Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft
File: yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft (raw, json)
Hash identifier: yGZ8IVjMWCu5linxU6AKgAMICV/WrQ0vOKSA6X2l1T8=
Subject key identifier: A6:CB:71:0A:0C:14:6E:84:EF:D2:81:86:28:24:27:81:99:77:0F:01
Authority key identifier: C8:29:4A:2C:0C:49:DC:93:6C:B9:88:B6:85:B3:A7:D9:5C:8F:E0:B7
Certificate issuer: /CN=c8294a2c0c49dc936cb988b685b3a7d95c8fe0b7
Certificate serial: 0197887D67E4FE1C313602BA866760A1F5DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft
Manifest number: 0118
Signing time: Thu 19 Jun 2025 14:00:09 +0000
Manifest this update: Thu 19 Jun 2025 14:00:09 +0000
Manifest next update: Fri 20 Jun 2025 14:00:09 +0000
Files and hashes: 1: hGnhNt09WVSvAvlRb80VOz0njRw.roa (hash: reYotro4wzpVN+aJarCV//yL8yhlq3gQQiQttC9Xbrk=)
2: yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl (hash: j4BL6nNXeg4Suq61ZpEEPbykFoDwYi214HBN4+PXEAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:7d:67:e4:fe:1c:31:36:02:ba:86:67:60:a1:f5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8294a2c0c49dc936cb988b685b3a7d95c8fe0b7
Validity
Not Before: Jun 19 14:00:09 2025 GMT
Not After : Jun 20 14:00:09 2025 GMT
Subject: CN=a6cb710a0c146e84efd281862824278199770f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:10:03:a1:87:eb:0a:b3:95:a3:01:61:79:06:
6f:2a:bc:b2:a5:b8:57:18:bb:bc:a4:68:d3:f3:71:
ed:b0:cc:ce:df:db:64:e4:dc:a3:e4:83:2e:00:e8:
cd:db:a1:8f:42:3d:f1:37:d8:6e:b9:0e:0e:c5:2a:
d3:74:ad:27:24:b9:8a:57:74:3b:a0:fb:01:ba:74:
31:70:1b:d5:eb:2b:ab:9e:e1:cb:9f:c6:6e:63:9f:
14:c9:43:8b:59:4f:07:5e:0c:a4:2d:68:ac:24:99:
ce:c7:e8:ab:fb:09:b0:3d:69:de:e5:e0:19:c4:80:
2d:a9:ac:e5:39:e7:5e:87:8a:cf:f7:39:78:48:6a:
05:2e:3b:b1:bc:61:13:d9:6a:66:d1:8e:dc:fe:ab:
6e:7d:10:28:ea:06:b3:9c:af:36:aa:c5:39:bd:31:
e1:12:a0:b1:24:70:48:35:87:de:fc:63:60:90:86:
81:be:8d:c6:31:0d:dd:a5:c3:9a:c3:c9:b1:f7:6c:
f1:a5:66:1b:cf:da:f6:4f:7a:09:b2:37:9d:40:d2:
54:bb:b2:1b:e4:3d:ac:31:1e:e1:76:e4:45:7b:7d:
eb:20:93:c2:21:3e:df:3b:05:f6:56:26:bc:f9:13:
68:79:83:65:39:1b:07:d0:42:f9:50:c9:d6:ce:10:
44:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CB:71:0A:0C:14:6E:84:EF:D2:81:86:28:24:27:81:99:77:0F:01
X509v3 Authority Key Identifier:
keyid:C8:29:4A:2C:0C:49:DC:93:6C:B9:88:B6:85:B3:A7:D9:5C:8F:E0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:3d:77:95:36:68:3d:0f:23:5d:30:b8:86:fe:3f:30:d2:c3:
77:31:11:cf:74:4d:40:c2:35:70:45:98:55:1c:ea:88:b5:a5:
34:a3:74:e1:0f:d3:34:d2:4d:0b:8e:44:ba:39:eb:d2:bf:3e:
e7:36:82:18:02:a0:58:42:78:a4:16:b4:62:79:6d:ce:19:0f:
97:86:a0:76:cb:01:8f:6c:a9:fd:a1:4c:f6:2b:89:dc:12:73:
94:23:d1:74:87:6d:0c:fc:ac:f5:d5:a7:0a:66:cf:f8:d0:15:
da:8e:ae:3a:c8:07:0f:45:2c:b3:ab:10:c7:be:f6:69:bc:bd:
fe:1c:72:64:f7:23:ca:38:2e:84:80:9f:33:85:28:54:5f:45:
d1:c0:5c:30:1b:83:56:8d:ea:8a:59:d9:9d:0d:82:c5:51:14:
24:9f:c1:67:5d:55:8c:4d:c3:67:c2:cd:ae:90:47:88:92:9d:
ad:b8:40:b9:5c:08:57:93:e0:01:5b:77:a7:a7:47:e6:4d:af:
b4:d8:f1:d4:60:81:2c:1a:83:aa:f5:fd:9e:16:3f:c8:3b:a0:
ea:9e:58:6c:48:e7:a8:0f:f5:6f:6a:ef:0e:21:75:41:52:1d:
e1:6a:44:eb:99:4b:92:4a:b7:83:e6:2f:8a:3f:11:87:4c:b0:
6b:75:55:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 20:51:09 2025 by rpki-client