Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
File: yvlojhds84ZDbXu4jTpAW0bQ4rk.mft (raw, json)
Hash identifier: +1JiDy4wPgUQMss0UgCtUzAWMUvMrHiLSoyMS0nv0Yo=
Subject key identifier: A3:DF:17:88:A7:E2:11:15:46:40:7C:23:BE:FE:2B:49:53:D7:0F:4E
Authority key identifier: CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9
Certificate issuer: /CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9
Certificate serial: 0197488C6A6D933895F56EA0F08189753540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
Manifest number: 037C
Signing time: Sat 07 Jun 2025 04:00:51 +0000
Manifest this update: Sat 07 Jun 2025 04:00:51 +0000
Manifest next update: Sun 08 Jun 2025 04:00:51 +0000
Files and hashes: 1: UnbwSxH6ZVeEnUksjRft9S3sebQ.roa (hash: 9U4mL4N8d7vors4YWo2644UK3bJphFQDyoU+KjBkOjc=)
2: yvlojhds84ZDbXu4jTpAW0bQ4rk.crl (hash: XwzjVe4qc0eRqvlGzE5I6pDinu+8PjcRpxqayUxksNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:6a:6d:93:38:95:f5:6e:a0:f0:81:89:75:35:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9
Validity
Not Before: Jun 7 04:00:51 2025 GMT
Not After : Jun 8 04:00:51 2025 GMT
Subject: CN=a3df1788a7e2111546407c23befe2b4953d70f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e5:e6:1d:47:0c:38:d6:84:e9:96:f8:04:7a:
cf:7e:19:84:e0:c0:6f:96:f2:f8:fe:58:5f:f1:19:
57:cd:0e:78:60:d3:44:c9:c3:29:43:6b:03:d1:4f:
b3:ee:f7:80:a5:27:1a:bc:e5:0b:52:fe:5d:36:b7:
03:66:e0:1f:e6:da:a5:17:9a:d4:d1:bb:01:29:d8:
17:99:92:89:c2:ca:9c:43:f6:e8:6f:c4:2f:14:e5:
7a:1f:65:59:0b:cb:23:99:7f:4d:27:86:55:b2:68:
fc:d6:d9:f5:94:a1:b0:e0:73:06:07:89:50:53:1c:
51:fc:31:33:d3:da:85:c2:e9:a1:35:d2:99:b3:1e:
a0:8d:a4:94:be:f8:66:b3:db:ac:6b:09:ec:b6:dc:
bb:08:56:c8:ad:0a:1c:59:f2:6b:ff:14:35:b9:d8:
38:f7:f0:dd:36:f1:2d:10:e0:4d:34:8b:65:9d:b0:
1b:ad:98:0b:16:99:99:a5:73:32:a9:bd:0c:ed:0e:
c8:c4:70:80:fb:df:f9:fc:1d:16:65:19:7c:7f:6d:
ec:5d:5c:4c:4b:c1:b9:e0:a3:05:1b:17:40:68:42:
5e:a8:02:70:03:b6:40:aa:f4:04:4d:f7:0a:fe:b5:
12:73:12:a5:d9:ee:29:94:07:7e:8c:45:ed:7d:13:
d1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DF:17:88:A7:E2:11:15:46:40:7C:23:BE:FE:2B:49:53:D7:0F:4E
X509v3 Authority Key Identifier:
keyid:CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:65:a5:39:df:39:67:79:5f:13:45:56:11:40:f8:3c:d9:5a:
4b:22:83:a2:ce:b3:25:8a:5b:1e:25:bb:1e:36:cc:92:d3:20:
3f:01:d2:65:a5:0f:a0:f1:d4:36:64:1d:69:57:5c:76:26:bb:
ba:e7:6f:99:64:75:9d:55:5c:88:16:91:10:a5:11:cd:90:cb:
c3:b6:55:1e:e1:d4:06:44:c7:44:d1:81:73:c1:06:02:0a:30:
5e:cd:99:3d:b6:be:ec:16:98:f0:36:ef:1e:09:91:45:ad:19:
f2:53:0b:6a:56:47:25:98:bc:5a:85:b8:c2:72:de:31:2d:63:
f1:d8:4c:fe:84:0c:60:fb:15:1e:2c:e6:76:4b:30:1a:c1:c1:
3a:0e:c9:c1:6b:2d:46:3a:dc:6c:8a:66:0e:bf:36:93:c2:35:
dc:3e:37:44:1f:7b:e1:2d:91:da:15:14:df:36:c1:64:75:12:
af:95:e0:42:b1:cd:a9:37:a0:97:09:c8:f1:92:72:71:17:e2:
c4:15:0f:d6:0a:43:42:89:34:5d:61:d1:e0:bf:2e:ae:a2:79:
db:87:c6:5f:6a:a4:36:61:84:ba:61:f2:f9:2d:7f:60:9a:52:
ab:b1:15:96:fc:f4:e8:94:25:40:5b:03:fe:a8:48:d7:52:cc:
2f:5a:6c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:14:09 2025 by rpki-client