Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
File: yAkUktLOioDAh7h2-R1qPCm-eiU.mft (raw, json)
Hash identifier: 0n/84J5Nun2i7Cc0GHmfLz6dvWya2R5G6Nv8sojEQz4=
Subject key identifier: 44:CD:1F:AF:4F:54:8F:8E:AA:9B:B1:FB:C4:0F:64:39:CB:0B:DB:31
Authority key identifier: C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25
Certificate issuer: /CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25
Certificate serial: 0197982842E94EBB8633DEDEDDEFB529DBA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
Manifest number: 0B9E
Signing time: Sun 22 Jun 2025 15:01:04 +0000
Manifest this update: Sun 22 Jun 2025 15:01:04 +0000
Manifest next update: Mon 23 Jun 2025 15:01:04 +0000
Files and hashes: 1: IUu38IEhp9FcGXHXO7VwuMNYV6E.roa (hash: 0chzG77l4zUiIxP7svJWJ4YTzi1qnItTODpt8dd9BKQ=)
2: yAkUktLOioDAh7h2-R1qPCm-eiU.crl (hash: QBz2igFa6imRNDeBNb2Ud20W7L7aRmfHt1e2cSqkQ0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:98:28:42:e9:4e:bb:86:33:de:de:dd:ef:b5:29:db:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25
Validity
Not Before: Jun 22 15:01:04 2025 GMT
Not After : Jun 23 15:01:04 2025 GMT
Subject: CN=44cd1faf4f548f8eaa9bb1fbc40f6439cb0bdb31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:c8:75:70:c7:f5:1a:65:ee:72:b2:9a:15:
2d:24:38:56:5a:88:0d:bf:13:30:c6:2d:d8:10:ca:
ad:90:9e:b3:2e:76:82:63:6f:96:b3:e7:27:80:6c:
1d:e1:a1:d9:0d:b3:1f:23:8a:cc:42:b8:a0:ea:de:
d9:2f:8c:e2:37:4d:b2:0d:2e:75:f2:11:d7:52:a8:
6b:cf:e4:ee:87:f4:07:c6:39:65:42:1c:53:68:53:
76:83:a4:1b:40:fb:56:81:a5:0e:0b:d5:3b:f9:db:
e4:79:3e:ee:0d:8e:ee:9c:0f:6b:a3:4b:a5:cb:e5:
e5:14:c9:12:0b:62:db:52:96:3b:e0:00:d7:47:8e:
34:e1:05:c6:03:cc:8f:21:f3:56:76:00:99:79:d2:
bb:9d:e4:7a:bf:0e:c8:df:7b:24:fd:73:33:4f:a3:
20:9d:a3:68:e3:dd:6a:18:a5:60:e0:1b:b6:8c:4b:
30:00:d3:89:ec:11:52:2d:48:80:5b:9e:42:31:1d:
0e:9e:52:5a:ac:4f:8d:2c:51:7f:1a:95:d8:5a:8c:
96:37:23:ac:06:60:9a:dc:c0:01:20:55:8d:fc:e2:
5e:af:54:77:04:bf:d3:6b:8d:03:0e:e4:07:53:e8:
c8:18:57:5a:c6:c3:8e:8a:09:49:dd:2b:94:80:95:
b3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CD:1F:AF:4F:54:8F:8E:AA:9B:B1:FB:C4:0F:64:39:CB:0B:DB:31
X509v3 Authority Key Identifier:
keyid:C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:8c:f1:57:d3:17:56:99:56:6e:69:cb:0a:e7:6b:1b:1d:c3:
33:1e:44:cb:74:00:78:9a:7b:d7:e4:6b:e1:6b:40:39:df:96:
ab:16:0b:08:e8:bc:37:20:ff:3d:f3:9e:b9:43:f5:54:a5:9e:
49:06:e8:72:d6:15:dc:0c:1a:6b:fd:bf:2b:51:3a:8d:4e:7b:
63:c5:f1:69:ca:46:03:2c:a7:d3:ea:75:bc:30:64:b6:c6:e5:
92:fb:d8:51:21:d9:f9:cb:01:3e:39:72:07:62:c3:8f:6a:6d:
73:48:46:e4:17:5f:9a:82:75:df:98:86:9e:f1:8a:ce:90:a4:
7d:34:85:4a:27:74:23:dc:d6:a0:f1:4a:bf:97:2d:41:fa:b7:
71:7b:67:0e:77:21:35:be:86:08:2d:4d:05:7c:b5:be:94:49:
61:13:5e:14:0b:20:76:b6:56:78:2a:93:93:57:40:15:5d:08:
68:b5:0a:84:65:6c:9b:07:42:5a:1b:46:f0:3f:31:08:ed:b0:
7e:ce:e2:14:f2:9e:c7:45:b2:7e:ac:7a:e1:57:37:ef:02:b7:
69:33:f8:49:af:4f:c1:7c:81:9b:72:53:da:90:1d:91:aa:f3:
48:6b:9e:59:bd:41:7e:5a:9f:54:31:a0:01:bf:3e:35:cf:2a:
33:0d:10:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 18:36:13 2025 by rpki-client