Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
File: yy2f-G42PbNNBVbsFkUfL38wPSQ.mft (raw, json)
Hash identifier: irT9oYNvhgxs+zHtgdIJXIVTXpJ6hxgPG2vzyYFXZDY=
Subject key identifier: 6A:63:35:34:75:8C:6D:DD:3B:F5:44:05:96:46:F9:49:7B:25:11:C3
Authority key identifier: CB:2D:9F:F8:6E:36:3D:B3:4D:05:56:EC:16:45:1F:2F:7F:30:3D:24
Certificate issuer: /CN=cb2d9ff86e363db34d0556ec16451f2f7f303d24
Certificate serial: 019749310720F7708C44D5DC86EBBA3DAACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 07:00:39 +0000
Manifest this update: Sat 07 Jun 2025 07:00:39 +0000
Manifest next update: Sun 08 Jun 2025 07:00:39 +0000
Files and hashes: 1: 92Huf3IHz49yEZcp8laODPaay4A.roa (hash: fHDvsxbqA8PNa+801vhXYVjpC3kLuwr6JG2deunc2nA=)
2: yy2f-G42PbNNBVbsFkUfL38wPSQ.crl (hash: sGZgfpuA2+kDjhsyLItKpXbgxxFQ8Mooj+hMBI0pe4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:07:20:f7:70:8c:44:d5:dc:86:eb:ba:3d:aa:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2d9ff86e363db34d0556ec16451f2f7f303d24
Validity
Not Before: Jun 7 07:00:39 2025 GMT
Not After : Jun 8 07:00:39 2025 GMT
Subject: CN=6a633534758c6ddd3bf544059646f9497b2511c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bc:c5:d4:f6:90:2e:5f:f1:b1:bc:a9:99:77:
1b:3b:cc:56:6e:d6:71:dd:e8:01:d1:ae:b6:e5:8d:
24:a8:39:3c:25:fb:c0:17:11:34:a3:89:47:c0:14:
5e:46:6a:81:3d:39:c2:ca:5b:c1:e5:51:00:b5:70:
a2:15:72:49:94:74:09:9d:52:69:e8:d1:ab:06:d4:
01:00:b0:a2:db:f4:c8:5e:60:a4:48:38:59:91:3e:
89:11:89:2c:d2:a1:19:11:ea:b6:16:b9:2b:01:7c:
83:46:d6:47:be:b9:b6:7d:f6:27:3f:c5:7f:0e:cb:
eb:84:26:83:4b:65:3a:17:62:1b:00:32:d3:59:29:
6b:f4:67:5d:e9:b0:95:7a:59:52:af:cc:88:8f:a4:
42:63:c8:12:61:11:57:3b:74:c7:3f:d3:e6:6a:27:
ba:07:f0:c3:2a:7e:5b:da:88:38:e2:d9:5a:02:14:
8e:5b:ab:3b:2c:4e:89:6a:2a:c1:f2:6c:56:30:85:
2a:90:5f:83:eb:8f:8b:11:a5:7d:48:0c:ba:50:e0:
95:e3:05:9f:cc:62:6f:fb:e8:58:1b:66:3d:95:6c:
13:12:d3:36:54:80:d4:6b:4f:df:80:07:94:a7:29:
ca:8b:2e:e2:02:3b:c5:c5:a3:85:8c:9d:0e:a9:ec:
c6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:63:35:34:75:8C:6D:DD:3B:F5:44:05:96:46:F9:49:7B:25:11:C3
X509v3 Authority Key Identifier:
keyid:CB:2D:9F:F8:6E:36:3D:B3:4D:05:56:EC:16:45:1F:2F:7F:30:3D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a9:02:b9:ed:b5:41:48:03:f1:f8:bc:a5:3a:17:3b:92:e0:
86:78:1f:f8:cf:61:f4:bc:69:33:27:1c:6c:73:fb:6f:14:13:
bc:50:d9:ac:7d:85:ed:d6:e5:6a:04:44:a3:8b:1a:15:41:34:
29:cd:9d:14:8a:ac:86:3a:7a:31:5e:bf:c9:e2:7b:ba:65:0e:
44:df:eb:33:29:dc:ea:9d:41:d0:6c:ed:09:75:63:df:20:b1:
c8:95:72:31:49:e8:42:e3:b3:63:19:35:b7:0f:a6:88:5a:22:
37:e5:8f:29:ff:89:bf:3d:0f:76:36:37:ca:ec:97:85:fd:3a:
df:f7:5c:0e:13:fd:e3:7d:cb:9f:05:ce:f4:d5:7c:ce:e7:06:
dd:0b:f9:39:28:77:5e:93:de:41:02:a9:4b:ac:b9:fb:74:b9:
85:58:f7:73:b4:4a:c9:0b:19:b3:b7:dc:6f:ce:ee:00:0c:bc:
a1:f1:6a:d6:cf:e7:30:c2:75:c2:e1:1f:81:b3:5e:f8:56:00:
73:57:5e:fe:ff:5f:be:3b:cc:91:3f:29:25:17:b3:63:aa:60:
7c:bf:3f:8a:a5:ae:1a:93:30:78:8d:b1:5c:02:1b:7e:b8:81:
c5:36:bd:c7:72:19:4b:d0:c4:27:7f:e7:f0:91:c3:34:2d:38:
45:a3:f3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:31:14 2025 by rpki-client