
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
File: yAYJ8hhRvff3TtGPDwnfku23U1U.mft (raw, json)
Hash identifier: fE8Cil577mVdR3Z0hm8Z8yErnKCTsWzUwQ4UPpRGqB8=
Subject key identifier: B9:11:D0:A1:ED:10:36:10:9E:B0:A3:C3:6E:9F:0E:78:A7:A7:0F:62
Authority key identifier: C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55
Certificate issuer: /CN=c80609f21851bdf7f74ed18f0f09df92edb75355
Certificate serial: 01976F9A56DAD5B716F7D8B6D17B08EA152E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
Manifest number: 0D55
Signing time: Sat 14 Jun 2025 18:01:15 +0000
Manifest this update: Sat 14 Jun 2025 18:01:15 +0000
Manifest next update: Sun 15 Jun 2025 18:01:15 +0000
Files and hashes: 1: Wg-bSrUatmukyH3xDDiSbozsSDE.roa (hash: +C5Ooc81ApTJACiPZcILtsd+XtVBtietyO7rZMjbj2I=)
2: yAYJ8hhRvff3TtGPDwnfku23U1U.crl (hash: zL7HzNQiEQ7bSd9kq4fNceRDIElcBwO0Mg+jswosaQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:56:da:d5:b7:16:f7:d8:b6:d1:7b:08:ea:15:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80609f21851bdf7f74ed18f0f09df92edb75355
Validity
Not Before: Jun 14 18:01:15 2025 GMT
Not After : Jun 15 18:01:15 2025 GMT
Subject: CN=b911d0a1ed1036109eb0a3c36e9f0e78a7a70f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:17:71:87:c9:5b:a5:a5:99:9f:fe:c5:62:74:
3d:5d:00:fb:9b:77:62:07:3e:a7:77:bd:61:e2:0a:
30:4b:a6:1d:04:54:72:47:d0:f4:8d:c6:88:13:a1:
fb:5a:e7:de:68:73:c3:8b:1b:12:b9:2f:26:a4:86:
a7:20:99:66:cb:22:8b:a3:5f:9d:ae:4b:a2:0f:1f:
48:9a:72:7a:21:f4:cc:af:f3:a7:d0:29:6a:7e:9a:
36:82:f8:24:e6:00:18:4e:b5:33:6a:98:91:f0:3b:
40:5a:cd:54:92:14:76:c0:ec:ef:28:a4:b0:b3:5f:
d6:54:8c:e7:5f:4c:05:5f:e1:f3:c1:fd:38:b1:39:
ad:ad:cb:cd:18:3c:0d:51:1d:aa:de:00:4e:86:ad:
dc:50:a4:1b:33:92:a0:b2:d3:99:ee:85:1f:f6:0d:
52:35:5b:2b:32:0d:21:e0:6c:d4:38:9a:66:75:49:
55:bf:06:d6:be:68:d2:84:08:6b:07:b3:54:74:fa:
8a:23:f9:dc:f8:0d:59:1c:48:f5:6c:f9:53:15:f1:
2d:bf:b0:cb:bc:0b:7c:bb:e2:64:ea:5c:94:5b:c6:
ef:b2:08:7e:ec:c6:9c:1a:b1:80:c7:d0:66:ee:67:
97:1c:64:bc:53:33:25:56:52:7d:a8:93:cf:1e:bd:
35:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:11:D0:A1:ED:10:36:10:9E:B0:A3:C3:6E:9F:0E:78:A7:A7:0F:62
X509v3 Authority Key Identifier:
keyid:C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:fd:7d:1f:c2:06:ba:ca:09:d3:cd:14:d1:e0:fc:ce:1d:fa:
10:27:2e:61:32:ac:4f:0e:5e:b2:b3:48:1a:81:cf:ff:4e:f2:
62:ae:db:de:ec:0c:41:63:bd:cd:70:8b:7a:19:6e:3b:3b:96:
40:af:b8:be:31:54:f3:5e:6a:aa:21:ae:62:49:fd:27:e0:69:
3b:1e:b6:e9:84:40:82:ba:aa:1b:4d:43:c6:57:dd:60:66:20:
a2:c9:72:88:3c:dc:5f:7e:bd:52:ac:4a:9e:88:97:fb:b6:43:
9f:71:a3:ab:e6:ea:98:5c:45:c1:64:4f:4b:d8:77:24:8d:8c:
dc:48:3c:88:12:98:67:12:be:30:e1:32:71:b4:cb:e5:2a:c4:
53:d6:3d:40:c2:49:8b:b5:2f:ad:db:bb:63:ec:08:97:7f:1c:
6a:90:09:cc:13:50:35:08:e0:bd:ff:32:6a:29:d3:5b:42:87:
9c:3c:5f:78:36:83:ab:16:01:6a:43:4c:9f:93:fe:0f:c4:f4:
f7:33:44:8d:40:73:ec:3e:93:df:ae:70:05:c3:2b:eb:e4:70:
fa:77:6d:25:8a:ab:f5:09:c2:67:90:d6:5d:7e:40:56:60:39:
a5:60:0d:01:f0:b3:f2:d0:0e:13:15:cd:01:13:ce:77:36:9f:
88:5a:43:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:20:30 2025 by rpki-client