Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
File: yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft (raw, json)
Hash identifier: m2SQrdiWw39oVN7XIdJh3oBOYa60CMKsgs6U/AbO5QU=
Subject key identifier: 63:9E:26:92:7E:1F:AD:C9:9D:6D:BC:81:08:84:FE:E6:90:8E:39:B7
Authority key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
Certificate issuer: /CN=c8d335041718b18830b1f58c15d3518510fe6118
Certificate serial: 0197707550076BF012D168005025E6A58A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
Manifest number: 0DFE
Signing time: Sat 14 Jun 2025 22:00:25 +0000
Manifest this update: Sat 14 Jun 2025 22:00:25 +0000
Manifest next update: Sun 15 Jun 2025 22:00:25 +0000
Files and hashes: 1: 4vlmdPXJEIj9BD5XrGcncgmk5j4.roa (hash: riPKiYt/L7BDSbhqPzWMVJUAIze+SOZFasERkJ2mKqY=)
2: 6JnpDB-avLJy-XNKDDSSHNV24As.roa (hash: Y/YVn+7OJ+S4qmnI1JW4HV1PsJFLQFMKAejvFBc5SZo=)
3: yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl (hash: n3nEAQYLbIX/2hCTZmvqCehHh+4vr9hOMX3JBNwZHEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:50:07:6b:f0:12:d1:68:00:50:25:e6:a5:8a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d335041718b18830b1f58c15d3518510fe6118
Validity
Not Before: Jun 14 22:00:25 2025 GMT
Not After : Jun 15 22:00:25 2025 GMT
Subject: CN=639e26927e1fadc99d6dbc810884fee6908e39b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b5:22:39:fb:f2:fd:ce:55:75:8e:40:54:40:
86:3b:87:63:12:64:a7:01:27:d3:7b:e5:94:98:19:
eb:98:58:59:cd:f8:8c:dd:55:d1:7a:29:10:07:9d:
b8:f5:2b:32:00:b7:c6:34:e3:77:72:73:00:f0:96:
f9:d3:80:f7:9f:73:df:27:56:76:95:f2:aa:1a:88:
0f:d5:68:7e:a6:d5:f1:43:8b:f0:27:b7:fc:86:8b:
fb:f1:bf:7b:2d:7d:9d:f3:02:ec:49:57:a1:d6:df:
a4:08:7d:a7:93:60:e3:7a:d5:6b:51:9d:eb:af:fb:
6c:61:d9:be:5b:28:7b:7f:37:aa:34:aa:59:29:8e:
24:b1:4b:7d:4b:33:22:18:b3:79:72:a4:b6:c9:dd:
c3:fc:be:8f:20:47:80:b0:a0:c9:1d:c5:f4:55:9c:
c5:1e:46:4f:5a:c7:ac:b2:b4:94:ab:7e:fc:7d:f1:
ba:f3:17:97:a0:16:7b:47:43:5c:07:b1:df:16:d7:
39:df:fa:ed:02:f4:73:8a:db:04:68:13:0e:fc:fb:
1a:9c:2b:b9:3e:fe:f1:c2:28:ed:99:4e:cc:20:e0:
a2:2f:4d:87:45:51:06:c2:3a:14:b2:59:0c:cb:d5:
83:2c:90:66:b9:0c:d2:6b:52:43:8d:f7:07:a3:15:
6b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9E:26:92:7E:1F:AD:C9:9D:6D:BC:81:08:84:FE:E6:90:8E:39:B7
X509v3 Authority Key Identifier:
keyid:C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:15:57:b9:d3:22:79:bf:ed:70:4d:6f:4d:e0:c1:f0:5a:0e:
af:fd:c7:b6:c7:df:73:18:5e:03:d1:f9:ec:bf:13:f5:40:f9:
62:5a:5a:9e:47:e2:12:9c:8d:1b:98:e9:10:ef:f4:a4:e5:82:
20:65:e0:ac:67:a3:74:f4:d2:7c:23:94:a5:3d:a4:71:7c:28:
bc:2a:cc:75:85:ab:ef:76:69:00:2b:e6:af:0d:46:da:60:65:
b0:f3:1d:c7:de:e8:78:cb:a3:48:ca:60:fb:00:14:05:86:f2:
d9:6f:c9:c0:6a:8f:ad:80:52:cb:7a:7b:01:99:1c:4b:fd:0a:
d5:a0:73:53:c4:f5:e9:b0:6e:55:0d:27:db:8f:ac:cc:38:b9:
c9:b8:70:23:f1:a4:0e:88:c3:95:c8:8d:05:c8:5c:20:06:09:
ff:5e:b8:b0:28:f6:fd:d7:a5:51:00:27:62:29:a3:c0:c0:aa:
bc:cc:a0:a9:7e:f1:88:af:7f:f8:24:33:2e:39:44:0d:ae:c0:
38:4c:be:4d:e3:96:5a:c7:b5:06:b9:12:7f:d9:ea:61:d9:c3:
95:e4:47:2b:60:b2:ff:f7:00:e1:00:8b:58:64:fc:40:ae:12:
f7:d8:14:14:3e:88:58:1b:f0:0e:0f:e9:e8:b7:a5:2d:22:25:
a7:92:c1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:01:41 2025 by rpki-client