Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
File: yCnhDha8eb_FbFNVflsapVnMdDU.mft (raw, json)
Hash identifier: hgIA4zi8MPEwqGrau/I62zBciRouPXFgp3tRc9DCnuw=
Subject key identifier: 1C:B2:44:65:79:E1:28:7A:90:6D:E4:0A:F6:B2:1C:C8:9F:44:1B:33
Authority key identifier: C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35
Certificate issuer: /CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
Certificate serial: 0197820DC67E0FAEDC714FF73AE25A24E8B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
Manifest number: 0867
Signing time: Wed 18 Jun 2025 08:00:30 +0000
Manifest this update: Wed 18 Jun 2025 08:00:30 +0000
Manifest next update: Thu 19 Jun 2025 08:00:30 +0000
Files and hashes: 1: jr7Oi-VOBv_LBDGgARbH5yi0fCE.roa (hash: 9cEsiuQyqTFkaGMrbbHrCUpW4clJajhU8ds2+OGo5cc=)
2: yCnhDha8eb_FbFNVflsapVnMdDU.crl (hash: 8fIVXUFtVUsmvLTmMMcNUcZq5QV8KC6FDpmZm2VMJU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:0d:c6:7e:0f:ae:dc:71:4f:f7:3a:e2:5a:24:e8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
Validity
Not Before: Jun 18 08:00:30 2025 GMT
Not After : Jun 19 08:00:30 2025 GMT
Subject: CN=1cb2446579e1287a906de40af6b21cc89f441b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ea:d3:14:02:3a:39:41:25:05:85:e9:7c:55:
4a:01:da:be:79:b1:00:1e:86:80:20:c5:dc:a0:73:
7f:0f:89:3a:44:7d:9f:00:5b:ab:90:40:e9:e2:ce:
70:12:f2:e7:a8:aa:1e:c5:4b:69:56:c3:2b:05:ba:
fd:7b:a8:14:c1:b9:e0:b2:8d:e5:1e:56:64:7b:fb:
bd:56:40:34:2c:c2:54:fa:f8:ab:37:92:eb:55:ac:
c5:82:70:be:37:b6:e5:d3:43:2f:ed:8c:d9:d6:6e:
ca:a9:05:a6:a3:79:27:cc:08:37:cf:1f:7c:db:16:
fe:c5:68:44:f3:de:39:b2:9e:63:eb:8c:78:2e:72:
24:b7:95:6a:9a:8d:62:66:3c:f7:06:f2:d5:6d:69:
98:7d:e7:67:36:58:3c:19:90:9e:9c:ad:19:aa:cc:
f1:e6:e7:45:f5:a0:4f:18:52:60:10:53:2a:ae:ba:
bb:f8:69:8f:6a:0a:a9:df:06:b3:c1:24:c8:c6:ba:
63:79:2b:c7:db:6f:5e:cc:ce:6a:49:80:7e:0c:2f:
ff:1e:52:1a:84:48:d8:b7:24:50:d7:04:5f:79:22:
6b:02:3d:a1:d8:da:ff:93:ec:cb:1a:f2:38:6a:d2:
4a:5f:9d:b0:1e:e5:34:80:9e:3c:1e:ee:5b:c7:bd:
11:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B2:44:65:79:E1:28:7A:90:6D:E4:0A:F6:B2:1C:C8:9F:44:1B:33
X509v3 Authority Key Identifier:
keyid:C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:3c:d2:42:0b:fb:c5:5f:dd:e2:fd:d6:b4:f6:9f:08:ba:c2:
cd:19:db:da:62:32:c8:90:43:a2:f8:4f:aa:da:07:b4:48:e3:
94:0a:57:ac:cf:7c:95:b7:91:bc:5a:36:a6:1e:0c:79:dc:7f:
9d:3a:ee:bf:f9:fc:f8:2c:ae:05:4a:b3:52:2d:f8:a6:42:cd:
7b:b5:e0:7a:5e:4c:a9:e5:bd:83:39:73:d1:fc:78:d2:45:67:
5e:ad:8e:d2:6b:04:18:b1:55:72:69:c9:c8:7e:9f:6c:a4:c5:
de:31:55:ec:75:b4:17:30:fe:68:64:e3:f3:d2:4e:2a:72:a2:
3f:71:31:7a:f0:aa:c3:7c:61:0c:5e:cc:fb:59:81:1d:e7:ba:
fa:a2:42:81:f5:ea:4d:62:1f:9a:f7:61:08:84:49:1e:9e:6d:
99:e4:91:cf:f4:d2:64:22:c6:37:30:2c:d6:b3:8e:b1:69:c7:
a4:87:bc:70:d2:16:c2:1a:c8:d3:05:46:79:23:5a:00:a7:77:
c0:ec:13:c2:f3:72:c2:87:ba:2c:b0:08:9a:11:98:83:33:6f:
c3:54:1d:63:5f:41:72:bc:01:9a:14:a0:1f:fd:e4:db:e5:19:
7f:d1:91:dc:57:bf:90:f1:3a:8b:ee:0c:53:40:79:26:b4:9b:
1d:65:71:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:03:13 2025 by rpki-client