Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
File: yzgoFbJRYTZakWEMva1x9mKG94E.mft (raw, json)
Hash identifier: +hLUwOMES97EgdGxUzflYjAMmw+0bGeFfjuZO77YqEM=
Subject key identifier: 28:8C:AF:E9:2D:B9:02:11:6A:1D:3A:46:BF:81:28:7A:C4:5A:17:83
Authority key identifier: CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81
Certificate issuer: /CN=cb382815b25161365a91610cbdad71f66286f781
Certificate serial: 01974DB28AC6ECC466A73F1FEE98455C195B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
Manifest number: 096C
Signing time: Sun 08 Jun 2025 04:00:35 +0000
Manifest this update: Sun 08 Jun 2025 04:00:35 +0000
Manifest next update: Mon 09 Jun 2025 04:00:35 +0000
Files and hashes: 1: Mo_PTp1RnKkJnXxtlC7OWx0YSxQ.roa (hash: YFv4cH8jBfWT6Q+LN0D+DWnRT7DQ1QH3WQI1NP0LJho=)
2: yzgoFbJRYTZakWEMva1x9mKG94E.crl (hash: uJogVNLwiXo3PLnC60fxBrVyHHkP5KzOiQTtSeKZrn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:8a:c6:ec:c4:66:a7:3f:1f:ee:98:45:5c:19:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb382815b25161365a91610cbdad71f66286f781
Validity
Not Before: Jun 8 04:00:35 2025 GMT
Not After : Jun 9 04:00:35 2025 GMT
Subject: CN=288cafe92db902116a1d3a46bf81287ac45a1783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:56:b4:06:72:a2:7c:26:90:93:4d:e9:5d:eb:
ab:fe:6e:13:0f:7d:10:65:17:10:27:42:85:0e:ad:
92:fc:d3:17:32:6a:4c:14:c2:d8:75:d9:d5:ea:34:
c3:77:b2:36:f1:c7:fc:24:ed:37:61:8e:7f:4f:dc:
2d:98:2f:13:e8:46:a5:65:f4:78:eb:4b:3d:1f:66:
1d:b1:3d:30:b3:ab:cb:26:0c:17:b0:a3:29:eb:fc:
be:94:e8:64:8b:37:a0:2e:75:ef:2d:b4:8d:e0:1e:
5d:db:25:e9:7f:a1:ae:b6:cc:3a:5d:2c:05:dc:5e:
49:69:f6:83:fb:c3:73:3c:7a:d8:dc:82:88:78:b1:
52:0a:66:9c:49:9a:55:14:70:ce:51:d1:48:3f:9a:
ae:21:e1:c2:d2:17:50:e7:40:c9:1e:aa:61:79:ec:
dc:13:a6:df:de:62:53:5d:06:4f:98:ab:bd:d3:05:
be:20:1f:14:ff:d5:e2:8c:b0:f4:83:ba:86:f2:27:
f8:82:90:9c:aa:26:0e:3f:f6:fd:6e:8a:31:04:8b:
62:8d:3e:ab:76:3f:b5:4b:2b:87:f6:b8:e6:b7:46:
51:f5:f0:ff:58:f6:8e:c0:01:8b:8c:75:01:35:fa:
32:d4:77:6d:2f:b4:45:ae:8e:fb:08:26:f4:42:cb:
78:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8C:AF:E9:2D:B9:02:11:6A:1D:3A:46:BF:81:28:7A:C4:5A:17:83
X509v3 Authority Key Identifier:
keyid:CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:6e:93:c7:0f:88:d6:32:ac:02:8a:99:d5:c6:9e:73:51:b5:
e1:e7:eb:46:fa:dd:31:3b:2e:77:a3:e6:53:97:df:56:cc:0f:
fa:c4:6e:4f:06:88:e1:bc:e7:1d:b4:57:3e:e5:37:cd:96:0f:
72:70:f4:d5:2b:3e:fb:fe:b2:c6:29:42:6a:13:f6:04:cd:e6:
c2:d3:cf:c1:f2:33:58:51:ec:66:e1:1a:10:b9:5a:e4:35:64:
bc:1d:84:b1:57:3c:c9:89:ea:f4:78:c0:09:4c:d5:f8:0a:8b:
40:74:8d:e0:57:20:e7:90:0b:3e:68:2f:62:38:69:a4:a3:94:
55:2b:6a:f8:8e:b7:fa:4d:19:52:39:e5:2e:76:0a:83:6f:83:
7f:66:6b:ce:53:d6:e5:0b:52:cc:23:89:09:28:ed:05:c3:e0:
b0:4f:54:ff:de:cd:65:15:37:ae:ff:c9:25:fc:2b:5f:09:4a:
08:4b:da:45:76:69:52:8d:e9:47:5b:1b:d9:1d:65:4e:07:6c:
a6:ed:01:74:75:68:56:b0:d1:7e:20:df:be:59:ca:e5:cb:e4:
49:bc:de:70:40:b4:77:29:95:1e:c7:7e:dd:f4:be:0f:e9:3c:
01:6b:9b:9b:b3:92:3f:53:45:62:ab:ae:99:de:35:82:cc:ab:
16:ab:27:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:20:27 2025 by rpki-client