Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
File: yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft (raw, json)
Hash identifier: AccvEAxxOPt9pD9y+1J115+xJZXozpTFT7V13bV+Pg0=
Subject key identifier: ED:96:EF:83:A7:55:56:6C:38:02:BA:E4:1B:A8:DB:CC:12:C1:97:7F
Authority key identifier: CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7
Certificate issuer: /CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7
Certificate serial: 01975C1313FC4269BCEE1C964EAA05471D82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
Manifest number: 032C
Signing time: Tue 10 Jun 2025 23:00:43 +0000
Manifest this update: Tue 10 Jun 2025 23:00:43 +0000
Manifest next update: Wed 11 Jun 2025 23:00:43 +0000
Files and hashes: 1: VeB2JYEPPZXx0utNRLtg6FNWYsY.roa (hash: gSEi8VHhU2GnejHtbzAY1q6WOPbiaaKQKVxj7a98mY8=)
2: yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl (hash: JNFwEpNVdeO8fUrB0kM9DlMU7pBKUXYSMeSJG/mbJhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:13:13:fc:42:69:bc:ee:1c:96:4e:aa:05:47:1d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7
Validity
Not Before: Jun 10 23:00:43 2025 GMT
Not After : Jun 11 23:00:43 2025 GMT
Subject: CN=ed96ef83a755566c3802bae41ba8dbcc12c1977f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5c:b5:40:19:67:0d:9e:ff:6c:ed:16:26:43:
b7:73:ad:4d:21:2c:e5:d4:3f:0b:ce:0e:3c:86:b7:
f7:bf:bc:d2:52:1b:bc:d0:24:85:66:de:cf:e7:aa:
c1:df:52:b8:da:07:68:7c:4f:ba:ae:f7:dc:9b:f3:
50:82:20:7c:bd:e1:0c:32:11:12:0b:10:6a:72:1b:
9e:1a:63:3e:b1:25:95:0b:c6:ff:36:64:13:d2:11:
71:8f:a8:7a:d3:08:ae:d3:2b:a8:ef:6a:e3:be:b4:
7a:51:88:3d:01:b8:d7:30:ee:ae:2c:a4:04:41:c5:
6d:f6:18:a7:be:6e:86:0f:85:5e:e3:83:1e:83:db:
a3:d8:d7:f3:c6:55:51:c5:9e:47:e6:7f:eb:6b:fa:
6a:3a:5a:d6:c4:44:98:62:11:2e:1e:2e:14:88:da:
cc:07:46:dd:77:25:81:b8:8a:0f:9f:a2:7f:2b:71:
4f:1d:74:23:e7:43:10:e9:07:84:e7:26:92:b9:88:
5d:0c:c4:65:e0:99:48:bf:2e:a4:6d:91:da:88:5b:
5d:44:c1:f2:fa:e8:98:07:ac:07:a6:9b:cb:d8:84:
4e:c2:f9:1c:e3:c6:23:90:3b:15:bd:44:ef:90:ae:
f7:a8:c8:48:7d:a8:af:9c:98:33:4e:09:59:82:7a:
32:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:96:EF:83:A7:55:56:6C:38:02:BA:E4:1B:A8:DB:CC:12:C1:97:7F
X509v3 Authority Key Identifier:
keyid:CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:18:ea:77:ec:9e:25:50:60:ae:2a:1b:59:3a:54:41:c9:7f:
b1:06:30:97:ec:27:8a:5f:d9:24:10:9b:45:cd:06:ff:3e:fb:
05:9a:ca:33:0b:96:7d:8e:4a:16:44:c2:6d:12:7b:37:7d:7a:
46:23:fe:c6:da:8d:db:b8:c0:f2:a1:f5:a2:c3:15:68:a2:b2:
54:da:f7:58:c7:c0:64:da:90:fd:ad:f3:3d:06:3b:8b:85:cb:
77:f1:59:dc:27:11:5a:7f:7c:5c:41:8c:cc:70:d2:8c:e0:a5:
3d:ed:88:d3:df:69:ec:8e:eb:61:46:a1:31:36:0a:44:aa:95:
13:23:9b:c1:b2:e2:7e:3a:91:a8:ca:07:42:47:c0:b1:bc:97:
06:32:3c:a3:a2:b3:27:3f:63:44:08:54:0e:16:1f:9a:47:15:
f1:65:bf:4d:7e:57:92:35:10:82:7c:3e:f5:4e:5f:80:b4:aa:
2a:cc:d6:30:4d:08:e8:93:7f:6c:15:32:90:8c:7b:32:dc:61:
2d:86:0a:3a:54:e1:d2:ab:28:76:ee:0a:a0:47:5b:9b:a7:d3:
e9:35:67:46:3a:52:4a:94:9e:2b:da:be:90:fa:0b:4e:f6:11:
b0:d1:b7:c7:30:8f:cd:4f:91:67:7b:03:22:14:6b:39:da:f7:
48:60:33:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:31:21 2025 by rpki-client