Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
File: yp6lFngHtwhbUTEMpg2_K5GYL8c.mft (raw, json)
Hash identifier: PRvtkIM/xYq4a55Lbm1QPpOzKSor8rnKwvf3GbYPIhA=
Subject key identifier: EE:2F:F0:F5:BA:D5:E8:F5:E1:61:21:D5:CA:CC:BD:F1:27:AD:60:A3
Authority key identifier: CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
Certificate issuer: /CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Certificate serial: 01976CCF60C7E017276F451991E6776B2AA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
Manifest number: 0A94
Signing time: Sat 14 Jun 2025 05:00:19 +0000
Manifest this update: Sat 14 Jun 2025 05:00:19 +0000
Manifest next update: Sun 15 Jun 2025 05:00:19 +0000
Files and hashes: 1: xsFDhAZJurVFLNSpvCJf1kS8dwM.roa (hash: wMuwURUbdvicot2CMjliv2z3rDNvHfV1WIAmLSMG/Bo=)
2: yp6lFngHtwhbUTEMpg2_K5GYL8c.crl (hash: NQU0ppQyoelNqDVd2XBag1uHKbYrgZeUa2Up9bV71Zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:60:c7:e0:17:27:6f:45:19:91:e6:77:6b:2a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Validity
Not Before: Jun 14 05:00:19 2025 GMT
Not After : Jun 15 05:00:19 2025 GMT
Subject: CN=ee2ff0f5bad5e8f5e16121d5caccbdf127ad60a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:72:fd:22:af:0b:eb:66:4c:86:7f:8b:48:f7:
d0:e5:a7:4a:53:80:b6:50:f2:f9:01:61:3c:fb:e2:
3e:21:25:10:f5:52:bd:e0:a1:6d:c2:3a:46:66:d7:
74:81:bc:f2:46:e6:c9:8f:6d:d0:55:a8:26:29:1a:
0f:93:b8:72:ec:87:05:31:1a:28:76:31:bc:bc:0d:
97:a8:68:98:81:0c:05:3e:c7:73:c7:44:93:7d:97:
a9:f9:70:95:2d:08:c8:a5:6a:e6:3f:21:60:31:63:
8b:b6:e4:a1:b9:99:91:5a:30:8a:2d:6f:69:18:45:
dc:4d:58:2b:07:91:aa:6c:2d:b3:60:42:06:9a:0a:
e1:1c:73:53:22:9f:70:5e:e4:15:9c:7b:e4:32:51:
cd:11:6d:3a:3c:f9:e2:43:7e:2b:20:76:bf:f3:2c:
76:3b:18:90:40:40:df:3f:95:22:d1:6f:99:9b:b0:
28:95:2b:c5:13:9c:5a:3a:b7:f9:8a:fd:01:df:81:
96:27:e6:16:89:96:e4:18:25:4b:9a:df:ab:34:9e:
50:e6:69:f9:9a:5c:d1:e3:42:f1:10:ba:7c:4b:bc:
71:16:10:4e:04:53:3d:ec:d0:6f:28:36:71:4d:15:
ae:fe:e3:9a:81:45:ce:ba:01:00:c0:af:5a:8f:a3:
93:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2F:F0:F5:BA:D5:E8:F5:E1:61:21:D5:CA:CC:BD:F1:27:AD:60:A3
X509v3 Authority Key Identifier:
keyid:CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:15:dd:25:79:ab:f5:e8:be:e2:5c:27:68:c7:f3:af:56:b1:
d6:43:1b:39:0a:6f:cf:a3:50:9a:ed:48:96:c4:f1:0c:61:b1:
9c:00:6b:60:46:0b:b1:19:6f:a8:dd:ac:f9:75:3c:8e:32:20:
4f:a9:37:1b:29:e8:39:d7:a4:01:7a:ed:e0:b5:0b:34:ff:b2:
75:a7:fc:4a:ac:0f:a5:4f:25:9e:b9:6f:f5:84:e0:3b:92:41:
96:96:86:8d:5b:bf:55:a4:c3:a5:1b:a2:68:27:72:44:8a:2b:
c2:cb:be:50:2e:b4:97:5d:97:29:0f:17:aa:fa:43:96:0f:74:
0e:3f:83:f4:c3:c6:dd:48:1b:71:4a:89:33:ac:0a:57:27:a0:
6c:8a:f2:32:51:7c:22:a1:a8:a4:c6:4f:61:bf:4f:45:e4:7b:
99:9e:7f:26:3e:d9:c6:77:ae:45:8a:73:e8:66:93:27:45:bc:
cc:9f:25:f7:85:5b:e9:3b:56:a5:b3:f3:fc:84:94:b2:b4:45:
45:40:dc:b4:72:16:0a:ed:f9:c5:c7:46:11:c2:9c:5b:56:13:
07:06:1b:d4:ec:c2:b1:cb:88:9d:e7:e9:0e:a3:69:60:98:2d:
5f:59:5f:8e:aa:d6:30:08:c5:41:79:10:ad:14:1e:ff:cf:17:
6c:bb:16:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:00:41 2025 by rpki-client