Manifest
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft
File: yqgF26w2R0m5sRVZCrbvD5cM29g.mft (raw, json)
Hash identifier: NTBdo211V859ZR49Ud5olteVD2al39UC/XAZRHWzZ5c=
Subject key identifier: CF:75:C7:49:EB:96:45:5C:6E:8F:F8:70:1B:EB:1F:96:4F:79:F1:B4
Authority key identifier: CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
Certificate issuer: /CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Certificate serial: 021ABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft
Manifest number: 021667
Signing time: Sun 22 Jun 2025 03:42:44 +0000
Manifest this update: Sun 22 Jun 2025 03:42:44 +0000
Manifest next update: Sun 22 Jun 2025 09:42:44 +0000
Files and hashes: 1: 111wEGLfsrCC1YXvRd90Mcgv3so.roa (hash: aK/B7f1mLzo2P0di31RLAL/n8lybzDgTkqimo9ZZzzQ=)
2: D53F-thyu-FB_Q-Qnu54dMG6kUc.roa (hash: F5BasJ7cpf0y1kDUV2GhJ9A7f+WVJ9Tg97K4I87sONg=)
3: SDnJ5mezCjLuEx8ibUeI4qVoUpw.gbr (hash: Dh33tig5Tgg5x+zwGknTxUqLVhn4qAhDHuz7dInvOBw=)
4: XUJQ4tgdREjYop786R0p_wdeyeI.cer (hash: DrDVi/JiphSff/KUlYHrSjbrW1zgVdfqUcsc6Tdez74=)
5: euv64En05073B5-r95s2Uu_UwJg.roa (hash: XiuUZ8UmidXN8hBLSaaK/0y/A/0mIPPIW4YyRcs2pUg=)
6: voibVdC3Nzl9dcSfSFuFj6mK0R8.cer (hash: WwOEnrqRnDl0WwBdK6nhQGVkfYQQotE+5n1JMM/b8Bw=)
7: yqgF26w2R0m5sRVZCrbvD5cM29g.crl (hash: NbCjsUVTzJRuAwsEziNAeei93wH8L4AKHGWcYuOXYbQ=)
8: zIlYN-tDLuEj0BDwZSi5PS1eIDI.roa (hash: qLS98wDD6uBYR/1xGuHLGjRWrS9SRA1uwPUMSp/TaYE=)
Validation: OK
Signature path: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Jun 2025 09:42:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137919 (0x21abf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Validity
Not Before: Jun 22 03:42:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=CF75C749EB96455C6E8FF8701BEB1F964F79F1B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e6:e7:56:e4:87:73:15:f5:a4:ce:2f:9f:82:
4d:05:06:8f:6d:ed:a7:7f:0f:18:17:92:fc:48:6f:
25:35:65:08:a6:60:1d:5e:b5:7f:d7:3a:cc:29:41:
ae:4f:9e:19:a1:13:13:26:a9:fa:09:1e:f6:63:6b:
b2:d7:32:e4:b0:fe:81:17:8f:c9:e7:a6:6d:fe:ec:
0d:44:60:51:6c:b3:c9:bf:ac:0f:e1:31:76:a0:2d:
42:08:a9:f7:31:fc:a7:21:ad:96:4f:6c:02:91:46:
80:3f:0a:43:de:37:dc:90:a1:c4:be:20:02:d1:5d:
50:e3:7e:02:15:98:a1:e3:cf:9a:fc:e8:31:ea:e4:
7e:8d:9c:c0:6f:5a:5c:cb:18:8a:c7:e3:b4:da:b5:
e3:9c:f5:e4:ee:40:f6:16:03:04:cb:0c:5b:cc:29:
39:d4:a3:4a:a7:8a:52:13:6e:72:05:f1:79:f5:80:
12:3d:1e:49:07:bb:ae:48:f2:49:7c:bf:7c:97:63:
0a:df:40:cd:34:0a:97:12:ba:27:85:1b:84:2c:99:
b5:34:07:88:91:2c:09:47:06:33:34:cf:15:1b:09:
36:7e:bf:97:92:95:8d:5e:b9:c1:50:1a:c0:05:a0:
87:8d:37:3c:13:42:18:2d:62:d6:26:40:64:a5:a2:
2f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:75:C7:49:EB:96:45:5C:6E:8F:F8:70:1B:EB:1F:96:4F:79:F1:B4
X509v3 Authority Key Identifier:
keyid:CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:2f:ed:fd:19:cd:83:2a:02:19:ad:99:52:f1:7e:a0:e5:12:
88:30:d6:67:89:53:8d:c6:fd:68:5b:ed:2d:ed:51:ec:05:a2:
40:c0:8f:eb:4a:fc:b7:76:c9:f5:79:a7:15:1a:95:cb:05:3d:
e9:b7:5c:a2:b9:af:91:2b:bb:10:db:51:5c:8e:a6:d3:fe:79:
4f:03:8c:80:7c:1a:ad:55:30:74:e0:1e:a6:bf:6a:40:23:1e:
0c:a9:04:46:e8:bb:e0:11:87:f5:ad:03:bf:60:30:fb:c0:f9:
d0:fc:b1:c2:9c:1c:20:e1:a7:ee:6f:45:42:0d:ac:76:cd:47:
e9:52:eb:6d:af:96:e3:8b:13:4c:4d:8c:93:f1:ee:36:6b:f1:
3a:3b:59:85:27:0f:1b:b7:21:30:e2:26:24:47:67:bb:82:f0:
9e:0e:da:e0:6d:57:b2:f1:a0:a1:fe:73:5c:2b:2d:ea:2c:55:
68:0d:33:3b:bc:0b:5c:7a:39:08:1d:d7:04:1d:2a:71:66:fb:
b3:e1:bf:83:77:b6:7e:2f:3c:d9:74:05:20:e9:5b:43:76:9a:
e8:19:ba:59:21:dc:d6:31:8e:0c:f1:df:d2:5b:78:15:62:08:
86:fb:f9:b6:bc:e0:cf:57:1c:8f:56:5c:52:31:5d:14:71:d6:
25:69:57:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:20:58 2025 by rpki-client