Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
File: yBhKRQWwV2BY_TMwWb_xU65urVs.mft (raw, json)
Hash identifier: XU8nYASCOP7aYEZS5L8mSLI5My7GcGHy/uIb/Pf0ULw=
Subject key identifier: 34:66:37:ED:B3:E0:1D:32:9F:67:2F:A5:9E:3A:BE:67:BB:65:EA:99
Authority key identifier: C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
Certificate issuer: /CN=c8184a4505b0576058fd333059bff153ae6ead5b
Certificate serial: 019771BF63715186ACA6B125163297A44138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
Manifest number: 0CC6
Signing time: Sun 15 Jun 2025 04:00:57 +0000
Manifest this update: Sun 15 Jun 2025 04:00:57 +0000
Manifest next update: Mon 16 Jun 2025 04:00:57 +0000
Files and hashes: 1: nc-Ut0N4YEzlSxLCriwNW3L5bJY.roa (hash: CpEDv7qT3u78wfAAABUYzMXZLOCk+u5BsQilcshLjO0=)
2: yBhKRQWwV2BY_TMwWb_xU65urVs.crl (hash: U7sgIHRjpLuVhEtftarLousLtFAuDU6at5dIatvrj/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:63:71:51:86:ac:a6:b1:25:16:32:97:a4:41:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8184a4505b0576058fd333059bff153ae6ead5b
Validity
Not Before: Jun 15 04:00:57 2025 GMT
Not After : Jun 16 04:00:57 2025 GMT
Subject: CN=346637edb3e01d329f672fa59e3abe67bb65ea99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a6:34:c6:f1:eb:c2:bd:61:3d:d7:66:d5:a4:
d0:bc:c7:14:c1:2b:80:61:c3:5e:5b:c1:5e:99:44:
71:f6:60:91:c2:03:ff:e1:9f:90:4c:c5:78:5c:67:
92:84:24:3c:f0:83:2c:d4:d7:15:38:94:a6:3b:eb:
aa:b8:b4:b4:21:87:0d:96:5d:02:0e:71:55:31:50:
68:99:d6:5e:c3:2d:98:2a:7c:ca:5f:e0:59:06:f2:
c7:2d:0e:bf:e5:76:01:91:7b:86:9c:9a:46:30:c4:
83:40:a9:6e:29:a7:2d:a2:87:2f:15:a2:6c:50:b2:
45:b0:40:2d:98:21:e2:da:9a:65:3e:6c:63:70:0a:
a3:f3:07:a4:45:3f:b6:36:34:66:15:5f:8c:0d:25:
07:90:9b:d7:6d:b1:a1:c7:a1:9a:97:7e:d5:a0:e7:
02:4d:12:17:cc:0d:f5:59:ce:0c:47:fb:05:dc:bf:
41:e6:aa:ed:6c:9e:38:d2:3d:5b:30:6e:07:9c:49:
bc:a6:b6:78:bd:3e:89:b2:9f:98:1a:0e:9d:8a:11:
dd:11:ed:fa:51:7f:9b:30:95:ba:c7:07:15:27:81:
94:24:46:1d:cd:f6:d7:4b:a2:c0:0c:84:75:e6:cc:
45:a8:cb:64:9e:28:eb:78:91:4d:b0:48:5e:71:26:
21:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:66:37:ED:B3:E0:1D:32:9F:67:2F:A5:9E:3A:BE:67:BB:65:EA:99
X509v3 Authority Key Identifier:
keyid:C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:16:c8:4b:8c:f8:16:17:8a:24:bf:c9:8a:13:26:ce:25:e4:
b4:99:f2:47:86:4c:ff:f1:cf:ff:7b:0d:a4:35:f7:96:a4:d0:
b7:38:4d:ab:40:82:18:ca:be:42:4b:49:ed:5a:c1:93:0b:8e:
fb:cf:30:e6:f6:5f:cd:6a:34:ed:88:f3:2f:bb:36:08:98:25:
01:86:e3:92:3c:a9:7f:1e:40:0a:f1:0b:c1:b5:c5:75:ea:24:
39:c9:1d:a0:d7:6f:fa:00:11:80:89:3b:f6:f8:a8:59:8c:ad:
41:cf:10:42:ef:5b:49:72:5a:24:71:8f:bb:cb:35:f6:ad:c4:
10:65:e4:ea:64:0f:4a:7a:6a:75:30:2b:8f:e5:25:24:28:57:
51:b3:6e:dc:cd:c3:42:74:72:e6:d3:9a:b2:49:4b:62:dc:33:
db:cb:86:b1:1d:58:2c:b7:0b:96:ed:8f:a0:ea:d2:42:c1:0a:
45:2b:5d:0e:1b:c0:1f:02:d3:99:fa:35:7a:92:ce:1f:6f:d6:
78:ab:7b:8f:36:35:84:4a:4c:c5:96:23:91:b8:c5:c4:8f:41:
d6:a0:54:f2:22:c4:a2:bd:87:a0:8a:9a:02:38:fe:31:bf:33:
2a:78:c6:e6:36:e3:64:65:99:33:6a:3e:3c:01:5b:c8:b7:e0:
90:6e:ca:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:36:42 2025 by rpki-client