Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
File: y_FtyaS1vU0MQnioXAhVkwIL6jE.mft (raw, json)
Hash identifier: +ltHEKPGQJRwXZbFPL9neHd1NiR4rdYyAaokqyKXx04=
Subject key identifier: 43:B4:04:2D:BC:18:2B:08:76:7D:DD:48:A5:3A:82:B0:F6:7E:85:B4
Authority key identifier: CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31
Certificate issuer: /CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31
Certificate serial: 01976EF4E44E2A3C39C28EA47A8B7D9976E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
Manifest number: 1222
Signing time: Sat 14 Jun 2025 15:00:32 +0000
Manifest this update: Sat 14 Jun 2025 15:00:32 +0000
Manifest next update: Sun 15 Jun 2025 15:00:32 +0000
Files and hashes: 1: uEzNWyvL5-zi2wG6wisIZYvIGW8.roa (hash: 74OlC+KGFIeOMFiETr1Upq5Oacdq7NEmnxm00bM9o0w=)
2: y_FtyaS1vU0MQnioXAhVkwIL6jE.crl (hash: lKY8jvgtne1eNrxdZFsFSfQ0qQeIqx/JlMNdLtaGRXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:e4:4e:2a:3c:39:c2:8e:a4:7a:8b:7d:99:76:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31
Validity
Not Before: Jun 14 15:00:32 2025 GMT
Not After : Jun 15 15:00:32 2025 GMT
Subject: CN=43b4042dbc182b08767ddd48a53a82b0f67e85b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:af:0a:2d:55:ec:e0:f5:51:c9:77:90:07:63:
6a:fe:69:b8:9e:62:c7:11:4f:41:20:39:b1:33:c8:
e2:e4:06:d6:fe:0e:fe:34:1f:e8:7c:fa:f1:16:a5:
2b:17:dc:cf:a3:d1:33:9d:4e:3a:13:54:0f:21:dc:
33:86:17:5c:a0:e0:aa:bc:0f:e0:f4:62:05:ee:c0:
3a:31:e5:13:f4:0a:d4:c5:12:8d:36:b0:09:20:74:
d9:da:57:67:53:30:60:e7:2a:ee:65:46:9c:88:7d:
f6:b9:a6:9d:93:10:af:58:fa:88:a2:89:a7:48:e6:
1c:eb:a2:84:70:49:79:89:c1:00:3e:1d:fc:7a:e9:
6f:6f:9d:60:d6:95:df:9f:8a:82:a4:57:d9:53:c7:
eb:48:4e:af:12:9e:98:2e:c9:c0:10:90:6d:58:5d:
ac:3d:33:f1:c1:f9:96:48:e1:ba:26:7a:26:b4:67:
df:eb:40:4c:f7:46:65:21:e3:a4:bc:77:39:a9:14:
33:49:c8:ea:0d:4d:ae:2b:5e:c8:39:12:30:20:3e:
a2:17:76:3e:d8:10:27:4a:e1:19:41:c4:a3:42:72:
cd:01:97:ff:7d:34:5b:8e:c8:23:10:3d:20:4d:83:
8a:dd:56:cf:75:f4:20:cb:87:e8:8b:89:75:f3:c7:
ed:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B4:04:2D:BC:18:2B:08:76:7D:DD:48:A5:3A:82:B0:F6:7E:85:B4
X509v3 Authority Key Identifier:
keyid:CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:28:16:d9:3b:d0:c8:fd:f5:48:f2:72:c7:e4:a7:d8:8d:24:
3a:1e:1a:4a:cd:f4:90:ee:28:7a:b1:9a:7a:85:66:65:1a:c6:
09:e9:63:ce:10:09:71:40:d9:39:fe:c3:5c:f1:d8:9d:49:04:
7c:c5:56:ed:16:02:b8:f9:d9:79:37:e1:57:42:a3:3a:23:82:
82:12:4d:0d:30:3b:4a:f5:ad:0a:7f:98:c4:a1:14:fe:4d:08:
0a:a2:cd:7a:9b:a1:55:1d:50:31:12:17:86:7b:22:a2:50:46:
c0:82:78:ee:70:35:a9:14:d7:6c:cb:29:2d:07:2e:9d:97:18:
d2:9c:ce:b0:a6:10:f4:c6:f5:4a:fa:c9:ae:27:c6:95:b0:db:
4a:ca:86:64:9c:b1:ba:6a:ae:15:ad:27:2d:5f:81:13:49:b2:
17:b1:f9:51:86:cc:9d:99:8e:bc:a1:d8:1f:e4:75:ad:36:1b:
3f:8d:5d:8d:ab:d4:a4:42:9e:2a:e6:21:df:54:79:dd:c5:da:
cd:fa:f9:fe:2d:bf:6d:65:43:0f:a9:c6:a1:f3:bf:54:82:1e:
7e:ae:87:47:b6:bf:bb:47:55:4f:e6:cf:c1:e2:37:93:9f:85:
d7:ce:55:ed:a2:fd:c8:5e:eb:da:a2:37:6f:23:02:41:4e:67:
74:b0:47:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:15:29 2025 by rpki-client