Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
File: yYoYbo7rhxTtylsNcW5R1mwWjOE.mft (raw, json)
Hash identifier: v8ABsZxq2yXoeGWWIcalcoxM7ELsH7YRA1hmApwuqGg=
Subject key identifier: A0:8D:80:52:FD:91:71:7E:30:A0:B9:3F:A9:98:A4:B7:B2:7A:C9:6A
Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
Certificate issuer: /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Certificate serial: 019764DEE4FF892A547FBA91CD1705F34B41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
Manifest number: 158A
Signing time: Thu 12 Jun 2025 16:00:18 +0000
Manifest this update: Thu 12 Jun 2025 16:00:18 +0000
Manifest next update: Fri 13 Jun 2025 16:00:18 +0000
Files and hashes: 1: Y9vHd81ibfUetGxJah-LnbSDV5g.roa (hash: 4fkHfBFVcEfZDutW6y6I1HuGuOEE4ACtS7MPP484LwM=)
2: yYoYbo7rhxTtylsNcW5R1mwWjOE.crl (hash: f8GtWQikzxGCGd3FDvqFRZn9YB7M5q9tRDCwp1SQ8lw=)
3: zBGnHPAUEWWCm_u3jtGTRqp9xHs.roa (hash: WhdGn2fRgjfQdOUl3EYSHsYRvd0466eSDsxZA6Pu8m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:de:e4:ff:89:2a:54:7f:ba:91:cd:17:05:f3:4b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Validity
Not Before: Jun 12 16:00:18 2025 GMT
Not After : Jun 13 16:00:18 2025 GMT
Subject: CN=a08d8052fd91717e30a0b93fa998a4b7b27ac96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:29:81:f4:c5:1d:d3:0d:cf:6f:36:a5:3f:35:
f1:78:28:cd:c9:f9:91:ed:eb:91:35:73:4f:0a:9f:
24:37:9e:8b:bf:b2:23:5c:02:6e:22:6a:d9:bb:03:
cc:56:9b:06:51:56:d7:a9:7a:6b:66:1d:1f:2d:22:
f0:8b:e7:c4:35:61:14:3f:1f:c0:77:c3:71:92:65:
36:41:85:82:ed:1a:65:83:f8:80:45:df:74:5c:76:
d0:12:5b:52:83:ff:7c:2d:d9:d8:54:56:83:bc:71:
41:26:8d:e9:ca:fc:01:00:fc:1f:48:aa:86:fe:c4:
f6:4d:4f:65:67:a7:bf:52:2e:73:57:ef:78:c1:fe:
73:9d:53:7f:14:e7:aa:b5:9a:e9:01:b0:4c:8a:fe:
61:d6:5b:64:19:ab:9a:70:77:60:d1:32:5a:b1:43:
f9:43:4d:45:64:ca:3b:7d:0c:20:e8:86:07:af:4a:
16:e6:8d:fe:a8:40:7f:0d:20:cf:c4:ae:80:fd:58:
45:70:f8:82:c1:28:c2:7e:8c:44:2e:78:81:7c:43:
3f:a8:f9:ad:5d:41:4c:52:1c:24:52:95:5e:dd:04:
22:9e:36:77:ac:9f:92:07:20:bf:c1:40:67:93:5f:
9a:5f:11:60:57:15:85:f6:ce:cc:bc:56:d6:c3:6d:
82:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8D:80:52:FD:91:71:7E:30:A0:B9:3F:A9:98:A4:B7:B2:7A:C9:6A
X509v3 Authority Key Identifier:
keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6e:43:25:93:2c:f9:5e:97:b3:5d:05:91:f2:b0:45:8f:e6:
8e:35:79:db:09:ba:bd:9f:61:a4:0b:8e:a4:1d:2e:5b:e9:e3:
29:40:ce:33:0d:aa:62:71:77:69:34:27:83:8d:36:e5:af:c3:
41:39:d1:de:f7:0c:1e:57:8b:dc:d8:6b:81:12:4d:b1:0a:17:
ac:da:19:b1:67:4a:69:06:15:c8:ba:8c:fd:d3:cc:a8:f3:4c:
77:01:93:40:53:9b:23:ff:06:90:cd:7a:ed:de:3a:ee:36:e8:
3f:ef:2f:8b:4a:80:e1:58:cd:72:ba:df:44:88:3a:b5:75:0b:
af:24:a2:72:c3:31:91:b0:c4:f7:a1:39:e4:80:85:b1:b9:a8:
27:2a:4f:7e:3b:d6:72:55:5d:31:55:7b:d8:0c:bb:b9:0b:2f:
85:c3:95:20:02:0a:41:9a:38:66:d4:50:bd:1f:39:aa:fd:78:
52:23:da:57:44:88:41:e9:8f:cc:0e:3b:ed:96:8c:46:ee:89:
98:86:53:a2:27:a2:38:f3:df:db:1b:5b:28:8f:e8:63:c2:ec:
67:bc:7d:93:dc:64:cb:67:87:24:fe:bb:88:ab:6c:16:6b:5c:
9c:0f:63:fe:ea:b4:95:d5:27:d5:99:df:a0:f5:5e:97:a9:3c:
0c:d3:8e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 23:03:00 2025 by rpki-client