Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
File: yzgoFbJRYTZakWEMva1x9mKG94E.mft (raw, json)
Hash identifier: lrcDKwGd4r2MUVO9dH3s5ppoj+20XrairQeq85pYawY=
Subject key identifier: 86:68:F0:F5:B8:A7:C6:32:48:84:4D:17:EE:EF:D9:B0:86:D8:4C:6A
Authority key identifier: CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81
Certificate issuer: /CN=cb382815b25161365a91610cbdad71f66286f781
Certificate serial: 0197782F1DDC6CEA9C5C4655E00CF3D36289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
Manifest number: 0982
Signing time: Mon 16 Jun 2025 10:00:43 +0000
Manifest this update: Mon 16 Jun 2025 10:00:43 +0000
Manifest next update: Tue 17 Jun 2025 10:00:43 +0000
Files and hashes: 1: Mo_PTp1RnKkJnXxtlC7OWx0YSxQ.roa (hash: YFv4cH8jBfWT6Q+LN0D+DWnRT7DQ1QH3WQI1NP0LJho=)
2: yzgoFbJRYTZakWEMva1x9mKG94E.crl (hash: 0uMVk/wyIdkUTfARuuqb/YZXz8dg+IFl2trY8jWaZ3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:2f:1d:dc:6c:ea:9c:5c:46:55:e0:0c:f3:d3:62:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb382815b25161365a91610cbdad71f66286f781
Validity
Not Before: Jun 16 10:00:43 2025 GMT
Not After : Jun 17 10:00:43 2025 GMT
Subject: CN=8668f0f5b8a7c63248844d17eeefd9b086d84c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:95:1a:33:8a:04:eb:5c:bf:06:39:3c:b1:95:
b4:1d:8d:dd:15:24:57:66:47:3c:05:fa:fd:0c:04:
90:f0:83:8d:9f:f4:42:c1:ae:2e:17:e9:4b:3b:d5:
07:c6:74:5e:ec:13:fe:7c:fc:73:43:b8:d3:91:9a:
6f:82:de:c7:1c:5f:05:3e:13:4c:fa:b8:b2:22:23:
88:2c:91:10:87:01:60:09:0a:da:85:99:d5:6e:bd:
62:02:e3:68:bc:79:8c:f8:b8:ab:6b:4e:76:a9:a7:
c6:20:b3:32:cc:e6:d4:6a:ad:b5:a3:5b:9e:e7:e2:
d4:9f:d2:61:50:30:c5:85:a3:e1:33:50:a6:20:00:
9d:5d:cf:76:82:40:ec:c0:de:e2:a5:3e:79:f6:3c:
1d:91:b5:40:b4:89:59:ec:04:02:f9:1f:3b:97:b0:
13:6b:18:50:db:03:37:3b:ca:1b:94:80:55:69:86:
79:91:d7:78:3a:76:25:91:88:a2:45:13:90:b4:6f:
70:2b:ed:08:78:1c:71:e1:a5:0c:33:a9:60:d1:a3:
a6:aa:9e:f3:6f:73:d8:9e:28:4a:6a:fd:51:f1:f2:
44:88:ae:5f:80:24:ca:f4:ab:b9:71:46:62:04:2f:
21:d4:bc:c6:9f:b0:38:3e:48:6b:03:bb:f4:90:43:
02:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:68:F0:F5:B8:A7:C6:32:48:84:4D:17:EE:EF:D9:B0:86:D8:4C:6A
X509v3 Authority Key Identifier:
keyid:CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a8:da:ef:f1:26:63:1d:ad:4d:26:28:93:cc:b4:30:5c:c1:
28:6d:9a:b4:2c:4b:38:7b:01:78:d9:d5:5a:37:bb:4a:f1:36:
4d:58:e5:2e:cc:29:47:75:37:c0:d3:40:fd:65:a7:6d:02:cb:
93:e5:2f:cf:38:d6:c9:b9:57:cb:34:fa:18:2c:87:08:24:3f:
e5:ba:e1:ce:7f:2e:02:82:50:a9:ad:f9:b2:cf:25:ac:f9:36:
e0:11:b6:9c:0c:d3:e9:e5:a2:ef:f8:5c:90:1c:0e:46:17:6b:
d6:54:20:7f:52:22:f1:6e:5b:60:8b:5d:6d:e8:fb:e0:a3:c8:
3f:b1:32:c1:86:c9:96:79:b0:43:94:e6:7b:b6:a3:83:9a:06:
ac:3d:92:d0:39:23:c1:2e:ea:d2:23:56:7c:18:f5:74:1d:47:
51:66:97:1b:1c:64:a9:7c:1d:d9:24:ea:5d:27:6e:66:63:13:
2e:46:b9:ac:45:1f:a2:83:47:d4:32:37:b5:7c:86:02:eb:4a:
f2:20:81:b7:c1:27:70:54:2e:6c:74:c7:82:83:cd:43:51:53:
2f:5b:7b:29:55:cd:d1:87:a8:54:ad:c4:a2:14:fd:02:95:f4:
8f:9f:5e:2f:5c:9e:6f:43:0d:25:61:cd:51:1c:3e:6d:e2:41:
7c:91:22:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:28:32 2025 by rpki-client