Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
File: y-tftzOrs-B9dfqA176csYE80-A.mft (raw, json)
Hash identifier: wubfE76GY+vc0GWF2/hDmd26RSoU6yuq06bVkKsNbQA=
Subject key identifier: AE:CA:29:BA:34:80:A7:F9:B9:18:66:9E:B5:FB:FF:90:9E:EB:F4:AD
Authority key identifier: CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
Certificate issuer: /CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Certificate serial: 019752A26B124F08221E284ECEC59FDB39C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
Manifest number: 0517
Signing time: Mon 09 Jun 2025 03:01:05 +0000
Manifest this update: Mon 09 Jun 2025 03:01:05 +0000
Manifest next update: Tue 10 Jun 2025 03:01:05 +0000
Files and hashes: 1: MwipPwUawCuJkrJRTiNh4fCkKto.roa (hash: 5ZpTx+e30gtrqh8BtmkNV18Y4nMljwf+6r/HDqn1lyA=)
2: y-tftzOrs-B9dfqA176csYE80-A.crl (hash: s90XWiaW1Uss595qJX40xaSmdkUwzqU3mFIb4EqShpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:6b:12:4f:08:22:1e:28:4e:ce:c5:9f:db:39:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Validity
Not Before: Jun 9 03:01:05 2025 GMT
Not After : Jun 10 03:01:05 2025 GMT
Subject: CN=aeca29ba3480a7f9b918669eb5fbff909eebf4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e5:2d:ef:b7:27:78:53:12:dd:b2:20:e5:7f:
d5:32:9e:7b:3c:e8:6a:f2:b0:a0:70:b4:ce:b5:d5:
60:da:d9:8a:30:15:ca:57:14:60:69:cf:e9:e1:19:
49:0d:fb:1d:35:49:9c:71:4e:28:49:0d:80:1d:f6:
3f:66:d5:30:9a:9f:90:43:15:61:98:8d:e2:0f:7a:
96:d1:86:c5:5f:72:63:8e:14:56:b7:6f:5a:6e:18:
51:29:36:2b:88:87:2a:32:cc:5f:d7:1d:41:75:88:
00:05:48:3d:33:1c:4f:a3:a5:9f:ee:bc:bf:f1:f8:
b6:c2:39:9d:3a:33:2a:e0:87:fd:30:b7:e2:f4:a3:
23:c8:73:b9:da:6b:2e:d3:5d:8a:fd:42:0d:03:bb:
3d:e7:73:6a:52:ae:1b:2f:2e:44:29:f0:b3:ed:d7:
9c:b9:a8:40:21:6c:5c:28:69:5b:10:9d:b3:be:1a:
cb:6e:90:32:95:a6:57:e6:c1:31:1d:13:b1:92:a7:
a2:08:ba:72:1d:fc:ec:02:a3:c2:c6:ac:c1:f5:e9:
eb:c7:96:09:40:a6:40:77:09:21:62:3e:bd:a2:34:
75:4c:59:e4:ca:92:68:9b:f6:67:24:26:96:4d:35:
c4:db:cb:34:36:48:7e:cc:17:1f:5b:bd:26:f7:04:
c6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CA:29:BA:34:80:A7:F9:B9:18:66:9E:B5:FB:FF:90:9E:EB:F4:AD
X509v3 Authority Key Identifier:
keyid:CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:91:be:84:62:6c:b8:83:dd:90:06:e2:36:ce:38:d2:62:f8:
10:ba:b2:9e:0c:87:c6:63:af:e6:74:42:17:dd:b5:09:90:66:
96:e5:29:7c:7b:0b:2d:20:6e:f1:1e:6a:63:1e:7f:58:e1:ac:
a1:60:f4:8d:9e:2d:d9:e5:13:a6:e3:eb:66:94:82:59:eb:14:
ea:32:d8:73:33:35:f7:9b:ad:69:d6:df:0f:22:aa:ec:92:07:
90:87:c8:66:9f:9c:3d:e1:3f:c4:b3:b3:a4:13:ca:78:96:4d:
40:20:27:e7:0c:b7:c3:33:f9:e7:25:b0:ec:aa:a1:6a:0e:b5:
7c:e2:57:d1:2f:56:bb:35:e3:d0:8b:de:c1:22:ed:ae:ea:31:
92:7c:63:1a:70:ef:45:96:6f:f0:66:a1:07:c4:f9:a0:bf:7e:
4e:e4:84:84:43:7f:11:53:fe:e5:11:7f:4a:c5:2f:5b:81:d4:
de:2f:ce:0d:bc:f7:b0:54:f0:bc:6b:b3:04:c4:9a:a5:94:69:
d9:a1:df:c0:96:23:8a:06:7c:f1:8f:8a:c2:6a:0b:0c:96:13:
36:d6:5b:f8:34:4b:14:9d:74:f5:90:d3:af:09:86:90:b8:94:
e2:55:d9:4f:ef:c1:26:0d:c6:92:30:ba:a2:c0:7a:91:d2:41:
d1:98:25:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:17:08 2025 by rpki-client