Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
File: yikNsvcpBfDbYmsAW6zwiHjRe6w.mft (raw, json)
Hash identifier: U8bxz0mAg1offOhqXe9vk0wslLuIzDK3YSSlbTKS6qA=
Subject key identifier: 06:DF:B3:68:FA:9E:1F:D9:E1:F7:80:15:62:EE:75:A2:9C:CC:82:88
Authority key identifier: CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
Certificate issuer: /CN=ca290db2f72905f0db626b005bacf08878d17bac
Certificate serial: 01976C2B742CD89739E15CD782E884448FA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
Manifest number: 09B7
Signing time: Sat 14 Jun 2025 02:01:16 +0000
Manifest this update: Sat 14 Jun 2025 02:01:16 +0000
Manifest next update: Sun 15 Jun 2025 02:01:16 +0000
Files and hashes: 1: 9ioUlNkUNYBcxyTxkX3rgt5A0s0.roa (hash: FAkZUvlkFTeURhyGPk/Cqy2vo8UntR2/HehcNI9EJVU=)
2: Fw_kxU9y2ZFFUFhTyjj3cOM8HE0.roa (hash: RbilBDizHS14qZ4Da7c1uCTbplJrxj3lujK+7Ie1xww=)
3: OmRK258WRmdVFaT1b4UKAJEmXF8.roa (hash: S9zpMDpc5tR1fodrfsOibu5FLjUO5h2bsiNgqTRPaIQ=)
4: _6UZkqieR9kIkKZwwfKfkm35fd4.roa (hash: TAVIhSh9eMt1b6339NxSWJ46JPMbHN7C8v9n3qx3ibk=)
5: gqWeYouP3tCgtjbkj-l_gQg8hIo.roa (hash: /JDKYsMSdFrnBptTFdWQqSfzinHaa7LMqQq1Q4agYW8=)
6: iqYLpAFtuo6gr-j-Ly-Vnr8R2MU.roa (hash: qX/Ce2Cu2rGWIQEWtxm8FeM0QBiPxiljZdApDi//miE=)
7: yikNsvcpBfDbYmsAW6zwiHjRe6w.crl (hash: Vnthav4zwObhO2XpI+Ww7FG4sMZbZoqn8NFnsIB2c/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:74:2c:d8:97:39:e1:5c:d7:82:e8:84:44:8f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca290db2f72905f0db626b005bacf08878d17bac
Validity
Not Before: Jun 14 02:01:16 2025 GMT
Not After : Jun 15 02:01:16 2025 GMT
Subject: CN=06dfb368fa9e1fd9e1f7801562ee75a29ccc8288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:11:93:41:43:86:3e:6e:5c:dd:13:73:d1:90:
6f:0a:9c:0d:7e:71:7c:58:33:88:e8:43:23:01:25:
0e:a4:26:c7:a8:3b:cd:c8:ee:a9:9e:9c:93:01:54:
14:c9:ae:f1:b3:88:9e:37:a9:63:ec:cc:5a:47:78:
85:5c:70:a6:52:56:f5:e5:fd:5c:03:56:e1:e9:92:
3d:59:29:22:b0:85:af:15:ca:b4:14:ed:14:cf:5a:
7e:f7:4c:37:a8:8e:95:29:4a:1b:66:e2:58:95:a5:
e1:8b:3a:e4:6d:21:80:ef:89:4c:0c:44:de:11:41:
46:1c:ce:b3:57:73:a4:fc:e5:73:60:80:4f:b4:83:
d4:ad:d1:d5:64:77:65:b7:73:82:e9:4d:29:5d:41:
58:31:d3:f8:81:80:24:ff:12:0d:ef:2e:0e:a2:e3:
33:1c:7d:3f:6e:23:93:1b:c6:3d:c3:fc:3d:df:d9:
a0:50:fc:3c:4d:55:c5:1d:f2:98:cc:ee:51:d8:96:
d9:a2:1f:7c:f9:e1:7f:52:6d:3b:1d:56:4b:69:35:
ef:1b:15:19:67:2a:33:cd:3b:c2:ec:e0:16:47:18:
bf:b9:ee:99:98:5a:bb:7a:b2:53:f2:02:63:08:62:
e1:0a:4b:92:d5:54:e7:1e:71:79:41:e6:13:e0:8c:
47:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DF:B3:68:FA:9E:1F:D9:E1:F7:80:15:62:EE:75:A2:9C:CC:82:88
X509v3 Authority Key Identifier:
keyid:CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b8:ba:16:9c:f5:36:ea:6b:00:f9:c5:97:fa:c3:af:45:f3:
f3:82:10:4f:2b:62:82:a4:9a:2d:28:10:d4:9a:aa:33:62:6d:
e3:99:dc:0d:81:32:17:89:0f:f9:ba:c5:71:ce:65:71:99:64:
b1:0f:df:4b:84:48:3c:b0:57:3b:b3:1a:e3:8b:d2:3d:e7:e1:
aa:ac:92:1a:c4:8a:c1:2c:6a:04:3d:4f:4d:28:be:a4:8a:f4:
91:5a:81:00:f9:db:15:59:ea:a2:d6:3b:54:62:93:ae:84:25:
1a:b7:94:ea:df:5c:0f:70:ab:45:de:9b:2a:28:16:a8:70:34:
29:13:af:6f:d8:2a:1d:6f:97:18:c6:52:0d:9f:73:7a:6d:4f:
23:16:bd:c0:92:72:17:b5:23:e2:06:f3:83:14:52:32:6f:ac:
94:59:07:bf:e1:a4:a9:c2:18:98:bd:1b:26:57:98:2a:41:b4:
43:6b:eb:f6:63:7a:86:40:4b:fa:72:fc:83:75:c1:fa:9d:15:
3f:57:43:4b:0e:82:6a:a0:11:f4:0d:db:bd:65:2e:a7:dc:c8:
87:f7:29:ad:31:a8:bb:7a:fb:d1:a4:ee:31:f9:4a:be:e0:ce:
7b:e2:af:18:b2:1c:e5:45:d9:02:aa:22:af:76:ff:72:aa:79:
41:32:a5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:48:50 2025 by rpki-client