Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
File: yvF4APGUOvHFFChMw754Dpwh3Xg.mft (raw, json)
Hash identifier: jk/7uKhEFGCiQTkwZDOaLPYd/4VB1PeOOnw8VGufhkA=
Subject key identifier: 67:C4:D6:41:93:13:40:29:9D:FA:A4:F4:E0:9F:39:E7:33:C4:36:DD
Authority key identifier: CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
Certificate issuer: /CN=caf17800f1943af1c514284cc3be780e9c21dd78
Certificate serial: 01976C2AEAD83DFB6B912D0EA53269E95A7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
Manifest number: 09DC
Signing time: Sat 14 Jun 2025 02:00:41 +0000
Manifest this update: Sat 14 Jun 2025 02:00:41 +0000
Manifest next update: Sun 15 Jun 2025 02:00:41 +0000
Files and hashes: 1: sjAjhtjT9idj_VOPKz21hZUiTyM.roa (hash: GIvaCG/17riJHZiERj633+3ciTXhudtU1ZczZq4oF9g=)
2: yvF4APGUOvHFFChMw754Dpwh3Xg.crl (hash: GQ/PEuA85LgkFMFiXmNThfZ2Q2GIS+uWbNmCaO63SIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:ea:d8:3d:fb:6b:91:2d:0e:a5:32:69:e9:5a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf17800f1943af1c514284cc3be780e9c21dd78
Validity
Not Before: Jun 14 02:00:41 2025 GMT
Not After : Jun 15 02:00:41 2025 GMT
Subject: CN=67c4d641931340299dfaa4f4e09f39e733c436dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c8:b8:34:69:7a:1e:d7:c0:f4:d9:49:c0:46:
bf:90:9a:99:60:df:ae:de:c9:55:56:45:a1:31:56:
ae:97:9e:c8:38:bf:85:6e:12:08:0a:15:4f:20:3e:
60:1e:e3:02:52:01:4a:dd:d6:2d:df:b8:c7:bb:80:
a3:f1:a4:66:0f:6b:5d:1d:fe:3d:6c:c0:e9:97:33:
45:a1:76:18:3a:29:b3:91:be:30:4c:53:16:8b:6d:
f1:87:01:28:36:c2:30:32:17:3f:d1:9b:9f:be:59:
80:5e:21:8d:da:4e:62:d6:30:59:c7:f4:93:f5:f3:
f6:4f:85:2e:51:11:3a:3d:b9:d8:4d:60:2a:e1:1e:
c3:a3:87:66:4d:4b:42:8b:34:7e:60:c6:f3:9a:c7:
90:4d:b8:d4:e4:6a:76:13:08:51:1c:d6:d9:3f:e9:
e6:c7:0d:b1:7d:af:8a:8a:40:89:aa:2f:35:0c:2e:
ac:54:6c:07:d3:58:e6:25:dd:44:cc:55:e2:30:75:
53:ab:29:40:5a:23:e5:a9:ce:96:29:f8:2b:ae:a1:
f9:c2:ff:0b:11:bc:49:18:5e:ee:42:77:b9:b2:4a:
aa:d5:a4:d3:7e:75:4c:b5:5f:94:d9:f1:9d:6b:51:
c2:89:e6:d4:b8:0e:ff:69:d3:d8:64:c0:23:5e:82:
3c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C4:D6:41:93:13:40:29:9D:FA:A4:F4:E0:9F:39:E7:33:C4:36:DD
X509v3 Authority Key Identifier:
keyid:CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:54:84:9b:14:3d:0e:a7:7e:a2:f5:1f:28:76:73:4c:ad:68:
5c:73:16:cd:be:b2:16:b2:cf:cf:a9:81:de:e2:23:48:5c:bf:
2a:b2:e8:cd:a2:93:fb:bb:15:10:2d:aa:0a:96:d4:63:06:45:
f5:56:53:38:46:1f:44:96:b4:8a:54:91:57:6f:73:d8:50:37:
c1:f4:92:1e:9b:92:42:5c:8f:74:9f:38:c7:21:b3:5a:88:bb:
ae:96:86:63:62:c7:2f:c4:ec:d7:ab:3a:1b:52:6f:49:41:17:
09:8b:20:8e:88:f8:4f:8b:d1:74:a1:98:bd:77:0b:73:8f:c3:
2c:c6:51:d7:0e:1e:14:5d:07:fc:e1:27:50:cf:7a:f8:bd:07:
f9:4b:4b:d7:a3:39:c8:43:c7:20:9f:71:93:21:04:07:e5:d0:
09:0d:24:f6:78:f5:bb:51:23:2a:fc:99:16:46:ef:45:4f:02:
87:55:c5:55:83:8e:4f:c5:ed:52:36:56:86:29:e6:2a:b2:2c:
e1:cb:2d:71:ae:14:48:8e:27:6d:6c:62:b9:1b:a6:f9:d0:1e:
af:b7:85:1d:bc:37:b2:ee:59:0c:84:2f:8a:4c:42:3a:40:b7:
55:cd:79:0c:1e:6b:11:31:c4:ef:3b:b7:c3:3b:0b:f1:ba:93:
0c:1c:d3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:00:45 2025 by rpki-client