Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
File: yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft (raw, json)
Hash identifier: JKOEU1CA9Yax5Y0Hx7DUzLEV9w21G+BwkovtlebotGI=
Subject key identifier: 84:55:7A:2C:95:86:22:D8:72:52:1D:81:89:98:4E:DD:EC:09:67:3D
Authority key identifier: C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
Certificate issuer: /CN=c8593923257b20eda4aa4bc3c4a0c30d8490ea56
Certificate serial: 01974A0CC5DDF04A3AEAB48B203BD6A65F6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 11:00:40 +0000
Manifest this update: Sat 07 Jun 2025 11:00:40 +0000
Manifest next update: Sun 08 Jun 2025 11:00:40 +0000
Files and hashes: 1: WhKy2xbRKPMUqHbNxaU8wqbOrig.roa (hash: D12/ehSmYFcNAL5zHVyUB4wCp9NF+Juiz/ym/wvx6Xk=)
2: yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl (hash: dUgEOAzPe6XRnd598YrUvTYdkkLHbmFSyjPk7xC/Mr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:c5:dd:f0:4a:3a:ea:b4:8b:20:3b:d6:a6:5f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8593923257b20eda4aa4bc3c4a0c30d8490ea56
Validity
Not Before: Jun 7 11:00:40 2025 GMT
Not After : Jun 8 11:00:40 2025 GMT
Subject: CN=84557a2c958622d872521d8189984eddec09673d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:c1:61:02:d4:1b:e1:15:fd:51:cc:c7:ff:
8e:59:91:10:a4:97:c5:72:82:02:8b:cf:4c:43:dd:
64:2e:dd:3d:2b:e0:f9:4d:52:29:bf:01:58:22:d5:
8b:47:2b:34:bb:76:c4:f4:db:b3:5b:7b:0c:1b:4f:
64:58:57:94:e3:c7:e6:74:4e:21:86:fd:28:fd:34:
bf:c0:10:a8:fb:57:8d:9a:62:06:e0:e8:a5:5b:75:
38:8d:3b:12:89:f4:97:66:4b:22:a2:7e:e5:77:04:
f9:62:a0:97:78:3f:15:d2:c7:cc:77:e3:ea:5c:30:
65:68:32:c4:65:26:c8:2f:11:12:47:05:c0:9e:b7:
63:31:f2:68:c6:c3:c0:b1:88:cd:9c:ed:8e:c6:ca:
1e:e5:ff:71:e0:aa:2f:39:a1:53:00:2c:0a:50:3b:
f4:98:7a:5a:6c:d2:5e:a6:68:97:62:0a:aa:0b:01:
47:15:0f:d0:03:03:47:75:9b:36:ef:22:a5:0f:57:
f7:a9:8e:5b:fa:69:a1:3c:75:02:58:03:3d:f4:08:
ee:7c:ff:14:c6:da:48:ec:99:e4:55:47:b5:da:d1:
72:35:7c:cc:8f:05:bd:49:0b:b9:53:80:3a:d4:84:
65:36:b2:9e:1a:a6:b3:60:01:d4:00:cd:68:e8:98:
0b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:55:7A:2C:95:86:22:D8:72:52:1D:81:89:98:4E:DD:EC:09:67:3D
X509v3 Authority Key Identifier:
keyid:C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ce:ae:02:13:ef:e7:50:67:30:4a:34:16:be:03:25:d6:f4:
9e:2f:21:39:60:69:78:04:74:bd:a2:3b:28:38:84:87:04:f6:
6b:32:d1:5e:71:70:85:dc:65:53:16:36:fd:81:00:13:e0:f1:
d8:bd:12:81:22:1c:26:e5:90:8c:21:b2:cf:16:3d:96:b9:6b:
d0:cd:a6:68:d5:95:0f:00:c6:da:e4:1b:95:dd:20:61:e9:0e:
ac:2d:8b:7f:b7:dd:6f:98:02:88:50:9b:7e:a3:88:1a:e1:68:
c3:db:bf:74:c8:e7:7f:b6:36:1b:a0:c7:ea:17:e6:01:a6:8a:
19:c1:75:d0:8f:59:b6:1c:75:41:01:c2:dd:b1:60:5c:52:d5:
09:cf:40:ae:31:ca:cf:b8:bc:21:43:cf:63:aa:ed:30:f8:d2:
08:0d:f9:2e:b8:30:b1:e0:ea:7f:4b:74:0a:4a:f4:e8:09:c3:
4b:e0:30:cf:bb:a1:02:cf:02:94:17:38:b0:d8:5d:20:f1:31:
75:a9:94:6d:1d:68:1f:84:37:c5:4e:76:fe:93:5b:46:7a:87:
b4:6f:58:bd:77:f0:3e:95:06:c8:73:6c:2f:1c:90:e5:37:51:
02:f8:05:b2:8f:15:bd:94:58:3e:e1:c5:b4:20:48:1b:c8:ac:
e4:f0:9c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:38:50 2025 by rpki-client