Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
File: yc040dHEojBTzZlxYzGNZJp7Klc.mft (raw, json)
Hash identifier: 2ysYjfZSHOb9Iht97c51WbUVDJ/i/aSEA5n2WeH2F6Q=
Subject key identifier: 0C:28:C7:AB:B9:1D:3E:2E:27:DB:76:97:17:5C:09:0A:3E:C4:4B:99
Authority key identifier: C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
Certificate issuer: /CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Certificate serial: 01974EFC17FDE0D2069674645F8688E34FE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 10:00:33 +0000
Manifest this update: Sun 08 Jun 2025 10:00:33 +0000
Manifest next update: Mon 09 Jun 2025 10:00:33 +0000
Files and hashes: 1: 85I4pfyLQKX8k9V-tQtyQU5bDYo.roa (hash: TN5K/hNnnHvE6u0/+9oRgawldt2710m801enGA9Infw=)
2: 9Ddwg04k-x748SWw8ZAq8FwjEC0.roa (hash: hAsF5Dd97oXArWDCgchVp4XLtAVACH5ddk2EH9+qQDM=)
3: yc040dHEojBTzZlxYzGNZJp7Klc.crl (hash: ZLogHU7Z2fUTYW6jfhuuDSKGGgy9TiqFEk7PlTrokX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:17:fd:e0:d2:06:96:74:64:5f:86:88:e3:4f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Validity
Not Before: Jun 8 10:00:33 2025 GMT
Not After : Jun 9 10:00:33 2025 GMT
Subject: CN=0c28c7abb91d3e2e27db7697175c090a3ec44b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ac:53:37:73:6d:13:b5:de:13:c1:43:20:36:
22:c2:fa:97:9a:1c:18:92:37:7e:44:a9:93:b3:5f:
d5:69:0f:c2:22:22:ca:33:6b:75:85:3e:a9:7e:a5:
00:68:73:89:3f:c0:18:2d:b4:bf:4d:82:d7:a3:fd:
ab:42:83:09:23:a8:8e:0b:f8:6a:32:4f:ae:e3:83:
a5:f3:5e:8f:01:63:c1:0f:a8:e0:11:4e:8c:a1:9a:
c0:0b:03:8f:ac:71:fe:0a:59:4e:33:ef:d6:3b:73:
16:aa:e8:04:08:29:e5:70:cf:69:3d:9b:ff:00:d3:
d8:5f:50:57:ea:3a:7f:2e:f0:6f:b5:06:6c:f1:2b:
39:c8:a7:9a:0f:af:81:d2:3b:57:5b:3a:f3:50:dd:
0f:67:a3:e3:56:36:56:7c:23:09:91:5c:ee:a0:1b:
94:67:cb:e9:25:63:4a:6a:2d:9e:fa:da:87:c2:b5:
84:e9:e4:c8:ce:d0:53:d4:dd:00:f5:68:e9:8e:a8:
98:f2:47:9d:19:a8:09:32:85:e9:e9:23:df:d6:a0:
21:79:df:86:9f:2d:5b:3d:07:8f:07:c9:4e:3d:4b:
89:3b:96:f7:73:26:d9:40:50:2b:90:94:6f:bb:fc:
9f:94:e5:2a:47:17:2a:75:e8:c5:ad:1f:14:ed:cf:
eb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:28:C7:AB:B9:1D:3E:2E:27:DB:76:97:17:5C:09:0A:3E:C4:4B:99
X509v3 Authority Key Identifier:
keyid:C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:18:21:6c:47:d5:64:e7:de:91:f8:cf:de:01:b9:6f:8d:50:
85:12:f7:1c:36:53:8a:1e:98:92:9d:36:cd:1a:6b:89:a2:84:
e1:31:8b:f3:c7:55:61:e1:7a:d3:24:73:f5:8e:c8:2f:65:d2:
3d:b6:4b:6a:18:75:88:79:7d:cc:d7:91:07:f7:40:1b:44:1b:
dd:7d:16:e6:1d:de:ae:f2:bc:a3:6d:2a:db:99:5b:c9:96:e9:
1d:a8:7f:b8:91:46:54:63:79:00:da:14:6e:f9:18:34:70:ee:
51:b9:ef:04:3a:49:c0:0b:e2:f0:ef:d1:7a:01:7c:9c:4d:16:
9f:46:15:e0:45:1d:4c:c1:a1:ef:62:da:99:68:4d:3e:f7:83:
39:76:d8:ec:e0:5b:10:21:8d:0e:8a:30:3f:81:f9:3e:77:2e:
ea:41:cb:7f:f5:31:f3:53:38:b6:5d:a1:1a:26:10:c1:cc:4e:
8f:c3:2f:a8:01:d2:b3:1e:03:2c:e2:9f:ea:41:e0:b9:97:fa:
e9:2a:71:c9:e0:af:70:f4:95:18:3e:6c:66:7d:01:9a:26:a4:
7c:58:8b:d4:aa:d2:f5:90:20:3d:f2:69:6d:b3:2a:70:c1:61:
07:c9:6f:c3:c5:5f:47:fe:a1:15:9f:26:41:5f:fb:ce:f7:d9:
14:fb:58:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:48:39 2025 by rpki-client