Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
File: yaOl5BHeryKE_9AVML-0H4Fsu6M.mft (raw, json)
Hash identifier: rxh24lRJDZe+a00YWMwaZKQ6Z3BeoejG7+F77ogiFos=
Subject key identifier: BD:73:81:25:44:41:74:AD:47:08:9A:4E:4B:04:8A:22:08:4D:41:B9
Authority key identifier: C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
Certificate issuer: /CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Certificate serial: 019774F7CD779FC3E3255B3BF291CB6402E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
Manifest number: 0369
Signing time: Sun 15 Jun 2025 19:01:26 +0000
Manifest this update: Sun 15 Jun 2025 19:01:26 +0000
Manifest next update: Mon 16 Jun 2025 19:01:26 +0000
Files and hashes: 1: UVQQxsyFxE5G_GAZUd3A6ZXjkCE.roa (hash: zpm9oScjJUHtNk/CwO+EVZyjIHRYFCB8FAgH34Qnsvo=)
2: yaOl5BHeryKE_9AVML-0H4Fsu6M.crl (hash: LekmLqzY4/mESrj8349a7T5ukl6t7jBfjTD5zGTNlTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f7:cd:77:9f:c3:e3:25:5b:3b:f2:91:cb:64:02:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Validity
Not Before: Jun 15 19:01:26 2025 GMT
Not After : Jun 16 19:01:26 2025 GMT
Subject: CN=bd738125444174ad47089a4e4b048a22084d41b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:40:a7:0d:b0:88:f5:40:53:5a:28:ee:93:17:
1f:8d:b1:97:60:90:26:ac:6d:c8:b4:7e:89:f5:ec:
72:ca:29:02:fd:df:84:70:33:02:ec:cf:02:23:d5:
d6:40:30:e2:72:f0:74:ed:8a:36:43:2b:a3:3f:78:
14:c5:0e:ec:e3:12:04:9c:ff:32:b7:b4:02:94:e7:
dd:0c:f1:6f:c4:7d:49:4e:11:70:57:00:b2:86:9e:
83:26:6e:ea:ec:98:4e:fa:42:7b:db:9b:3c:15:61:
95:88:fc:79:8c:09:b1:c3:4b:3d:65:7c:1e:87:17:
94:07:8b:97:64:b7:c5:56:c4:f1:43:4c:50:ae:1b:
a1:b6:53:34:f0:94:99:f5:0b:af:d5:86:b3:34:38:
ac:00:47:42:7a:66:44:ca:fb:9f:8e:e8:0e:49:13:
4b:51:3c:08:bd:2b:51:93:9a:86:4f:86:b8:99:d8:
1a:97:22:de:78:5f:ad:1a:bb:3e:1c:bd:19:88:ec:
b5:fb:8b:9c:8c:4e:0a:4e:c3:0f:6e:c8:fe:a5:60:
2f:60:9c:07:0a:9f:9e:b5:c6:36:59:5d:b2:7e:b8:
c7:1f:7d:54:eb:4e:e9:e5:29:b2:89:73:bf:8f:95:
45:06:f9:5d:d5:dc:a8:1b:25:a4:4a:4a:74:68:fb:
64:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:73:81:25:44:41:74:AD:47:08:9A:4E:4B:04:8A:22:08:4D:41:B9
X509v3 Authority Key Identifier:
keyid:C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:90:bd:f9:cd:26:88:27:d7:a3:40:9d:15:e1:56:5a:3b:df:
c6:dd:3d:b0:21:7c:2e:fb:49:19:77:c0:83:65:d4:04:99:e2:
3d:2f:11:94:76:34:fa:8e:c1:9b:2d:24:e0:ba:41:f0:97:be:
bc:fa:f3:bd:a8:93:0f:d8:03:8e:ec:f6:21:c3:2a:fd:30:e3:
42:f6:97:60:8a:25:8b:06:3f:07:7d:a0:5b:4d:6e:f8:e7:de:
75:18:cc:fa:38:68:4c:06:a4:59:a8:aa:3a:e1:4a:db:6e:d3:
0f:90:bf:fd:cd:89:cb:ed:e8:d1:d7:4e:b9:48:1b:55:32:ba:
4b:6b:cd:2d:24:3c:51:fc:db:16:77:95:d0:40:a9:34:3a:0d:
8d:7f:81:0a:9e:b2:03:b3:83:20:9a:68:54:a7:23:32:47:1d:
ed:6d:29:33:22:7a:26:3a:ee:e0:43:fe:bd:4d:84:11:24:69:
57:be:f1:64:de:6f:44:ec:09:8d:a7:b9:cb:f4:7b:83:d5:b8:
4b:be:18:ff:cf:30:87:b0:ee:b3:99:e3:60:ba:9e:50:43:77:
43:e1:7f:81:7d:27:3a:c8:43:26:80:1b:0d:ee:05:44:9c:49:
bb:3b:6c:5a:55:a0:ab:dd:27:da:0f:fc:59:e8:e6:5c:00:32:
1d:82:3b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:21:57 2025 by rpki-client