Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
File: ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft (raw, json)
Hash identifier: 27jbXeumhjkjAyM+A0X1Jc2TkE+5HDu5bKGTDeFdVu8=
Subject key identifier: 66:B5:FB:E8:BD:48:16:5D:41:82:AA:D0:D5:72:99:A1:A2:A5:A8:A1
Authority key identifier: C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD
Certificate issuer: /CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd
Certificate serial: 019749D58FA0961AB06B9BF64ABF0E6687A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 10:00:22 +0000
Manifest this update: Sat 07 Jun 2025 10:00:22 +0000
Manifest next update: Sun 08 Jun 2025 10:00:22 +0000
Files and hashes: 1: CA1FNHSnELY2j7gmDHjDS2dsoX8.roa (hash: cFZtRXhk5SHYLVuLELTuEuyCvo+k9H5qi+XN9Dm3gEY=)
2: ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl (hash: 8CoQWjBuyXeFnoKcA+NCcfXsWi3I0d5FJJj5bdOEQmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:8f:a0:96:1a:b0:6b:9b:f6:4a:bf:0e:66:87:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd
Validity
Not Before: Jun 7 10:00:22 2025 GMT
Not After : Jun 8 10:00:22 2025 GMT
Subject: CN=66b5fbe8bd48165d4182aad0d57299a1a2a5a8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:54:cc:29:3f:46:6a:5b:9e:34:e6:5d:fe:af:
1b:f9:e3:dc:66:04:e5:6f:11:54:cc:6a:e9:c6:97:
6d:ad:d5:85:10:c2:6a:fd:8d:88:ad:b3:a9:cc:03:
79:8b:2c:7d:c9:34:8e:3b:e5:bb:4f:3b:b1:c1:7b:
01:ce:7c:7d:f1:b9:d9:3a:dd:e8:5f:55:87:0a:8a:
00:71:19:00:8e:bb:20:f2:84:b1:cb:95:d7:d7:a1:
e5:21:e6:20:93:78:2f:14:fa:70:08:9e:0e:17:9e:
8a:02:2a:5e:f3:42:3b:66:5f:c4:f5:86:b3:25:29:
c9:b2:2d:73:99:e9:4a:9f:ab:b3:88:4f:4e:f1:3f:
9b:67:3c:24:a3:fb:08:38:5d:25:3f:de:6f:c4:c6:
27:83:2c:10:e1:cb:52:7c:f9:da:e8:4f:0e:3d:a3:
30:01:77:4d:eb:b3:08:96:8b:a6:b5:88:ad:a7:12:
7a:88:d6:aa:5a:2f:b3:0c:4e:70:4c:b1:82:23:f4:
89:a5:7f:2e:11:f9:64:d6:eb:49:b4:89:ca:1c:37:
3b:a1:7e:bf:a0:2f:a8:6f:2d:4e:ad:33:6f:66:b3:
9b:d1:ca:38:3b:51:3b:c9:00:74:f2:2f:9e:f5:03:
40:0b:6d:14:ce:89:59:6c:2e:c9:eb:af:ae:99:cc:
df:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B5:FB:E8:BD:48:16:5D:41:82:AA:D0:D5:72:99:A1:A2:A5:A8:A1
X509v3 Authority Key Identifier:
keyid:C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e6:81:3a:b0:03:0d:c7:d5:75:38:88:83:60:62:2c:10:87:
57:be:ec:88:a6:1f:53:80:10:c4:8f:99:30:d0:e1:b0:bf:0f:
18:48:4c:7a:fe:a9:a6:7b:e3:9d:4e:9b:3e:08:c0:e6:aa:e5:
11:f1:3d:ae:72:5e:0e:4a:e9:d0:36:9c:4c:4b:70:52:aa:9c:
fe:5b:92:56:15:4c:7f:5c:1d:8c:c2:c7:fc:b9:b1:34:1d:b5:
fd:3d:dd:d6:d0:38:cb:c0:be:8c:7f:79:9a:e0:7a:57:a1:08:
58:09:81:e1:74:a3:8c:ae:67:6d:f9:5e:7b:3f:9f:77:75:60:
5b:10:67:67:aa:88:c6:6d:4b:f7:05:b5:73:93:1a:22:c0:20:
02:64:ef:35:b0:f1:d2:0f:ee:f6:01:28:2f:b7:06:16:a9:5f:
36:23:90:27:75:40:2c:e1:60:0e:93:82:63:16:89:d8:33:df:
14:c4:b8:aa:53:4c:36:18:15:4b:cd:69:49:76:01:65:c4:2f:
fc:89:d7:f6:f0:08:01:aa:df:8f:cf:a6:d4:38:dc:16:0f:f2:
1c:d6:9e:30:7b:92:67:e4:2c:a5:8e:06:6c:ec:b9:1d:ea:84:
c6:d6:20:e7:be:44:0d:20:b4:b8:65:62:b8:d3:5f:31:9a:e6:
22:a3:8d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:42:35 2025 by rpki-client