Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
File: yeDkyay_cB-TAUmzJc4ELPn5Klk.mft (raw, json)
Hash identifier: woJrJSAvkGSIFdBrH51fcOyTZDgWodTc+Fk2IbJJ/GE=
Subject key identifier: 2E:2B:14:1B:F0:05:2A:A1:52:A3:06:47:C3:DC:26:74:8B:C0:C2:44
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Certificate issuer: /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial: 01974666CC84C51B291AE8A0948C0C52F476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
Manifest number: 0E29
Signing time: Fri 06 Jun 2025 18:00:31 +0000
Manifest this update: Fri 06 Jun 2025 18:00:31 +0000
Manifest next update: Sat 07 Jun 2025 18:00:31 +0000
Files and hashes: 1: 9hbofTa8wmBhXG-prhgMHzrh8LQ.roa (hash: oj+TVOa3IXAijydn5VPy/DSH3tXPUY065JYAspyYspE=)
2: yeDkyay_cB-TAUmzJc4ELPn5Klk.crl (hash: 2dMXDKETCxlv7DZ90MmzAoH/wMSU8X7dxNNVkIOVIBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:cc:84:c5:1b:29:1a:e8:a0:94:8c:0c:52:f4:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Validity
Not Before: Jun 6 18:00:31 2025 GMT
Not After : Jun 7 18:00:31 2025 GMT
Subject: CN=2e2b141bf0052aa152a30647c3dc26748bc0c244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:71:0e:b5:1a:2f:20:59:e5:e8:da:46:00:ce:
a9:97:36:b1:9a:ea:db:a6:09:5d:71:54:cf:58:4a:
2d:84:0e:9f:9c:f8:93:b4:2f:1b:43:b9:94:1d:5c:
e0:80:46:06:e2:e6:db:4a:ca:7f:b3:31:71:29:d7:
c0:98:d2:95:27:a3:7e:7d:60:bd:5e:aa:70:e1:a9:
3b:4b:1b:f1:3e:be:e5:2f:0f:e0:c4:2c:25:45:ea:
75:1f:df:49:20:9b:23:d2:ae:3a:71:81:f7:a6:be:
63:6a:75:af:f7:a7:8c:94:c7:e1:9a:e5:3b:c8:40:
af:4c:dc:8f:4f:a4:8a:74:79:63:a6:da:27:83:d6:
49:97:86:0c:f0:48:d8:08:ea:54:0d:0c:81:73:cd:
2d:13:a8:fe:df:47:85:f0:50:27:82:f3:f9:f3:1d:
26:17:7d:82:7e:84:24:dd:bd:ff:1c:06:31:2c:2c:
18:6f:26:b7:d9:a8:de:8e:7e:6f:18:f2:b6:71:c6:
a5:75:60:12:7f:f2:cd:ee:c3:d9:a4:f4:47:e8:4f:
41:f5:e3:e7:17:10:6e:ea:06:52:5f:13:08:5b:fe:
de:78:3d:c8:79:bf:43:ac:f5:57:01:e6:b3:63:b3:
6c:64:5f:66:fa:2a:ee:0e:ed:a2:98:db:fb:e1:0b:
c9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2B:14:1B:F0:05:2A:A1:52:A3:06:47:C3:DC:26:74:8B:C0:C2:44
X509v3 Authority Key Identifier:
keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c8:b6:a7:03:87:3b:89:47:7b:a4:9f:8a:7e:1b:b3:a2:96:
fb:e1:50:44:df:95:06:35:d6:60:51:9d:62:1f:9d:ff:b1:dc:
07:6a:9f:e2:b5:97:f9:cd:da:e4:1f:8a:7d:65:df:21:3f:be:
f2:f2:85:d7:e8:6a:c4:54:45:e8:5f:70:8e:51:c2:3f:02:d7:
e4:84:c1:6a:8e:10:f7:22:f3:4c:eb:eb:b5:ad:6f:44:b7:0b:
da:df:10:5f:84:85:c6:68:b2:d6:36:00:0e:3e:b6:fb:4e:d0:
4b:bd:c0:5a:8b:00:ab:aa:0e:ec:fc:93:0f:f5:c5:1b:1c:6a:
a3:64:8d:35:57:bc:2c:0c:d2:05:06:a3:e5:e3:ba:97:d1:67:
06:de:a4:5f:a7:4e:31:00:ee:13:27:2d:77:bc:b2:6c:32:1b:
3d:36:8a:0d:ba:95:76:99:8f:cd:06:a0:d3:62:e9:42:9b:d0:
8a:f3:65:8b:81:96:37:9f:87:62:6d:a6:e8:ec:77:b3:90:07:
d1:81:e8:e9:cd:ca:d0:fd:59:1e:79:a0:22:38:89:00:a9:54:
2b:5e:e0:80:96:9e:92:41:be:de:c7:dd:48:05:16:60:59:53:
09:64:16:d7:18:0e:95:0b:0d:79:5d:ae:34:2f:77:b2:d3:bf:
6d:c6:01:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:59:56 2025 by rpki-client