Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
File: yDh_A1sJ0rw5P39g12IdMAzJd9g.mft (raw, json)
Hash identifier: a+GrgycgGQ1e9khRwcsqApQHYaXic0rOaZxcBukF1lY=
Subject key identifier: F1:CF:B2:B5:0D:25:A9:21:F6:09:4E:5D:EA:99:27:E4:A6:B4:4C:4A
Authority key identifier: C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
Certificate issuer: /CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Certificate serial: 01974742BE8C8894B7B6D00D7671B46C56A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
Manifest number: 1287
Signing time: Fri 06 Jun 2025 22:00:45 +0000
Manifest this update: Fri 06 Jun 2025 22:00:45 +0000
Manifest next update: Sat 07 Jun 2025 22:00:45 +0000
Files and hashes: 1: U4vaCvPLPsQcc8vg3OnlcW0vL4Y.roa (hash: xLSfBPsPVVtJayn5a9gdOa8vAATFWP5bOqFbdCJ7ilk=)
2: yDh_A1sJ0rw5P39g12IdMAzJd9g.crl (hash: a7apBoQRbmPKp/QOdh+SFwH8bhhdcndDfbSHx9R2dek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:be:8c:88:94:b7:b6:d0:0d:76:71:b4:6c:56:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Validity
Not Before: Jun 6 22:00:45 2025 GMT
Not After : Jun 7 22:00:45 2025 GMT
Subject: CN=f1cfb2b50d25a921f6094e5dea9927e4a6b44c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8f:f5:56:b4:28:4c:69:b2:24:6c:31:bf:7a:
47:72:13:b7:60:df:35:ec:78:63:2c:e5:4a:49:64:
ba:06:6f:9d:3f:b9:5c:89:69:14:90:fb:86:a5:89:
51:54:6a:8b:c7:30:1d:e4:7f:de:f2:73:e6:b5:0c:
19:51:7d:25:c6:f5:ec:1d:61:4c:ee:89:4b:bc:55:
4b:0a:ba:b7:28:fd:58:a2:b4:c9:a6:bc:f4:dd:fb:
ce:d0:48:03:92:ea:03:a0:1d:dd:a1:00:82:fb:14:
50:18:28:f8:64:bf:cd:73:8a:52:57:7b:a7:f5:de:
8c:87:63:c1:be:f9:1b:80:74:c3:ef:01:4f:7f:43:
80:16:11:13:29:45:85:4c:c1:b8:4d:cd:8c:53:57:
31:61:fb:55:df:8f:0f:f3:e2:bb:69:5e:91:8d:c9:
01:bd:26:b0:4a:35:2b:a2:6f:48:df:bb:05:46:3b:
83:71:c4:f1:02:c5:68:cf:8f:03:0f:4d:2f:f9:8f:
7f:28:f2:d9:73:74:41:93:a0:3d:dd:e0:81:a6:83:
23:f2:9a:79:69:6f:cc:9a:4e:43:ec:49:49:cc:38:
f9:b9:37:93:fb:ea:f7:34:aa:b2:c8:8c:50:a8:97:
b1:ee:ef:44:0f:c0:d7:63:98:3a:3c:d7:cf:bf:55:
85:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CF:B2:B5:0D:25:A9:21:F6:09:4E:5D:EA:99:27:E4:A6:B4:4C:4A
X509v3 Authority Key Identifier:
keyid:C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:a9:82:d8:8a:14:9d:2b:dd:13:7b:d2:33:80:c3:a9:c1:1a:
9d:ae:88:4e:86:57:02:af:2d:80:f5:2f:78:9c:e5:c7:1a:d3:
bf:be:92:78:e0:ae:e0:b6:9d:8a:12:47:cf:27:3a:94:23:28:
0f:f5:9e:44:66:18:b8:ac:65:af:41:02:06:0c:21:b9:88:04:
e2:de:55:bb:81:08:71:df:85:1a:29:91:04:5c:ac:b6:44:3c:
92:b7:9f:7a:ca:6b:48:b3:32:59:b7:c6:87:fb:98:b2:ed:07:
08:5d:42:d5:91:53:32:55:d2:7a:d3:39:58:96:a4:80:58:99:
1c:bb:50:23:f5:33:29:85:11:61:8c:ad:b5:d3:c5:90:d9:b4:
98:30:46:3d:f7:fe:05:cd:88:46:07:0c:c2:11:13:e0:b3:f3:
9f:7f:77:9a:77:8d:73:e6:1c:b7:7e:7a:a4:1f:03:2a:9e:86:
0c:5b:41:d2:2d:22:59:1f:ce:a8:9b:ab:74:bb:43:17:da:7d:
83:a4:b7:34:b6:c4:b6:c8:62:72:18:aa:63:7a:ee:f5:4b:33:
e1:57:2f:58:94:5f:e9:3a:77:39:97:90:e8:bc:ef:8c:c3:13:
07:5c:d5:71:f8:ad:08:08:78:c4:c8:b6:d5:2c:df:a8:74:7b:
f9:77:ec:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:19:03 2025 by rpki-client