Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
File: yd_q7KItLSYYtDPPAKsUS9i4Db0.mft (raw, json)
Hash identifier: jpjGcqNTL7uIwHdoPkl9Ch71h+JspfAVx40QtGV8prE=
Subject key identifier: 6A:4D:95:A4:5B:CB:47:14:91:C9:05:D5:44:B2:E1:10:5A:DA:0D:F2
Authority key identifier: C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
Certificate issuer: /CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Certificate serial: 01976DE29BCF598C2A1E4E1D29B8BB779FC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
Manifest number: 06C3
Signing time: Sat 14 Jun 2025 10:00:56 +0000
Manifest this update: Sat 14 Jun 2025 10:00:56 +0000
Manifest next update: Sun 15 Jun 2025 10:00:56 +0000
Files and hashes: 1: YSlfWP3DY80Smx0TIqkuPzTOoec.roa (hash: zxri6NDPBUgI6E9l7vT1svBXNo7QAt30+iiVihETiFE=)
2: yd_q7KItLSYYtDPPAKsUS9i4Db0.crl (hash: bPXnV+fHyyGreLo2GmegWp5M49XPW6cFmDKFJMQmyds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:e2:9b:cf:59:8c:2a:1e:4e:1d:29:b8:bb:77:9f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Validity
Not Before: Jun 14 10:00:56 2025 GMT
Not After : Jun 15 10:00:56 2025 GMT
Subject: CN=6a4d95a45bcb471491c905d544b2e1105ada0df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c3:9c:da:ba:b1:54:6a:1b:ea:e1:a2:20:00:
33:e2:5f:4a:64:77:45:00:df:09:44:e6:83:14:17:
f2:a1:58:b1:0d:8d:24:98:6a:ae:86:89:69:3d:0c:
ae:31:fc:72:ba:19:7c:79:9f:70:dc:a5:af:52:f6:
5d:2d:0d:0a:98:3b:55:e4:e0:f0:ce:cc:b3:96:ba:
92:83:b9:32:c7:2a:8e:50:42:58:f5:04:be:2b:07:
ca:83:77:fa:be:99:b6:5e:76:60:90:c4:a8:e7:93:
78:90:b7:a1:42:af:92:99:14:cf:e0:34:ad:b5:b6:
2f:3c:ad:1c:25:1d:d1:65:06:32:09:5b:fc:52:ce:
4c:37:74:33:e1:04:29:81:75:63:cc:de:52:cf:b3:
df:1a:41:df:de:bc:78:2e:a8:c0:1a:0b:6d:5f:ea:
46:8b:bd:08:c1:40:ed:47:86:00:99:e0:46:0c:1d:
59:15:ae:8b:67:32:03:0e:9d:31:c9:84:00:a9:78:
8a:ca:f5:77:c5:86:8c:01:51:4a:77:67:62:f2:e3:
bf:a8:b1:c3:e3:5c:ec:94:89:64:7d:47:75:ec:c8:
9b:72:2d:81:76:b3:a6:db:dc:4a:fc:ab:69:6e:ec:
78:36:07:3b:bd:b8:88:63:a2:96:25:77:d9:4d:5c:
41:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4D:95:A4:5B:CB:47:14:91:C9:05:D5:44:B2:E1:10:5A:DA:0D:F2
X509v3 Authority Key Identifier:
keyid:C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:3f:ec:69:29:23:91:c1:0b:55:20:6a:6a:61:2e:a7:86:56:
bc:ac:8c:25:43:69:9f:81:c8:d6:e3:64:f1:ac:10:65:12:78:
da:62:48:e1:67:a2:12:38:c2:71:68:cb:98:12:c1:47:d4:50:
6d:01:3f:21:fe:44:a9:bb:85:d9:f8:2f:7e:12:6a:40:ab:9a:
24:a9:76:3c:d6:e1:54:7f:52:16:39:92:40:3f:cc:90:67:d4:
62:19:76:b6:72:a9:a8:df:56:d5:a0:13:75:14:bc:22:f4:7f:
e6:2a:a0:2e:00:f1:c8:8d:00:36:86:2a:30:a2:65:a9:0e:f2:
0e:2b:e0:58:a7:5d:fd:b3:60:23:f5:57:95:bc:e2:80:8d:b0:
7a:9b:97:f9:11:59:27:12:4f:49:c7:a3:40:ed:13:ce:1c:10:
42:58:6a:90:c9:d2:8e:77:87:94:6f:ed:cf:fe:65:a2:d1:d2:
81:31:0f:18:cb:22:4f:3c:9b:a5:91:31:16:6b:ff:8c:46:57:
b4:ee:d3:b8:b3:ac:8c:40:10:e3:f2:2f:4a:5a:96:bf:83:7b:
d4:ed:3f:b6:73:2d:8a:22:00:ed:62:59:f0:ae:ed:87:c2:dd:
42:29:81:12:dc:ce:24:17:7a:44:25:26:eb:4c:5c:42:0b:ac:
93:13:e3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:45:18 2025 by rpki-client