Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
File: yri42pzNTSYbcq2gNKCHVmWmRIc.mft (raw, json)
Hash identifier: o9ThOADmIQvYs9s+xQYtoSN7JGFwXIQKFUuZKAUzs1s=
Subject key identifier: 75:75:22:6B:DB:04:53:1D:28:6B:94:E2:E5:2F:C1:E4:5D:1F:C5:5B
Authority key identifier: CA:B8:B8:DA:9C:CD:4D:26:1B:72:AD:A0:34:A0:87:56:65:A6:44:87
Certificate issuer: /CN=cab8b8da9ccd4d261b72ada034a0875665a64487
Certificate serial: 01976BF3F8D652810C65F8C431887C0499FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
Manifest number: 14D3
Signing time: Sat 14 Jun 2025 01:00:40 +0000
Manifest this update: Sat 14 Jun 2025 01:00:40 +0000
Manifest next update: Sun 15 Jun 2025 01:00:40 +0000
Files and hashes: 1: iv4w_q_Q0lB1UAUD7TgMR_xxyYA.roa (hash: fMZ0QGK6B5sX/J++IQoulADhQ3kbWhx95qL8TpCZZ84=)
2: yri42pzNTSYbcq2gNKCHVmWmRIc.crl (hash: LsSyl+bW28rEC+gb53Z8eq313Svzt4aPSRZDHoe9cO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f3:f8:d6:52:81:0c:65:f8:c4:31:88:7c:04:99:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab8b8da9ccd4d261b72ada034a0875665a64487
Validity
Not Before: Jun 14 01:00:40 2025 GMT
Not After : Jun 15 01:00:40 2025 GMT
Subject: CN=7575226bdb04531d286b94e2e52fc1e45d1fc55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:f8:16:70:5c:68:26:ec:03:a9:ba:1c:7a:
78:8a:de:ce:c0:de:bc:b5:4a:fb:d4:78:08:a8:2e:
1c:2c:70:69:53:8e:3b:bf:c2:5a:48:cc:a6:9c:02:
a3:24:47:e0:00:2b:ff:4e:a4:54:ac:10:2e:7f:62:
d3:63:10:ed:8c:72:ec:dc:37:95:bf:82:c0:58:20:
1f:33:2f:8d:4b:07:c7:90:3f:58:fb:fb:01:1c:f3:
7d:da:15:7d:be:0b:a4:ce:e3:6c:80:48:b4:32:2e:
91:a6:50:9c:07:4a:a7:9f:3b:1e:43:43:50:16:6b:
7c:d4:e1:5e:11:5f:2e:f2:15:f3:98:e8:81:78:86:
6e:0d:85:ab:02:0f:6d:7e:14:47:7c:e1:5d:6e:ec:
73:d5:b6:79:97:c0:30:57:8f:d6:31:c3:0f:7d:ae:
64:b0:3a:5e:31:a2:2b:62:9c:99:04:38:01:9a:0f:
93:36:97:fd:79:41:cd:c9:ab:8c:03:b3:06:49:15:
03:70:0c:54:a0:41:1b:60:c9:6e:f4:c8:53:e3:9b:
28:38:7d:61:2d:e8:35:47:fc:00:75:8f:ab:f9:02:
1c:32:04:fe:3e:22:24:a1:cc:6e:43:95:df:59:c6:
c4:43:f7:b9:a5:b7:80:0d:46:c7:9e:c7:07:b8:ef:
75:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:75:22:6B:DB:04:53:1D:28:6B:94:E2:E5:2F:C1:E4:5D:1F:C5:5B
X509v3 Authority Key Identifier:
keyid:CA:B8:B8:DA:9C:CD:4D:26:1B:72:AD:A0:34:A0:87:56:65:A6:44:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:1b:f7:27:6e:79:8e:ed:c5:be:c8:d9:11:e3:59:3e:75:85:
09:c1:2f:b9:37:38:63:0b:ec:12:8f:77:68:15:9d:f0:cd:f3:
a1:6b:4e:09:e6:7e:61:61:da:6a:7e:5e:e3:4a:7f:39:06:a4:
98:00:4c:a7:58:ac:bb:66:4c:46:30:ca:8d:e7:3f:c1:7d:77:
cb:e7:ae:db:4f:32:a9:58:e3:41:78:c2:fd:fc:9d:c2:e6:97:
71:61:a7:41:56:66:5f:80:9d:16:6f:1b:34:f5:c6:1f:55:80:
7c:4f:3b:da:3b:af:cd:60:30:68:d4:5e:6d:d0:40:df:4b:fb:
82:66:13:16:07:8d:99:b2:8c:ee:f4:d6:7b:bb:5f:4e:db:1c:
6a:cb:37:47:32:75:a9:b1:19:f7:96:7e:50:27:30:13:e8:a2:
41:2a:3e:05:21:af:78:b7:e4:76:3e:f6:00:77:cb:c6:a3:81:
d6:5a:6f:67:7e:ee:5e:b1:eb:83:b1:fa:f6:bc:ae:7c:fb:e9:
e8:0b:cc:8d:d1:55:e7:f8:8b:16:4e:50:f0:c2:a1:26:11:b5:
1d:76:ec:44:09:85:80:91:b7:f8:10:ea:1e:11:16:bc:7a:db:
0a:03:35:6f:f3:cd:3a:39:99:73:47:82:25:e8:60:5e:b1:6a:
67:b7:43:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:08:46 2025 by rpki-client