Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
File: yoFg7-OfGjB3_dL68ipkgEtUE4I.mft (raw, json)
Hash identifier: czR4ywvQOY9grNevcUPZocJ3X0IAbdyXl5uEs+C1KWw=
Subject key identifier: 95:54:90:C9:1B:A5:41:BF:81:34:25:A8:36:13:30:D0:1F:AB:CA:F1
Authority key identifier: CA:81:60:EF:E3:9F:1A:30:77:FD:D2:FA:F2:2A:64:80:4B:54:13:82
Certificate issuer: /CN=ca8160efe39f1a3077fdd2faf22a64804b541382
Certificate serial: 01976FD119137334ABDD620ED152DF20CC2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
Manifest number: 1230
Signing time: Sat 14 Jun 2025 19:01:03 +0000
Manifest this update: Sat 14 Jun 2025 19:01:03 +0000
Manifest next update: Sun 15 Jun 2025 19:01:03 +0000
Files and hashes: 1: h-rZd3ShfaYedaYA6tLbzrX_MkU.roa (hash: 6iJffUIazxHr4GTAEcidCyRV9SNB9d9va8nX06PMskE=)
2: yoFg7-OfGjB3_dL68ipkgEtUE4I.crl (hash: q9R3+uhbxaeGgyOpmfWJkXpRMY6F/CZzBotRdqkaW9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:19:13:73:34:ab:dd:62:0e:d1:52:df:20:cc:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca8160efe39f1a3077fdd2faf22a64804b541382
Validity
Not Before: Jun 14 19:01:03 2025 GMT
Not After : Jun 15 19:01:03 2025 GMT
Subject: CN=955490c91ba541bf813425a8361330d01fabcaf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:35:2c:ef:ed:6f:fc:1b:88:fa:c9:2c:09:
4b:da:05:a9:67:95:5b:4d:c9:2d:7e:41:59:b2:10:
d4:c5:6b:5e:e6:01:be:76:fd:ff:56:b2:4b:c4:76:
49:eb:93:41:92:e2:df:36:00:59:e9:28:7d:de:b3:
cf:87:d8:70:da:33:1b:4e:61:dc:c7:b2:45:74:89:
e0:0a:89:47:6d:fb:0b:c7:ae:a4:25:d3:f3:f0:a2:
7c:ba:1b:ba:41:16:23:3f:1b:14:4e:77:c2:b9:ab:
85:53:d2:fc:56:4a:d6:82:7a:ca:61:38:a9:ac:81:
16:5b:1a:a7:35:3b:8b:fa:4a:82:4e:2b:21:75:c5:
c4:ce:cb:e3:52:40:9d:dc:df:da:4c:24:a9:43:37:
87:39:e6:71:6c:da:0f:9c:60:a2:3b:dc:7c:8f:1a:
a4:1d:5d:fd:69:bf:44:f3:ce:10:d2:e0:8b:b5:34:
11:93:bd:28:b1:6b:21:f9:a7:fe:f9:de:62:7d:2b:
83:39:16:b1:c7:c6:93:2e:2e:7c:92:d3:be:ee:57:
04:37:f6:90:88:14:41:a4:a7:a2:3d:bc:6a:16:e8:
93:53:5a:c6:7b:84:59:60:e6:75:6a:b7:69:e6:62:
b9:88:31:e4:63:4b:17:10:e8:35:27:a6:0c:29:19:
56:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:54:90:C9:1B:A5:41:BF:81:34:25:A8:36:13:30:D0:1F:AB:CA:F1
X509v3 Authority Key Identifier:
keyid:CA:81:60:EF:E3:9F:1A:30:77:FD:D2:FA:F2:2A:64:80:4B:54:13:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:1d:34:90:2b:52:3a:b3:7e:3d:47:d5:57:3b:c2:23:b6:2b:
d1:ec:ce:6b:d9:9e:54:03:eb:09:49:e2:61:04:b0:c3:c7:0a:
a6:40:2a:df:79:6f:a3:85:44:8e:be:2c:3f:16:26:e4:2c:9e:
fe:6a:6f:f9:db:8e:32:c7:78:a9:7a:65:98:22:20:2d:f1:5f:
db:7b:86:25:c5:bc:31:f3:4b:0b:c7:82:eb:65:27:ad:ed:82:
eb:98:e5:21:73:6b:c2:a2:78:df:5f:c5:77:4b:2d:91:db:be:
e3:25:c7:0e:3d:49:b6:31:59:88:bc:58:fa:2e:1b:4c:ec:be:
ea:9c:dc:df:46:6a:f0:90:90:f6:be:33:fb:ab:13:67:f4:30:
37:34:36:03:bf:1b:a9:43:c7:f1:ca:5b:2f:c2:1e:bd:7e:64:
52:de:af:0d:b9:39:92:40:85:e5:14:f2:75:45:d6:99:03:02:
a1:8b:b8:c6:0a:50:a8:de:f9:bb:6c:95:d6:80:e7:c2:ed:ea:
4f:dc:53:d1:79:f8:d0:bd:61:3e:c5:41:9c:b1:f8:1f:db:e5:
cb:36:f6:c1:b0:39:a8:78:b8:cb:e1:7b:be:74:2e:32:11:38:
c9:5f:20:81:b7:39:14:d9:74:cd:86:ca:64:ac:10:cd:d0:8f:
15:ed:18:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:55:06 2025 by rpki-client