Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
File: yHR0zrha8xEi7eWG1NZbD1tNl_A.mft (raw, json)
Hash identifier: yJzfqGw5CCsDeLLcPc612JkkTp0E+q3fm5+nUSrm2Bg=
Subject key identifier: 90:71:D0:66:1A:C0:2B:8F:5A:1F:60:00:41:26:C6:2A:34:D9:03:B0
Authority key identifier: C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
Certificate issuer: /CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Certificate serial: 0197868F3E601FAA02CAEF87585F426774F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
Manifest number: 159F
Signing time: Thu 19 Jun 2025 05:00:23 +0000
Manifest this update: Thu 19 Jun 2025 05:00:23 +0000
Manifest next update: Fri 20 Jun 2025 05:00:23 +0000
Files and hashes: 1: JDEgNxAB09AUh6owQNZeZtBtGuM.roa (hash: mbF3wS/KwnnaSKoNDphyfrKVcXZhcSZyXmhtgyyil/4=)
2: h9QHPHPgriAH9IrwluwQdT3LGdE.roa (hash: Tqsnz0XXMc5csYtxxzDh5cjERR+4yLVbUs/Q+m4fJwI=)
3: yHR0zrha8xEi7eWG1NZbD1tNl_A.crl (hash: qBJU0fuTPNmjtzKUbN7e8ZuUOy86GBIs88c6khQix88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:8f:3e:60:1f:aa:02:ca:ef:87:58:5f:42:67:74:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Validity
Not Before: Jun 19 05:00:23 2025 GMT
Not After : Jun 20 05:00:23 2025 GMT
Subject: CN=9071d0661ac02b8f5a1f60004126c62a34d903b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:28:f9:d7:a7:33:b8:c7:57:65:83:51:f5:0b:
9a:2b:c5:d8:c3:e1:4a:d2:7d:78:03:0a:99:a4:56:
31:54:d2:4e:30:b9:b8:9c:16:ed:94:45:25:c3:a6:
fc:4c:23:1d:f7:83:ea:0b:71:4b:9f:d9:f8:a8:41:
7c:8f:eb:b4:7e:57:44:df:12:1e:27:a2:8c:f9:fb:
5b:16:f3:62:0e:a8:60:24:58:ec:8c:86:ec:db:5a:
61:4f:7b:b7:ce:ee:0f:21:ba:66:ab:4b:04:1e:82:
31:75:39:70:ce:cf:53:0d:92:36:69:21:7e:60:3a:
d6:b6:29:79:ea:83:a7:8e:79:34:a0:18:cc:0d:76:
1b:e6:8a:58:62:72:02:1b:f6:45:90:71:98:5a:78:
96:3d:b7:ae:c1:be:eb:0a:58:30:d9:34:4f:e8:d3:
f0:7b:0a:a6:34:6c:c1:73:36:95:31:cd:f1:4a:2b:
ae:61:cc:ba:2a:d6:e5:df:7f:22:49:26:30:e2:0e:
6f:f5:ef:6b:95:22:1b:99:c4:3c:fa:f7:56:5f:36:
78:23:4c:29:42:c6:7c:2a:38:24:3c:1f:bd:ea:ea:
c3:d9:50:ad:af:9c:7e:ad:5f:2c:12:5c:44:40:24:
ff:bf:11:9e:09:4e:be:13:d6:1b:94:29:c6:07:a2:
84:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:71:D0:66:1A:C0:2B:8F:5A:1F:60:00:41:26:C6:2A:34:D9:03:B0
X509v3 Authority Key Identifier:
keyid:C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:51:95:35:9c:d7:f6:17:a9:a6:7c:48:d2:8a:7f:b1:6c:f0:
c3:25:61:c1:6e:3d:db:56:11:72:40:28:1b:05:65:76:1f:68:
d6:1b:87:3b:5c:39:4b:d9:e8:a1:7e:71:fb:e0:be:f5:3c:f5:
66:c0:23:f2:57:b1:39:d2:bb:6e:37:c6:24:c7:19:9b:2f:ab:
92:0b:c9:5e:d0:d3:c7:b5:8b:7f:02:ec:2d:2a:d7:7c:0e:94:
82:be:25:a1:41:2f:20:c0:d9:b2:96:e5:84:16:db:3b:4b:fc:
1c:98:24:17:9f:94:c8:d9:46:ca:1a:c0:37:b1:53:af:a3:3e:
69:74:63:e3:9f:42:ec:9f:bf:bf:42:9e:f2:72:63:a8:f9:d8:
73:55:e6:14:41:c7:80:81:04:cb:b0:3a:26:ee:df:4a:1b:83:
6d:5e:95:f4:cc:08:ad:b1:24:49:3a:46:a8:39:fb:92:b6:6f:
41:96:d1:b6:0d:7a:0d:c2:d7:cd:28:e7:48:15:ad:b3:63:05:
61:52:8c:c1:a2:13:12:12:b9:d6:52:a8:c7:2d:f6:c4:f9:20:
32:e2:15:2e:c1:8e:97:02:86:12:2a:ec:8d:72:7c:4e:94:98:
01:a1:59:68:2f:e8:5a:a3:7d:04:30:9c:be:8b:d9:8a:1d:b6:
a5:58:f0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 09:08:52 2025 by rpki-client