Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
File: yQs5SsYzN2B_obsOq6EUU6gx85g.mft (raw, json)
Hash identifier: BBKksHk2bC+haaXMmcB6goZSMKyNzTG2ojboiHZuCQ4=
Subject key identifier: 50:84:BD:BD:C4:BB:05:32:0F:CC:F1:F3:B0:D8:E1:ED:35:59:55:0C
Authority key identifier: C9:0B:39:4A:C6:33:37:60:7F:A1:BB:0E:AB:A1:14:53:A8:31:F3:98
Certificate issuer: /CN=c90b394ac63337607fa1bb0eaba11453a831f398
Certificate serial: 01974C9FDA926DBBB600E331C86259A79DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
Manifest number: 0C1C
Signing time: Sat 07 Jun 2025 23:00:33 +0000
Manifest this update: Sat 07 Jun 2025 23:00:33 +0000
Manifest next update: Sun 08 Jun 2025 23:00:33 +0000
Files and hashes: 1: xYOsm8BUsmYBwfKFXCGnakfV_m8.roa (hash: 061quaNl9U6/3ODiu8AkctDs7yOiVTs6PkYfEN9U9Cs=)
2: yQs5SsYzN2B_obsOq6EUU6gx85g.crl (hash: mgO/a5yypOXaPa1uuBdvbbXqXWq48V9vOqnUxPU2e4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 23:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:da:92:6d:bb:b6:00:e3:31:c8:62:59:a7:9d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c90b394ac63337607fa1bb0eaba11453a831f398
Validity
Not Before: Jun 7 23:00:33 2025 GMT
Not After : Jun 8 23:00:33 2025 GMT
Subject: CN=5084bdbdc4bb05320fccf1f3b0d8e1ed3559550c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:df:2c:e6:a0:ac:dd:f4:cd:31:02:ee:49:47:
45:36:49:78:85:16:7c:b7:16:7b:f0:64:55:97:83:
05:92:42:22:82:bc:23:9f:3b:34:d5:23:97:33:cb:
5f:e7:36:19:e4:a4:78:5a:ed:d3:7b:8a:5a:4d:ff:
e3:41:05:75:fc:16:67:93:bc:9f:7a:6b:21:b0:86:
8b:80:91:33:37:8b:66:2b:10:c8:94:b9:a0:a1:e7:
bd:90:c2:46:fe:72:95:f8:0f:8d:44:cb:8f:9e:67:
0d:e7:8c:d4:2f:87:41:17:5a:28:c0:34:e3:9d:f5:
83:28:a3:f3:54:86:f7:ab:d4:bf:1c:f4:51:ae:33:
58:ef:b7:b5:18:b1:37:de:f5:f8:22:ee:ca:01:f6:
ff:b3:96:7a:59:38:0e:a0:01:c9:d5:60:96:2a:42:
2a:4f:48:5f:b1:f1:02:e9:56:d8:7b:e7:98:b2:38:
10:c3:ab:26:bb:cb:d0:11:80:e4:58:6c:7a:64:a2:
c5:4f:8a:ca:19:93:37:62:0f:28:bc:c4:03:aa:68:
27:b1:03:5f:02:b9:12:54:e2:dc:02:57:40:12:0b:
94:af:f0:96:2f:39:3b:93:02:b3:d1:da:5d:c6:3c:
5d:b8:bc:37:ec:60:fa:a0:1a:b2:a5:09:31:51:ea:
13:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:84:BD:BD:C4:BB:05:32:0F:CC:F1:F3:B0:D8:E1:ED:35:59:55:0C
X509v3 Authority Key Identifier:
keyid:C9:0B:39:4A:C6:33:37:60:7F:A1:BB:0E:AB:A1:14:53:A8:31:F3:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d3:af:d3:31:b8:26:36:58:a8:b8:ec:0f:05:eb:1d:3b:66:
7f:ea:dd:af:2f:b9:4a:b8:f3:98:44:7d:a7:df:bd:72:d9:2f:
8f:14:54:ef:87:d8:e4:b8:ba:de:88:81:54:90:96:72:68:fe:
1b:51:38:35:a3:31:8a:e6:75:10:93:d1:f6:a7:df:cc:99:32:
dd:14:26:55:a9:80:2a:7b:42:36:5d:3e:48:75:99:e8:16:87:
26:be:ee:b7:33:ab:30:7e:33:b5:f4:21:b8:20:c7:b8:ce:14:
d3:44:ec:7d:6c:26:60:12:a8:01:27:74:5c:7e:e9:0a:ff:09:
7f:cc:9c:d6:7f:aa:db:d4:ac:a3:34:60:72:86:5d:98:a7:9e:
5f:cd:c5:48:d7:39:2a:6c:f4:cd:a7:98:7a:ab:1f:60:e3:61:
0c:54:1d:47:1f:a2:5c:f2:0f:f8:5e:83:40:82:b6:c2:8e:cf:
e8:bb:8d:8b:d6:5c:c5:35:0c:7e:c3:9a:ce:b5:95:43:05:b3:
a2:88:a4:f6:18:f5:78:e5:ba:b8:ec:9a:94:1b:58:c0:dc:0b:
ac:fd:03:9a:1a:3d:f1:ef:dc:14:ca:d7:26:7d:ec:db:30:3f:
97:e5:2d:7c:a0:0a:91:31:85:db:2c:d0:ee:1d:e9:93:0f:5e:
31:f8:a1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:53:00 2025 by rpki-client