Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
File: yPJYziA-BKM_TpBlEVOyWc_6Pog.mft (raw, json)
Hash identifier: C6uTbPBeZYUliSZYQs65HJvkTUO7C4CHqUywdrhO+jM=
Subject key identifier: 28:FC:CE:07:D9:15:42:15:16:F7:B5:AB:87:84:4D:F0:A3:38:66:B3
Authority key identifier: C8:F2:58:CE:20:3E:04:A3:3F:4E:90:65:11:53:B2:59:CF:FA:3E:88
Certificate issuer: /CN=c8f258ce203e04a33f4e90651153b259cffa3e88
Certificate serial: 01976D3E2E849F5C683D9462F62DB5BEEDB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 07:01:20 +0000
Manifest this update: Sat 14 Jun 2025 07:01:20 +0000
Manifest next update: Sun 15 Jun 2025 07:01:20 +0000
Files and hashes: 1: 3OPKqlzsdO_6FnnigdjEBtH5MGI.roa (hash: TGXodn+4ZnMS0vB8YcYqILiualGqtvptFZ+aYltyIls=)
2: DSP2YiR4WzjHqSWGSS08rUQRgbE.roa (hash: wRqBcz801mLsMlnqTiS+wIo1U44VP4wBktKdtKLPifQ=)
3: L-DhFAOlHk5rFENU35v4H6Y8kC4.roa (hash: es/wTE6LdxRXaEI3U8d6ZJo/4QzkGb/m+lXYCfWMDmo=)
4: yPJYziA-BKM_TpBlEVOyWc_6Pog.crl (hash: nMWHDtmW1f2BtZNLYwjkPCuzTMakz4TUopd03YPEaMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:2e:84:9f:5c:68:3d:94:62:f6:2d:b5:be:ed:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f258ce203e04a33f4e90651153b259cffa3e88
Validity
Not Before: Jun 14 07:01:20 2025 GMT
Not After : Jun 15 07:01:20 2025 GMT
Subject: CN=28fcce07d915421516f7b5ab87844df0a33866b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5c:76:c7:6a:0a:d5:b8:a5:b9:20:b9:8e:40:
88:da:78:f5:aa:76:43:0d:11:ef:af:72:4e:9d:15:
e1:88:bd:23:d7:f3:56:16:8a:4a:54:3b:bd:e6:a3:
7c:50:67:ce:64:c2:ca:f3:66:4c:58:fe:99:f0:12:
7a:bb:9a:2c:b3:cc:67:39:c0:a6:d1:fe:ec:4f:9e:
4e:29:a1:80:e8:8c:51:ca:cc:3a:ae:26:2c:8e:e9:
e4:94:6b:7d:a4:8b:7c:9b:d4:ef:57:16:1e:c6:aa:
21:f9:e5:7a:b0:c2:ca:60:2f:4c:4d:da:9c:32:cb:
b9:31:48:5f:9b:9b:79:48:3a:3e:34:bb:c2:bd:0f:
64:35:fc:9d:f1:ac:23:30:28:4f:c3:a4:59:c1:3b:
68:3a:f4:81:dc:85:b4:13:aa:ab:16:c5:5c:8e:59:
be:61:7f:30:a4:6d:e6:8b:b1:fa:04:f1:4a:c4:30:
2f:1c:cc:ae:88:46:8e:b1:45:5f:94:43:3d:d0:b6:
e7:82:9b:29:a0:86:15:3b:02:18:ad:5d:cd:26:77:
56:6d:e0:e6:3f:bb:95:c4:64:13:a6:a1:4c:75:63:
a6:c7:78:f3:b6:f5:25:23:7d:d1:fc:e7:b4:20:e2:
bb:fe:73:64:04:18:13:39:fd:16:99:5f:be:5d:90:
a1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FC:CE:07:D9:15:42:15:16:F7:B5:AB:87:84:4D:F0:A3:38:66:B3
X509v3 Authority Key Identifier:
keyid:C8:F2:58:CE:20:3E:04:A3:3F:4E:90:65:11:53:B2:59:CF:FA:3E:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e6:c4:1e:b1:c2:71:00:29:59:01:7e:7f:41:8e:91:01:d5:
50:f8:66:ba:1a:9c:49:83:36:c1:c7:ff:c9:f4:76:36:a6:0f:
58:89:67:8c:8b:b0:d8:17:f8:09:69:85:e5:2b:58:1d:15:d2:
40:e8:dc:3c:8e:5e:05:27:4b:9c:90:d5:ad:9c:46:97:b1:78:
be:b8:b5:c9:4b:f2:df:3a:3b:51:fc:74:6a:d4:18:86:03:4d:
79:c0:05:22:6e:50:55:23:b3:92:75:6f:11:25:88:b4:39:03:
84:c8:0e:fe:fc:21:27:3f:1f:2a:e5:6d:8e:fb:f6:87:e2:50:
1a:f6:2e:86:4a:93:0a:54:c0:23:da:4a:61:e9:c5:31:c2:ca:
08:43:45:55:52:91:4f:93:30:42:4d:f0:88:02:fe:57:a7:65:
09:5e:8c:31:17:c4:33:53:db:5c:a0:29:c0:66:fc:5d:a4:bc:
1a:9d:17:e1:47:0d:40:a6:8d:76:a6:8e:dd:18:88:b9:5a:0f:
d4:6a:de:08:19:73:4f:3d:3c:28:24:cc:aa:42:4b:2f:d9:48:
64:23:07:69:3d:54:ff:ee:e0:53:79:b7:a3:7e:51:1c:7c:58:
e3:e6:58:43:b8:91:d4:88:e1:aa:95:ce:c7:2b:40:1b:50:44:
70:9b:08:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:02:50 2025 by rpki-client