Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft
File: yniqfjFrIfhDz7lYEMaAzdv6bm8.mft (raw, json)
Hash identifier: OOmyNRKzQR/FXZf5Bu8Mjo4jOwev+IoxiSlWEqV1gPQ=
Subject key identifier: CD:FA:19:F2:3C:E1:8D:09:99:EC:F2:FB:47:B5:4E:D3:4D:B0:AF:D1
Authority key identifier: CA:78:AA:7E:31:6B:21:F8:43:CF:B9:58:10:C6:80:CD:DB:FA:6E:6F
Certificate issuer: /CN=ca78aa7e316b21f843cfb95810c680cddbfa6e6f
Certificate serial: 019749314D211F1F8399196781E732064621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft
Manifest number: 02CD
Signing time: Sat 07 Jun 2025 07:00:57 +0000
Manifest this update: Sat 07 Jun 2025 07:00:57 +0000
Manifest next update: Sun 08 Jun 2025 07:00:57 +0000
Files and hashes: 1: KmT0zBeAxHbx64CqcJ4Kw-HSMGw.roa (hash: g294VQOsqRVKkLhlE8NKqam6KvGQ9H8e4fukJsFTk1Y=)
2: yniqfjFrIfhDz7lYEMaAzdv6bm8.crl (hash: oyMmsqgxlrAJP2jihUPViIw/m0uYKUXTaUKeuGK1R4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:4d:21:1f:1f:83:99:19:67:81:e7:32:06:46:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca78aa7e316b21f843cfb95810c680cddbfa6e6f
Validity
Not Before: Jun 7 07:00:57 2025 GMT
Not After : Jun 8 07:00:57 2025 GMT
Subject: CN=cdfa19f23ce18d0999ecf2fb47b54ed34db0afd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:19:1e:a4:d5:c8:25:da:1e:a2:38:a6:3e:0a:
8a:fd:cd:f0:d7:44:3e:64:86:e4:81:6c:1e:e3:da:
11:1c:c1:9c:8b:3b:f5:50:24:98:35:a6:56:8f:bc:
3b:85:37:bb:e0:87:60:fd:8a:57:d1:ac:71:96:4f:
12:20:54:c8:f7:55:af:3e:6b:d3:03:85:1a:d0:75:
3a:e8:77:a6:b8:aa:83:8e:b8:cc:83:c7:fa:be:94:
eb:7c:d1:46:d0:7f:b5:42:09:2d:9e:66:b6:fd:6f:
fa:87:83:c5:c3:cc:f7:b4:7c:9c:de:37:40:7a:4a:
8c:9d:b6:a5:1a:3c:d6:07:9b:e6:b0:17:59:a9:aa:
1b:24:56:14:45:ff:5a:69:b5:c9:72:db:d1:2b:e4:
7a:28:95:5b:e1:f7:d3:d0:e8:9a:5f:b2:31:1f:3e:
ee:72:10:d8:06:10:7a:2f:d9:07:0d:80:be:da:fb:
63:64:9e:41:76:c3:2c:a4:4b:68:6b:62:fe:56:e3:
78:6d:6b:4c:b4:01:f6:85:a6:c7:8e:04:2f:50:1a:
b0:03:11:5a:2c:63:21:93:e0:c4:a9:b9:9d:e0:05:
7c:9b:00:c3:7e:79:75:97:90:2e:2b:7b:0b:18:a3:
0d:22:89:f3:e3:4d:fd:bc:a4:95:b9:d6:ec:6b:a2:
b8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FA:19:F2:3C:E1:8D:09:99:EC:F2:FB:47:B5:4E:D3:4D:B0:AF:D1
X509v3 Authority Key Identifier:
keyid:CA:78:AA:7E:31:6B:21:F8:43:CF:B9:58:10:C6:80:CD:DB:FA:6E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:34:3f:c3:67:af:1e:55:4b:1f:4e:f6:5e:80:e2:65:f7:e4:
7d:85:dc:68:80:56:1b:07:e1:76:7f:7d:bc:84:7a:7b:cf:c3:
58:ee:8e:d7:d4:13:f8:fd:f3:4d:70:20:75:60:6e:2e:a0:b8:
cc:1a:86:f5:d8:b6:81:de:bd:7b:eb:b0:f7:4d:52:24:b6:44:
ae:d5:51:7c:c0:7f:3c:eb:9d:52:30:c1:14:b3:a5:c2:56:11:
46:cb:e1:56:4a:29:ff:27:72:4e:67:99:d2:54:0b:79:4a:00:
78:15:fe:30:3f:4d:3c:ce:51:0c:c8:db:64:64:32:67:9f:c8:
74:df:bb:5f:7d:55:b5:79:c1:14:3c:76:ca:f7:28:1d:d6:67:
82:ff:f8:72:b8:9d:7b:83:5b:00:14:f7:0a:31:1e:98:11:0e:
9c:6d:e4:3f:41:fd:91:93:88:9d:ee:d3:ec:d9:6f:53:8c:da:
3d:0f:60:fe:71:81:16:f0:cf:72:59:30:1d:80:41:91:11:f4:
a4:61:34:e1:47:82:de:2c:45:dd:0b:73:6b:b9:25:53:a8:63:
29:f9:51:eb:e8:19:a0:1b:93:cc:d2:0b:11:c5:60:e4:a3:6a:
8e:d9:ab:e0:e3:82:3a:60:da:72:c2:36:7a:3f:78:c9:62:40:
67:20:40:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:36:33 2025 by rpki-client