Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
File: yAA8l5YD986hKsoB68IFfDb9fzA.mft (raw, json)
Hash identifier: fkObS3oUoXQTqYfh/wjsMboAfTBxJziG8vroyXY+DSE=
Subject key identifier: A3:F6:D7:EF:EC:7A:DB:DF:72:F3:90:7B:E6:89:D8:6A:32:85:B0:5E
Authority key identifier: C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
Certificate issuer: /CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Certificate serial: 0197469DD787242B38C0819A219E9837FAAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
Manifest number: 0A9C
Signing time: Fri 06 Jun 2025 19:00:38 +0000
Manifest this update: Fri 06 Jun 2025 19:00:38 +0000
Manifest next update: Sat 07 Jun 2025 19:00:38 +0000
Files and hashes: 1: 1-xE0-vSES3q7X24C7bA8kScsYVE.roa (hash: AMR+YDswQHGejlMnTq+0urVDztOvK2YpsO5lA8H1zXk=)
2: BHRefR2VcU9Cwhnc_jkStzqaKRk.roa (hash: ZrbTFGtHCrlkSMciC2wWa2wqdIxNJiFYUjns0T4P09g=)
3: KwFiVQgCHTlXMY_TYL_laU7APsg.roa (hash: qfYaVhKwplFB9wdvFF2eG+ZvwUUFbi4aeim7C9EVTCM=)
4: yAA8l5YD986hKsoB68IFfDb9fzA.crl (hash: UGW8W56EhJBtrMddvZN0Zt5gRmUmAg3GOI0mntWKFh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:d7:87:24:2b:38:c0:81:9a:21:9e:98:37:fa:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Validity
Not Before: Jun 6 19:00:38 2025 GMT
Not After : Jun 7 19:00:38 2025 GMT
Subject: CN=a3f6d7efec7adbdf72f3907be689d86a3285b05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2a:b8:dd:92:96:23:ed:52:b1:dc:73:43:62:
b7:9e:c1:2e:d0:79:d6:c1:6f:90:fd:1d:2b:bb:13:
7e:36:cd:0e:60:b6:d5:97:3a:b5:ed:94:d5:35:0d:
69:e4:d8:ab:0d:d1:7c:7e:51:0b:24:ab:ac:67:f7:
86:48:06:b2:f7:5c:05:53:9d:7d:42:ad:38:0d:03:
16:10:f8:f4:b3:df:57:72:33:9d:6b:80:d2:0c:09:
04:64:38:d2:c7:01:83:40:9e:88:88:17:3f:20:7b:
3f:d9:c7:18:03:0d:33:10:e7:55:18:67:17:c8:3e:
70:81:3d:7b:0a:f4:08:8d:c5:56:7d:9d:fa:a2:a2:
44:21:a4:d8:d2:8a:5f:59:52:ed:4d:96:65:9f:54:
58:4b:20:5a:dd:b9:38:e0:a3:5f:f0:72:98:d2:97:
19:df:6e:1c:33:fb:35:ec:64:49:a7:af:c9:72:c3:
57:64:7d:a3:c5:85:fd:34:13:fb:b0:81:41:dd:36:
bf:1a:a8:05:4d:d7:ec:e0:e3:c5:33:68:58:e4:ad:
ae:57:d3:a3:65:43:6a:8e:22:39:fe:12:33:39:8c:
0a:87:50:5f:6a:82:8f:d7:a6:91:31:b5:e7:9b:a0:
fe:88:24:d6:cd:93:78:8f:46:3b:a1:8f:70:ec:33:
b0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F6:D7:EF:EC:7A:DB:DF:72:F3:90:7B:E6:89:D8:6A:32:85:B0:5E
X509v3 Authority Key Identifier:
keyid:C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:11:7c:23:41:b0:d2:32:02:ce:63:04:e2:68:75:ef:ca:19:
86:15:89:9f:67:73:02:69:1f:96:13:3c:71:cd:13:8c:aa:56:
6c:ee:f0:5f:dd:29:d1:49:7d:4c:3c:41:5b:9e:16:7a:31:cc:
e8:ec:4a:02:87:70:2a:6f:fc:d9:51:cf:b6:12:a7:27:7f:26:
68:ed:5e:f9:59:52:4a:7e:33:d7:89:c4:87:5a:1c:ae:ae:85:
75:d0:17:9b:ae:89:25:a3:94:7c:87:65:e6:10:c0:b4:93:87:
e2:93:74:fe:8a:93:cb:2c:6e:62:31:ec:cb:b4:86:dc:01:21:
8d:8a:e9:b1:e6:ad:de:56:57:24:72:cb:b5:a8:e9:6e:19:26:
6e:ad:22:82:0d:2f:0e:fe:f4:3e:01:ae:4e:b9:b7:3f:37:f7:
db:39:15:56:78:70:ff:73:51:65:4e:f5:9f:87:2d:27:6e:2c:
5e:1e:b3:fa:11:93:24:2b:ce:4f:1e:c7:6c:d1:12:88:98:e9:
dd:18:94:41:87:08:39:ef:77:4f:b3:8d:a0:fa:5f:af:f9:cb:
05:6a:41:c7:c1:44:61:7f:3e:95:12:2f:e8:62:0f:ab:e1:aa:
a5:ba:83:c2:0c:b5:be:76:38:b3:26:c2:72:43:41:a8:2c:37:
60:c4:14:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:42 2025 by rpki-client