Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
File: yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft (raw, json)
Hash identifier: YIT1XlKUIoM/YePjvX6opyb4kh9jyjCCQWnPdf+GFG8=
Subject key identifier: 84:32:D6:CF:CC:07:59:12:14:26:15:CC:0F:72:12:AD:1F:D1:DF:D4
Authority key identifier: CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
Certificate issuer: /CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Certificate serial: 019765F1A038942507C486B154EB4D7B39D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
Manifest number: 0FD3
Signing time: Thu 12 Jun 2025 21:00:23 +0000
Manifest this update: Thu 12 Jun 2025 21:00:23 +0000
Manifest next update: Fri 13 Jun 2025 21:00:23 +0000
Files and hashes: 1: 3PSx9dotZYAyDtqMkmvWnodExOo.roa (hash: vk6bcm3rilt5w+/C+Ma6CzJC2WgKxVja0T1kBgt8Mfo=)
2: YC3-xixw4XeW0DEnxSoXSA3y9I0.roa (hash: g2+qW4cdB8k/DANIZo5brjTh6TFBwg+CXUq3jLsJYWU=)
3: yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl (hash: aA5ss3igdA3sPr+chi+qV6+XMwC9iOE2aqnE+XNQSaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 21:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:f1:a0:38:94:25:07:c4:86:b1:54:eb:4d:7b:39:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Validity
Not Before: Jun 12 21:00:23 2025 GMT
Not After : Jun 13 21:00:23 2025 GMT
Subject: CN=8432d6cfcc075912142615cc0f7212ad1fd1dfd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e5:3c:26:1c:ef:d6:47:55:67:6f:8f:71:08:
fa:da:0a:69:69:9c:e5:92:67:23:07:b1:ef:6e:32:
a1:57:16:b6:ac:4c:ab:87:0c:d5:83:53:ff:3b:a3:
a6:ad:90:30:74:7a:14:c5:a2:c1:df:38:46:5c:25:
2f:1e:43:83:94:01:d3:5c:aa:0b:56:9c:14:54:0a:
3c:39:b7:46:df:b2:33:ad:e7:b3:a7:48:96:6a:a4:
67:24:03:55:3e:86:aa:a0:cd:7d:18:f0:3a:29:e8:
44:a4:9d:68:fb:32:14:63:82:31:37:06:c9:45:fb:
7b:64:57:e3:6c:66:99:09:18:2e:33:f8:b7:fe:23:
89:d6:e5:f7:69:61:c2:96:37:50:1e:e6:68:d8:a5:
22:4a:fc:a4:39:6e:83:0b:9e:96:39:3b:d1:f9:ab:
7e:46:13:ab:fc:2f:63:f7:d8:66:fb:99:8c:3a:71:
1c:58:a8:91:f5:89:11:bb:e7:e9:58:82:70:e1:bf:
d8:8c:d3:20:08:18:18:46:4c:f3:27:3a:f1:89:ce:
3b:ba:ca:63:de:97:d1:42:8a:7c:24:b8:1b:3e:18:
5a:b0:ac:d8:11:90:b6:78:2b:60:fd:c5:e7:da:9f:
7c:96:0b:cd:0a:af:a0:ac:d8:b3:f4:05:34:ad:b4:
e1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:32:D6:CF:CC:07:59:12:14:26:15:CC:0F:72:12:AD:1F:D1:DF:D4
X509v3 Authority Key Identifier:
keyid:CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a1:da:71:97:62:f2:58:7c:2f:d6:f8:88:2e:ce:42:95:30:
4c:d9:b7:cb:f5:60:51:09:0d:c5:40:ed:e0:cf:3c:fd:9c:fd:
56:bb:9a:8e:e4:8e:e2:84:00:b6:8b:a8:73:86:20:59:f3:88:
ad:43:fa:a2:d3:15:b8:5f:32:b6:b1:45:7d:3f:ad:8d:cc:3e:
71:03:5b:4d:c6:af:13:7f:18:ab:55:6e:73:35:5c:06:af:7d:
bb:58:da:55:f9:20:24:7f:af:74:d6:70:2d:5e:a3:fd:71:f0:
b9:c0:d0:c9:4e:a7:07:8e:6e:d6:86:f6:ce:fd:c8:6c:90:57:
60:e7:58:29:5b:ea:ef:80:47:5e:82:c2:ba:2c:5b:16:3f:15:
15:08:a2:17:78:64:0c:c4:d2:f4:fb:d1:74:50:3e:de:6f:5f:
76:01:57:52:36:83:fb:57:53:76:71:91:05:41:c4:d8:55:22:
0c:e3:a4:31:55:1f:f0:d6:2e:e2:1a:f3:50:ac:22:45:9e:73:
c3:ed:95:ce:f7:b3:03:ec:49:73:7a:48:ef:c5:ce:a4:8e:e3:
3c:45:9a:bc:0d:9d:c2:17:af:b5:1a:e4:3d:f0:97:af:2c:9a:
50:8d:34:28:19:d3:4d:b2:06:8c:41:dd:65:b8:05:f1:eb:b3:
65:e3:9b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 03:23:36 2025 by rpki-client