Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
File: yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft (raw, json)
Hash identifier: tlaptjwGHtVXb8GY+AS9cxOq2JNgbH/4h7qb9ehjSyE=
Subject key identifier: 69:19:E8:99:22:09:B8:E6:16:5D:15:A7:E5:4B:6C:68:DC:C2:1A:BB
Authority key identifier: CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
Certificate issuer: /CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Certificate serial: 019764033DE7020513656687B143143E6463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
Manifest number: 0FD2
Signing time: Thu 12 Jun 2025 12:00:23 +0000
Manifest this update: Thu 12 Jun 2025 12:00:23 +0000
Manifest next update: Fri 13 Jun 2025 12:00:23 +0000
Files and hashes: 1: 3PSx9dotZYAyDtqMkmvWnodExOo.roa (hash: vk6bcm3rilt5w+/C+Ma6CzJC2WgKxVja0T1kBgt8Mfo=)
2: YC3-xixw4XeW0DEnxSoXSA3y9I0.roa (hash: g2+qW4cdB8k/DANIZo5brjTh6TFBwg+CXUq3jLsJYWU=)
3: yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl (hash: E/fV+fCP+iSTPCYB3YzkP/xvALlXGBrt7J8svxcwPWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:03:3d:e7:02:05:13:65:66:87:b1:43:14:3e:64:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Validity
Not Before: Jun 12 12:00:23 2025 GMT
Not After : Jun 13 12:00:23 2025 GMT
Subject: CN=6919e8992209b8e6165d15a7e54b6c68dcc21abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d6:f4:69:a6:86:e7:6b:21:76:d8:81:5b:3e:
0a:30:9d:d3:e7:e6:95:c7:31:ab:01:b2:70:07:86:
40:1b:c8:1b:5c:b4:34:86:18:69:a3:f8:bc:a6:99:
61:ae:84:7a:5d:ba:a3:70:d7:32:5a:f2:ca:56:97:
c5:c0:5b:db:75:75:4c:1b:b6:e2:c5:c7:9a:8b:08:
9f:9c:52:8e:40:08:41:56:f2:78:20:3b:53:b2:df:
6b:c7:d4:cc:e7:35:7b:58:89:db:4b:5c:5e:5f:f7:
3c:e1:b0:d3:7f:e5:40:98:1f:a1:6d:72:8c:6e:e0:
cc:57:39:4e:c1:39:70:3e:7a:af:bc:5e:31:65:55:
68:b2:e3:03:a0:74:e3:bc:7b:28:05:d5:23:55:a4:
e9:c6:fc:ae:ac:b8:e6:ed:74:3b:fe:f0:f9:48:e0:
9a:70:39:55:b6:e2:90:49:a9:ba:f1:05:d0:39:40:
ba:95:83:e4:ed:69:15:80:05:5c:00:6f:da:86:dc:
99:c4:b4:55:cf:46:28:57:f6:ad:ea:4b:dc:c6:31:
83:23:59:c2:8b:7d:5e:e4:39:24:12:44:28:61:4e:
12:91:0f:1f:db:92:4a:68:03:c0:71:ed:25:9f:af:
b6:ca:88:51:63:59:d8:95:c1:18:79:74:d5:e3:aa:
97:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:19:E8:99:22:09:B8:E6:16:5D:15:A7:E5:4B:6C:68:DC:C2:1A:BB
X509v3 Authority Key Identifier:
keyid:CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:bb:ec:92:bc:67:33:2a:39:8e:be:a9:fb:2f:74:7f:6a:fe:
4b:45:6a:59:ad:e5:04:73:18:ff:5b:2b:de:c3:54:cb:20:60:
23:80:55:68:ad:12:17:1e:90:51:cb:3e:ec:05:cc:76:11:72:
f8:1a:60:82:67:b7:03:48:e3:bf:30:d2:b9:fb:07:bf:cf:89:
6e:8d:23:ec:2c:3b:c5:df:c2:fd:c4:61:b4:2a:68:28:9f:dd:
a8:2b:f2:a7:90:8e:f4:b2:ce:17:4f:8a:8c:23:b5:e3:50:59:
07:20:52:b6:e4:78:46:a8:39:f0:25:63:74:b8:2f:76:5f:8c:
ea:00:03:e1:08:75:7c:3f:2f:57:3d:7e:ff:38:b2:e0:89:20:
be:7f:88:d8:88:81:aa:e6:52:c1:9c:bd:31:74:98:5f:a6:6e:
b5:42:48:f3:da:c0:21:38:d8:9c:76:49:2d:eb:7d:8f:28:c4:
87:87:26:d5:c3:26:d0:54:2a:8e:82:c9:a7:12:d4:dd:14:60:
e5:c3:30:4f:12:7a:e0:14:4f:8e:5e:64:dd:cb:9f:a2:33:20:
a1:b7:2e:83:bc:3f:ca:5a:cb:6c:6f:2e:41:96:80:5d:64:0a:
27:1b:d7:f5:42:2b:78:eb:b7:fb:61:64:09:96:72:9d:b6:26:
7f:57:45:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:45:39 2025 by rpki-client