
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
File: yYoYbo7rhxTtylsNcW5R1mwWjOE.mft (raw, json)
Hash identifier: Tr6WIVLfQR4Ceu1gJfl5xOYwjVSwCNdX00nvdCwvmR8=
Subject key identifier: 82:00:88:F4:98:13:DF:1F:97:55:C9:7B:E9:9B:6B:4A:19:E5:B5:AA
Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
Certificate issuer: /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Certificate serial: 01975D257E9B3EEB0B0819BA983278844009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
Manifest number: 1586
Signing time: Wed 11 Jun 2025 04:00:27 +0000
Manifest this update: Wed 11 Jun 2025 04:00:27 +0000
Manifest next update: Thu 12 Jun 2025 04:00:27 +0000
Files and hashes: 1: Y9vHd81ibfUetGxJah-LnbSDV5g.roa (hash: 4fkHfBFVcEfZDutW6y6I1HuGuOEE4ACtS7MPP484LwM=)
2: yYoYbo7rhxTtylsNcW5R1mwWjOE.crl (hash: BeSO1lRDpra3+IDEfsv7xysGHZsd60HWKRVRmgGDsnQ=)
3: zBGnHPAUEWWCm_u3jtGTRqp9xHs.roa (hash: WhdGn2fRgjfQdOUl3EYSHsYRvd0466eSDsxZA6Pu8m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:25:7e:9b:3e:eb:0b:08:19:ba:98:32:78:84:40:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Validity
Not Before: Jun 11 04:00:27 2025 GMT
Not After : Jun 12 04:00:27 2025 GMT
Subject: CN=820088f49813df1f9755c97be99b6b4a19e5b5aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f5:37:c6:41:c7:4b:87:47:17:72:17:ff:92:
a5:eb:6d:8d:ea:ab:6d:ba:95:18:f1:f8:82:84:7f:
e8:9d:ba:0a:7f:b5:c2:df:85:1c:47:c4:1f:93:20:
bc:51:3d:95:3a:1e:5f:a2:45:41:c8:90:73:fc:89:
77:cf:1e:26:d8:21:91:61:4a:76:1d:f9:28:fb:c4:
12:7b:83:b2:47:bd:fa:dc:df:22:f3:c7:84:1b:e8:
cf:74:df:64:c0:f6:de:00:5f:a2:15:2b:dd:fb:6e:
33:36:dd:16:e6:f5:6e:92:73:1d:47:59:a2:8b:f0:
64:75:ac:23:df:01:c4:9d:1a:d8:f1:85:12:df:24:
3f:39:4d:60:ae:e1:75:62:3d:ac:3b:3a:86:86:67:
2b:33:cd:dd:4c:33:21:79:a9:2f:c2:6d:57:5d:38:
72:7a:1a:09:bc:f0:c9:13:96:71:38:c5:5d:ee:6c:
24:38:5c:c3:cd:a8:d3:49:6f:1c:2b:63:b1:9c:aa:
59:c1:33:c0:97:b6:ec:1b:ec:d9:9e:17:c9:79:0a:
12:f5:62:69:3d:81:8c:6f:35:ed:88:77:ca:57:73:
3a:3c:a8:17:66:23:3b:83:ee:a8:4f:53:0c:fe:74:
9f:dd:f7:89:ab:59:00:2f:ee:7e:78:4b:50:86:37:
7e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:00:88:F4:98:13:DF:1F:97:55:C9:7B:E9:9B:6B:4A:19:E5:B5:AA
X509v3 Authority Key Identifier:
keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:2a:cd:10:5a:d2:b8:06:0a:16:a7:6c:e8:99:c1:a5:34:9a:
7d:6a:94:0f:af:19:78:96:83:40:53:68:34:ee:1f:1d:cc:ff:
91:5b:69:7d:3f:e1:5c:82:02:9e:85:af:72:c0:65:18:e4:1b:
ff:a5:5b:e4:7d:c8:a8:ea:8a:43:c6:ae:cd:88:2a:5f:4a:7e:
8c:9f:2a:75:81:ae:a8:9b:b8:2e:f8:07:7b:31:f4:31:7a:8f:
0d:ab:ee:95:86:58:ac:77:da:1c:8d:c9:83:3f:9a:de:71:54:
fc:0f:2f:3e:4a:e9:28:3a:65:eb:01:d6:1a:1f:8b:45:11:c6:
cb:54:d0:45:1a:52:f1:4a:90:f0:b8:9b:0a:6f:00:3b:d0:3c:
49:4e:a4:eb:b3:86:38:6c:d3:86:5b:4f:cc:6d:c6:68:33:59:
05:25:ad:da:45:dc:85:0d:fe:5f:b5:7a:38:fe:2b:bd:a7:2b:
1c:32:71:a4:fe:d3:7f:8c:86:c8:9b:ed:47:2a:96:28:8e:f9:
99:a3:a5:09:ef:30:74:cd:b2:ae:b6:df:6f:60:3d:48:bb:72:
07:5e:57:a5:d9:d8:4f:0d:45:fe:31:ca:09:28:b3:42:8c:75:
5f:8e:72:e6:35:17:1e:4a:d5:56:81:33:1f:db:6c:25:f3:09:
fa:20:c8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:37:56 2025 by rpki-client