Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
File: yYoYbo7rhxTtylsNcW5R1mwWjOE.mft (raw, json)
Hash identifier: NqMzNUT8hYVrI9pxx9CC3yGyod251JKH1cTaKFwOMg0=
Subject key identifier: C1:B3:C4:3B:C1:41:D9:16:9A:7B:4F:75:55:96:C2:5D:6C:C0:73:9B
Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
Certificate issuer: /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Certificate serial: 01976C98AD8D540E9E8E54E3F689EC014836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 04:00:34 +0000
Manifest this update: Sat 14 Jun 2025 04:00:34 +0000
Manifest next update: Sun 15 Jun 2025 04:00:34 +0000
Files and hashes: 1: Y9vHd81ibfUetGxJah-LnbSDV5g.roa (hash: 4fkHfBFVcEfZDutW6y6I1HuGuOEE4ACtS7MPP484LwM=)
2: yYoYbo7rhxTtylsNcW5R1mwWjOE.crl (hash: Wyy7SyBBuT5FhXs9/BY0IFw2sDYMYcAidiCo2vKB3AI=)
3: zBGnHPAUEWWCm_u3jtGTRqp9xHs.roa (hash: WhdGn2fRgjfQdOUl3EYSHsYRvd0466eSDsxZA6Pu8m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:ad:8d:54:0e:9e:8e:54:e3:f6:89:ec:01:48:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Validity
Not Before: Jun 14 04:00:34 2025 GMT
Not After : Jun 15 04:00:34 2025 GMT
Subject: CN=c1b3c43bc141d9169a7b4f755596c25d6cc0739b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1f:08:b8:29:14:f1:1d:a2:92:c1:fa:e4:c5:
ba:b1:08:c6:dc:f1:61:c4:7d:59:13:70:e2:c5:cb:
47:1c:64:a7:9e:9b:96:ad:5c:e0:26:da:26:fa:2d:
20:63:df:6b:14:38:86:9f:96:7a:79:5f:0a:68:97:
8b:d6:4a:c6:c5:2a:60:91:0d:b9:b0:cd:8c:7b:65:
7e:39:76:fc:08:70:62:db:68:64:37:18:24:05:59:
fa:2f:6a:e4:f4:c7:70:6f:de:8f:59:c9:90:09:37:
30:a6:87:59:a7:07:91:51:34:cf:5c:a2:12:14:f2:
93:8b:50:02:96:0a:56:df:3a:31:81:73:e3:bb:65:
3e:48:95:3b:a0:08:ca:ff:82:cd:e2:e4:75:eb:63:
fd:b9:ff:2b:3f:03:a9:03:4c:11:0b:04:d9:f5:48:
af:0c:08:e7:04:1f:96:a6:df:14:18:8a:29:3b:03:
a8:64:18:4b:e1:ed:2b:5d:8a:e6:7c:b3:3c:ed:69:
88:aa:bf:af:f0:1d:cd:b0:7e:13:71:3f:d5:77:9b:
23:4c:5a:d8:19:5d:0d:8c:a5:45:d7:d8:91:12:1c:
b9:81:b2:fb:a0:7a:86:0c:cb:d2:a4:1e:74:64:2d:
10:50:6f:6b:08:92:a7:0b:9a:f9:49:72:19:bd:7f:
f5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B3:C4:3B:C1:41:D9:16:9A:7B:4F:75:55:96:C2:5D:6C:C0:73:9B
X509v3 Authority Key Identifier:
keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f0:f3:15:30:9b:e3:c7:8e:1d:73:67:82:af:2b:fe:0b:8a:
ef:b8:cf:99:e9:ec:ef:44:c9:11:56:60:d5:d5:86:44:54:a8:
e4:7c:52:ef:42:c4:fa:06:b6:36:44:e1:d8:71:95:aa:89:67:
7c:45:d9:0c:73:f5:9c:cb:26:73:7a:cf:70:96:c1:34:5c:cf:
8f:ff:ee:70:81:a9:1d:0c:da:52:a5:8b:0f:2a:12:70:a9:fb:
10:f3:47:7b:9f:82:89:fb:fc:c8:a5:a4:3e:46:a6:40:f3:8a:
1e:46:d2:73:4e:86:42:ad:52:30:17:cd:b8:f5:88:12:af:01:
89:b8:bf:32:78:53:24:10:c7:3d:27:80:fe:ce:e7:0e:52:d9:
46:0d:b2:1b:d3:75:fa:a8:f9:f0:9d:e8:32:0f:1d:cc:31:51:
cb:22:25:8e:0b:01:77:cb:1f:86:93:2b:26:fa:f1:ee:d8:1b:
01:c1:95:d6:66:54:78:f3:cb:ec:9d:f7:c3:57:7b:98:c5:24:
ce:f0:35:fa:d4:54:59:fb:f5:54:32:fc:d4:67:ce:01:b8:91:
35:d9:a1:b5:ea:a6:93:b5:18:ec:df:9e:fa:b9:6c:24:d8:7e:
cc:04:fc:e2:ee:e6:54:d0:6d:0e:b1:25:0c:5b:67:70:9d:36:
90:9f:1d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:47:05 2025 by rpki-client