b4:03:53:0a:de:d5:10:
ec:21:ef:d7:32:be:7c:d8:84:eb:d9:61:5b:88:02:
35:ba:a0:6b:a0:7e:6f:4e:f0:7f:4c:d1:56:02:04:
81:95:fe:6d:80:d7:65:bd:84:61:77:51:5c:31:9a:
c2:1d:0a:0e:37:c9:c6:a8:b5:4c:b6:8b:08:37:66:
f0:85:9e:df:26:1b:7b:97:cc:a8:99:7d:3f:c2:e1:
0b:31:53:0e:a1:84:fe:70:2a:69:cf:ef:54:53:9f:
bf:39:40:3e:30:32:2c:5a:9e:65:09:de:0b:fa:b2:
1c:00:54:d9:3a:5f:d9:69:df:25:f4:2e:ae:dd:d3:
0e:eb:76:df:fd:3d:83:2f:67:1c:03:49:70:e9:5f:
0c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:30:50:E6:31:28:38:DA:CF:F8:2C:6E:5D:61:C3:83:3D:DB:F1:10
X509v3 Authority Key Identifier:
keyid:C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:15:ae:34:7a:86:0f:3b:95:6e:1f:88:5b:0b:3e:85:35:0e:
84:00:af:18:ae:f8:d6:18:56:10:36:04:ee:ee:0a:28:d6:1d:
0d:45:75:72:bd:86:03:5f:1b:8b:5b:ae:74:eb:98:3e:11:e9:
30:8d:8a:e4:60:c7:4c:a7:88:55:31:a9:2b:32:36:84:b7:71:
10:66:16:c8:0d:f3:bf:a0:38:a4:04:1e:5f:df:4f:3f:00:0b:
ab:f2:72:d6:cc:d2:69:e8:1d:6c:09:d8:61:54:b5:16:45:55:
0c:17:bb:3d:c6:e6:4c:36:ef:e3:88:30:bc:52:5d:c7:1f:6d:
e3:9b:ad:bb:84:2b:2d:55:14:a1:4b:a3:01:31:b8:c8:dc:95:
14:be:65:ff:c7:1f:fc:db:c9:cd:e2:ae:7b:4c:ff:3c:f1:fa:
ab:81:10:56:4d:73:92:f1:c0:7c:cd:bc:3a:dd:28:90:f2:5c:
15:59:b3:6a:6f:fc:02:3a:0f:06:d8:54:d1:98:41:ed:99:c4:
b3:bf:9f:de:7d:02:14:16:08:ac:2c:34:c6:65:43:f8:2a:a0:
53:0f:5b:68:10:1a:e3:2e:c1:9d:8e:c7:7c:41:75:93:48:1d:
cd:de:c5:ac:25:03:c2:ed:b2:34:bd:47:f7:03:4c:63:74:97:
e6:50:b1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:22:11 2025 by rpki-client